Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa
File:                     3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (raw, json)
Hash identifier:          r+jR1/p2ThsRDYRBZVdSZRsZB3W9lST2xfLZ/KbiEB8=
Subject key identifier:   AD:6B:4E:3A:62:96:AF:C1:9C:77:51:C0:72:4E:F8:12:3A:CF:B8:94
Certificate issuer:       /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F
Certificate serial:       6CAE6FF8047616E5A4407B1D8F8126FAFD30FC07
Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa
Signing time:             Sun 03 May 2026 03:01:10 +0000
ROA not before:           Sun 03 May 2026 02:56:10 +0000
ROA not after:            Sun 02 May 2027 03:01:10 +0000
asID:                     136854
IP address blocks:        103.102.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl
                          rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ae:6f:f8:04:76:16:e5:a4:40:7b:1d:8f:81:26:fa:fd:30:fc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F
        Validity
            Not Before: May  3 02:56:10 2026 GMT
            Not After : May  2 03:01:10 2027 GMT
        Subject: CN=AD6B4E3A6296AFC19C7751C0724EF8123ACFB894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:a0:4f:15:be:c3:5e:28:e7:2e:f8:6a:7f:
                    10:6c:ee:1b:2b:ed:e1:9b:44:f9:8e:28:8a:f1:eb:
                    49:11:8f:b1:6a:52:b6:49:89:c8:e0:2c:fc:52:c3:
                    e8:7d:ef:97:aa:5c:63:f9:67:6c:91:06:7f:f5:1a:
                    07:1a:47:8d:ac:f2:01:e5:8c:cf:1c:03:4a:98:ef:
                    5b:85:56:91:95:6c:3b:15:85:7a:a7:8e:18:7f:64:
                    90:7b:fc:a8:d3:1c:f6:62:58:5a:4e:00:61:47:d4:
                    41:8c:82:41:35:1d:f0:10:c9:dd:b2:95:37:9b:0c:
                    b1:79:81:70:f6:9e:3f:09:41:ba:cd:8e:ed:05:b8:
                    5e:c7:d2:59:9d:42:fa:8b:e8:c4:74:35:f4:9f:27:
                    95:c1:04:1f:57:bb:78:c3:ee:59:a4:c8:51:9e:f8:
                    78:8b:21:7d:bd:10:7a:30:05:a3:f4:8b:1d:48:fe:
                    ae:37:16:2e:c9:0f:d4:b1:93:62:94:eb:f1:5b:16:
                    aa:62:be:e2:76:46:27:bf:bf:21:4e:92:68:41:04:
                    80:bc:87:c8:29:7c:01:50:91:e4:8e:2c:38:ad:71:
                    a4:cf:32:16:ae:23:55:14:e4:ce:8e:70:e5:84:19:
                    48:5f:d1:65:27:2e:d7:ca:fc:b8:78:e7:a8:46:d4:
                    6d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6B:4E:3A:62:96:AF:C1:9C:77:51:C0:72:4E:F8:12:3A:CF:B8:94
            X509v3 Authority Key Identifier:
                keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:8a:a6:c6:04:89:57:2a:93:43:67:b4:6b:32:e1:ed:3b:fd:
         b6:e6:42:45:74:c3:1b:51:f9:8f:48:30:1a:dc:62:f9:6f:d3:
         7c:60:1b:c1:40:84:93:e8:41:60:09:ce:29:d7:8f:56:53:a5:
         78:75:c0:c4:40:73:2e:13:28:81:a8:db:be:fd:d2:a2:86:72:
         b3:38:61:84:93:ea:24:13:fc:37:80:93:20:23:6f:a5:78:a5:
         af:72:6a:18:70:b4:a2:3e:36:9f:3d:bf:9b:0a:56:c0:d7:43:
         8b:48:45:91:a7:a5:09:fc:62:37:38:5e:7c:05:d8:b7:3e:14:
         99:6f:67:15:5c:5e:28:6c:cc:2e:4f:40:1b:0d:bd:f1:c2:e0:
         51:d3:32:b3:bc:8e:27:65:b7:71:3f:36:1e:14:2a:06:c4:d2:
         49:4b:8c:8e:84:f6:c3:e7:4b:85:fc:4e:94:bb:ad:4f:7b:c0:
         41:60:19:2f:9b:15:fc:2e:ce:db:33:28:08:96:99:4e:06:6e:
         1e:07:ca:4b:a5:f9:87:e2:af:75:24:6a:70:96:3a:5b:18:2d:
         ba:6c:41:48:cc:1c:83:02:5f:74:d4:75:12:76:0a:21:16:2d:
         c6:1c:68:a3:39:5a:dc:19:8e:4f:82:cb:1c:90:dc:2e:1e:c9:
         65:4f:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:15 2026 by rpki-client