Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32342d3234203d3e203138303539.roa
File:                     3130332e342e302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          GZO7qLzeI5d4WTqtnSEaH+YtagU8cMsVfuJwrvne7Io=
Subject key identifier:   BE:F2:8A:80:D8:16:B6:D1:F8:F8:8A:B1:3A:00:9A:8F:AA:5C:DD:18
Certificate issuer:       /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial:       09EFF965D198BBBF7B917ED65CE082081AE13C9A
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32342d3234203d3e203138303539.roa
Signing time:             Sun 03 May 2026 03:03:55 +0000
ROA not before:           Sun 03 May 2026 02:58:55 +0000
ROA not after:            Sun 02 May 2027 03:03:55 +0000
asID:                     18059
IP address blocks:        103.4.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
                          rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ef:f9:65:d1:98:bb:bf:7b:91:7e:d6:5c:e0:82:08:1a:e1:3c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67239F5E47D123019D26807163E6542441401507
        Validity
            Not Before: May  3 02:58:55 2026 GMT
            Not After : May  2 03:03:55 2027 GMT
        Subject: CN=BEF28A80D816B6D1F8F88AB13A009A8FAA5CDD18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:1f:01:4a:70:fd:80:9d:07:46:78:1a:dd:
                    fa:ed:68:8c:72:4d:9d:7d:91:69:58:18:66:27:2d:
                    0f:6e:b7:14:2d:36:86:b9:09:29:05:b3:7d:3c:4c:
                    29:c5:e9:a9:1f:d4:5d:90:ea:ab:bb:c5:80:04:67:
                    1d:40:86:3e:b4:80:46:cc:a7:e1:1f:da:08:13:c4:
                    cd:c4:1e:b0:6c:92:b6:49:91:e3:84:f1:04:5c:97:
                    40:5c:8d:01:04:f0:11:1f:03:40:5e:cc:66:19:45:
                    85:66:c5:65:78:c9:8c:1b:9f:30:c6:16:16:ce:13:
                    33:0d:44:68:21:74:e3:44:41:10:15:cc:08:19:1e:
                    27:83:03:d3:7e:f1:ff:c0:21:4d:d1:02:ff:48:aa:
                    cc:36:ca:92:db:f4:4a:f1:ea:df:b5:79:17:6f:51:
                    fe:7b:c7:75:82:72:1c:6d:03:c9:11:dd:30:7c:2e:
                    5e:b2:7c:78:a1:61:05:44:a7:ee:31:53:08:e0:80:
                    2e:b1:d5:f6:7f:02:54:c7:50:a0:d3:36:ce:95:6b:
                    ca:88:57:eb:b9:36:1b:41:f0:39:87:91:52:7c:32:
                    86:e0:c1:83:43:35:b0:9b:ce:93:76:39:8c:35:77:
                    67:77:21:1f:16:3a:9c:d4:d6:f1:5d:df:b0:16:a1:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F2:8A:80:D8:16:B6:D1:F8:F8:8A:B1:3A:00:9A:8F:AA:5C:DD:18
            X509v3 Authority Key Identifier:
                keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:a2:bd:69:85:2a:45:c1:96:02:20:29:9a:55:e2:cc:36:
         d1:2d:ee:84:0f:d6:1e:ac:55:ca:bf:22:7f:d7:f9:7a:5f:72:
         94:2b:60:b5:a1:62:7e:8e:fb:eb:77:46:b4:f8:e8:70:88:53:
         01:7b:62:b1:18:3b:8b:74:36:68:b2:d2:60:8c:33:3f:89:29:
         9e:b8:98:de:08:c8:f3:29:17:21:73:7d:c6:67:4d:f5:c0:a6:
         9f:8e:8f:0f:36:2a:f6:6d:98:41:5f:d9:d4:67:b8:86:63:cf:
         1c:8a:94:d4:fa:8a:60:a7:ee:56:d5:93:f0:da:01:5e:e0:66:
         4d:6a:a5:f0:94:7d:68:12:0c:e7:f4:5f:7a:21:5f:32:48:4a:
         cc:5a:64:d1:a4:9b:15:b9:5d:de:41:84:fa:38:98:a5:4c:a6:
         3a:b9:84:68:1c:f8:6b:05:ab:73:e8:35:b0:36:5b:02:26:9e:
         bf:ec:dd:7c:f8:38:93:f3:a1:d6:dc:33:62:d6:cc:df:02:33:
         1d:da:f7:b8:e7:9a:97:d6:fe:24:ef:1c:48:1a:49:73:8a:b0:
         49:fa:9b:b1:2e:a8:d8:99:1b:72:ba:af:09:7d:b5:1d:43:75:
         eb:4c:ef:9b:92:c0:a6:f1:1c:eb:05:bf:65:ae:3e:0a:49:e2:
         42:d7:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:55 2026 by rpki-client