Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e312e302f32342d3234203d3e203138303539.roa
File:                     3130332e342e312e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          40WAKS7u82RLJMyuR6n0qKFyf4aALdUwSDVMmsIeLv4=
Subject key identifier:   81:AF:22:A2:8D:5D:1D:8B:1A:E6:CA:9F:08:9C:86:D1:74:90:E3:7B
Certificate issuer:       /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial:       1093F16CB4F86A9EFC562261C9177B6DC6510019
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e312e302f32342d3234203d3e203138303539.roa
Signing time:             Sun 03 May 2026 03:03:38 +0000
ROA not before:           Sun 03 May 2026 02:58:38 +0000
ROA not after:            Sun 02 May 2027 03:03:38 +0000
asID:                     18059
IP address blocks:        103.4.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
                          rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:93:f1:6c:b4:f8:6a:9e:fc:56:22:61:c9:17:7b:6d:c6:51:00:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67239F5E47D123019D26807163E6542441401507
        Validity
            Not Before: May  3 02:58:38 2026 GMT
            Not After : May  2 03:03:38 2027 GMT
        Subject: CN=81AF22A28D5D1D8B1AE6CA9F089C86D17490E37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:6e:50:2c:82:3b:11:49:a2:13:df:4f:5a:
                    a8:72:31:90:13:49:e5:6b:cd:73:db:00:55:d8:4d:
                    5c:ee:25:df:0e:b4:40:d0:90:22:e2:33:ea:b6:5b:
                    67:1b:95:70:8f:1d:41:e3:33:4d:79:0d:68:0d:82:
                    17:84:16:26:04:7c:31:4e:82:09:27:88:bb:47:c3:
                    0a:18:71:cb:08:16:09:1d:83:1b:62:c5:89:ff:33:
                    59:04:93:f6:bb:30:68:f0:5b:2b:e5:d8:a6:c8:a0:
                    88:fb:15:3f:f0:9c:4c:d6:74:30:b3:00:1d:3a:8b:
                    82:1f:78:6f:15:b9:8e:e1:a6:3a:6b:2a:f5:69:95:
                    33:a9:34:27:7b:3a:ca:fb:cb:7c:59:aa:27:1d:a5:
                    73:24:e2:47:00:09:94:ae:50:f6:a8:7f:2f:e7:10:
                    e2:0b:c1:4f:aa:6a:aa:9f:b7:53:d0:25:db:88:07:
                    1c:3f:0c:b0:e8:30:76:bd:02:6b:d8:31:d6:c2:ea:
                    5c:ca:89:34:cd:13:93:25:fc:46:6d:1b:c1:8e:80:
                    b6:4a:3b:4e:30:dd:06:03:2e:53:4a:e7:01:10:01:
                    ed:a5:b7:11:64:e1:49:9c:00:b1:c5:9a:1b:d8:a9:
                    cc:ba:3d:46:3e:28:e1:e2:d5:81:cf:bb:0c:e4:2a:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:22:A2:8D:5D:1D:8B:1A:E6:CA:9F:08:9C:86:D1:74:90:E3:7B
            X509v3 Authority Key Identifier:
                keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e312e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:0c:1a:fd:f6:b9:f5:bc:4c:05:52:e0:f5:68:ff:4e:61:a0:
         f3:98:ec:04:ff:5a:85:6d:53:cf:da:78:75:61:60:ee:f9:d1:
         7b:88:a2:7d:43:56:a2:8e:56:64:dd:e4:2e:4e:75:87:94:ab:
         ac:e2:c4:13:79:f9:39:c1:3b:16:97:ba:76:42:92:5f:b9:22:
         a1:a6:0f:01:51:90:fb:f0:81:68:d0:f1:fd:13:1a:19:6c:72:
         76:0f:4e:06:e0:ad:df:a8:9f:3f:6c:88:7b:83:46:16:0a:0a:
         b3:0c:01:a3:9c:7d:62:d5:b3:11:ea:e5:2c:87:ae:61:48:76:
         d5:c7:ab:f6:2a:86:05:e7:d2:89:8b:02:d9:0a:64:fe:0b:0f:
         48:ab:a3:79:b7:3b:3b:1e:e2:5e:9f:87:5d:de:09:fd:75:de:
         69:96:c9:b3:4e:07:91:0d:fc:11:6e:e4:58:6b:02:68:6a:f7:
         90:b9:79:ca:fc:14:90:bb:99:f6:69:70:cf:49:76:7b:dc:37:
         f8:62:0e:fa:e2:11:fb:63:79:17:fc:1f:3a:d9:6f:b6:73:e8:
         cb:95:99:11:e0:d5:c4:64:14:12:9e:95:ac:ab:71:44:fe:ba:
         07:62:33:75:08:db:97:66:9b:14:26:7d:b9:db:63:cb:7d:57:
         e4:63:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:34 2026 by rpki-client