Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa
File:                     3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (raw, json)
Hash identifier:          Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=
Subject key identifier:   E3:6F:47:F2:53:3A:19:E7:1C:E2:ED:5B:11:50:BC:18:A5:60:7E:CC
Certificate issuer:       /CN=09F1FCE71540608DD361D20037B585CA6313B714
Certificate serial:       3B13259499612EACB941D4D652D82EF5E8A307E0
Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa
Signing time:             Sun 03 May 2026 03:02:54 +0000
ROA not before:           Sun 03 May 2026 02:57:54 +0000
ROA not after:            Sun 02 May 2027 03:02:54 +0000
asID:                     138142
IP address blocks:        103.134.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl
                          rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:13:25:94:99:61:2e:ac:b9:41:d4:d6:52:d8:2e:f5:e8:a3:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714
        Validity
            Not Before: May  3 02:57:54 2026 GMT
            Not After : May  2 03:02:54 2027 GMT
        Subject: CN=E36F47F2533A19E71CE2ED5B1150BC18A5607ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:26:24:49:7a:5b:e9:0e:af:b5:80:b8:d2:
                    5a:0d:4c:e2:e5:5e:c0:c8:2f:1c:d3:67:1c:25:a5:
                    ab:e5:0e:2a:14:0e:d3:15:8b:f8:63:62:31:a4:93:
                    ca:e8:58:6a:d2:d1:e5:da:24:a4:47:c6:11:e1:73:
                    cb:1e:04:60:8e:54:35:8d:05:47:df:8b:3a:5d:92:
                    90:0f:37:95:2e:6b:7a:3d:8e:e6:a3:97:7c:c5:ce:
                    f4:b1:2b:3a:36:02:9f:64:94:bf:e5:fc:47:3c:4a:
                    6d:d2:e6:38:b9:9b:5c:54:f3:58:1b:22:7c:be:33:
                    e9:1a:59:a4:f7:02:e0:9f:bb:40:df:67:74:c2:d9:
                    1f:23:83:dc:43:2f:ba:f2:53:d2:1d:49:2a:bb:1d:
                    e7:03:da:0f:29:89:f5:48:80:3f:55:df:a3:62:9b:
                    f1:ae:43:84:97:57:97:ef:67:30:dd:36:08:80:0e:
                    14:28:34:f7:ec:10:1b:0e:05:3b:ab:b9:ae:4a:15:
                    ac:0c:63:c3:63:d3:bb:d3:a5:bd:ed:3b:74:f0:a1:
                    49:94:74:76:4b:f5:86:95:ef:2a:41:dd:59:13:5b:
                    6b:f8:4d:30:ca:e6:de:97:72:55:78:d7:eb:7c:03:
                    c9:21:2c:d7:18:11:66:fd:13:53:3d:d0:60:f7:a3:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6F:47:F2:53:3A:19:E7:1C:E2:ED:5B:11:50:BC:18:A5:60:7E:CC
            X509v3 Authority Key Identifier:
                keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:72:d9:82:da:da:ca:9a:3b:ea:e0:5d:2b:56:1d:7f:17:6f:
         8e:63:e6:53:81:78:af:6f:11:44:bd:d4:8c:7a:52:8e:e8:37:
         65:5c:5d:df:42:2d:a2:06:fe:9a:8f:19:8b:78:d3:44:ec:bb:
         92:95:60:ee:de:63:d9:b4:80:8f:70:05:71:bf:c7:54:99:36:
         73:62:4c:a9:7d:8a:d3:f8:6a:5c:20:6a:b6:5b:cd:18:75:5b:
         de:ec:15:56:8a:7b:eb:e6:b0:31:47:07:d6:b8:e2:7e:08:36:
         be:73:9d:cb:df:a2:da:31:58:c7:0c:8b:ef:ef:73:a3:82:a5:
         74:33:ec:f1:74:38:f9:3d:d7:85:d2:c6:45:ca:22:71:c5:16:
         28:0b:33:63:f3:e8:ca:af:60:e5:7d:a2:a4:0e:63:ba:0f:7e:
         2b:0c:18:62:a3:64:e7:2b:e1:5d:62:c9:45:91:c9:4b:c1:0c:
         41:aa:60:48:6f:3e:78:a4:ac:af:df:65:24:d3:e7:cb:45:1b:
         b1:1b:62:d1:58:5b:ff:77:ee:33:d0:6b:2b:0a:db:80:05:4b:
         66:fa:21:55:1c:ff:ba:f9:32:c4:46:3b:d2:23:34:9a:94:09:
         ad:f9:db:ea:88:5e:25:7d:b3:ec:d6:de:88:09:6b:29:fd:0c:
         f1:84:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:06 2026 by rpki-client