Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
File:                     3130332e34342e33362e302f32322d3232203d3e20313333373938.roa (raw, json)
Hash identifier:          RtL9vfVlQFzYJv360yRcstQBIKbYk7pAyjGAfkreHcg=
Subject key identifier:   86:10:AA:7E:6F:2B:74:7F:D1:D4:95:19:4B:43:11:A1:D0:5D:5B:6A
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       2511CDB036744172C71AC9BA3DA407AD6C7E5B18
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:19 +0000
ROA not before:           Sun 03 May 2026 02:59:19 +0000
ROA not after:            Sun 02 May 2027 03:04:19 +0000
asID:                     133798
IP address blocks:        103.44.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:11:cd:b0:36:74:41:72:c7:1a:c9:ba:3d:a4:07:ad:6c:7e:5b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:19 2026 GMT
            Not After : May  2 03:04:19 2027 GMT
        Subject: CN=8610AA7E6F2B747FD1D495194B4311A1D05D5B6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:68:eb:60:1b:74:98:a9:44:06:b6:bc:a1:
                    e5:db:13:94:51:65:83:b1:70:d3:a4:e5:b1:0c:c5:
                    0c:bc:05:30:d1:dd:ff:9a:7d:e8:b7:35:65:85:17:
                    6e:35:59:81:dd:16:50:f8:9e:9b:10:fe:a6:98:7a:
                    25:11:dd:40:0d:60:b2:87:01:86:8b:6f:fb:56:34:
                    6d:7a:d2:69:be:91:e5:db:6e:58:97:a5:dc:f2:84:
                    c0:25:57:3e:f6:f4:e2:d8:1b:9a:9d:8a:7f:2d:c9:
                    06:ec:21:68:ce:0f:62:ef:f4:d2:e1:d6:78:31:97:
                    94:b5:b0:1f:66:a1:e1:8b:18:2a:f2:46:53:1f:bb:
                    6d:44:0a:67:38:42:37:0f:35:7c:d4:5b:33:a5:3b:
                    b2:43:d8:e7:df:66:58:80:05:50:32:0d:e9:a0:62:
                    48:87:49:96:32:9b:3b:ad:dd:2a:00:5b:2d:04:f2:
                    0c:2f:4d:fa:0c:bc:a9:14:bd:b6:f8:df:87:d8:e1:
                    8f:14:91:a9:5b:56:5f:47:6d:b1:80:05:b6:30:4f:
                    c1:a9:72:83:7f:96:44:a0:ad:01:52:37:53:79:2b:
                    55:99:8f:31:85:11:11:73:b5:53:81:ff:37:8a:fa:
                    c8:b7:e8:b6:12:0b:48:e7:60:a6:1c:e2:4c:56:c6:
                    8b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:10:AA:7E:6F:2B:74:7F:D1:D4:95:19:4B:43:11:A1:D0:5D:5B:6A
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:05:ff:e4:69:a2:20:bf:90:7b:6d:6c:c1:55:a9:e1:b8:53:
         40:e0:bd:cb:77:73:8a:75:94:17:9a:60:1d:9b:9e:25:82:00:
         73:ce:72:28:ea:86:2f:00:c1:c7:c4:f4:24:b8:92:25:8b:59:
         94:88:df:a7:30:50:0e:cd:31:1d:fb:83:aa:6b:f5:5a:36:75:
         cc:4c:d3:f6:6d:1e:e8:fc:92:c1:f3:f8:eb:7c:dd:52:a8:e9:
         63:bb:13:1f:af:de:39:ab:e5:c6:7a:02:ac:0d:e4:d1:ea:c0:
         fe:f5:e2:5d:fd:e3:c7:e9:a8:62:cc:b1:5a:cb:8a:79:19:25:
         8f:d5:3a:47:77:b6:44:a2:7d:0e:d2:ed:05:8e:c3:24:40:b6:
         5f:10:33:06:ae:9a:3c:63:9b:a1:be:ad:22:0a:13:58:d9:f0:
         9d:e0:4c:b2:06:94:05:11:e5:63:24:c0:00:4b:10:33:a4:a7:
         de:fd:44:d9:56:3d:3c:c2:c9:5d:47:38:b4:14:43:9e:30:48:
         e8:be:3e:61:93:9a:ac:1a:13:e3:c7:a5:7b:1e:61:7f:a6:45:
         50:c3:0c:e8:02:b2:37:a9:99:f5:cf:42:30:27:17:7e:f5:e5:
         4c:0c:34:e7:cc:c6:26:7d:fd:6a:81:42:39:20:e4:e3:a9:cc:
         9c:8c:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:39 2026 by rpki-client