Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/3130332e32362e3230382e302f32322d3234203d3e203138313033.roa
File:                     3130332e32362e3230382e302f32322d3234203d3e203138313033.roa (raw, json)
Hash identifier:          DFvC5GTAtylO1fprLd0zKxOM6CHVp0D6cEWiHcQuCS4=
Subject key identifier:   FC:74:8B:02:2B:F1:E0:BC:1F:14:02:E9:81:A5:28:E5:25:58:E9:E4
Certificate issuer:       /CN=D760F9F9DA86BCE59400DBE9D811D4482545E268
Certificate serial:       0ACA3C6C38B3CEA130B9E04EBC2A36BD6DAAD50B
Authority key identifier: D7:60:F9:F9:DA:86:BC:E5:94:00:DB:E9:D8:11:D4:48:25:45:E2:68
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D760F9F9DA86BCE59400DBE9D811D4482545E268.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/3130332e32362e3230382e302f32322d3234203d3e203138313033.roa
Signing time:             Sun 03 May 2026 03:04:49 +0000
ROA not before:           Sun 03 May 2026 02:59:49 +0000
ROA not after:            Sun 02 May 2027 03:04:49 +0000
asID:                     18103
IP address blocks:        103.26.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.crl
                          rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D760F9F9DA86BCE59400DBE9D811D4482545E268.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ca:3c:6c:38:b3:ce:a1:30:b9:e0:4e:bc:2a:36:bd:6d:aa:d5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D760F9F9DA86BCE59400DBE9D811D4482545E268
        Validity
            Not Before: May  3 02:59:49 2026 GMT
            Not After : May  2 03:04:49 2027 GMT
        Subject: CN=FC748B022BF1E0BC1F1402E981A528E52558E9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:1b:9a:d8:64:12:37:79:22:b3:64:63:51:
                    ec:68:00:35:de:99:3f:bc:95:f8:77:d7:3b:8f:0c:
                    e1:0b:36:09:b2:1a:41:5c:08:44:f6:47:61:6e:2c:
                    25:f2:ac:f5:b6:7e:77:39:ad:7f:4d:03:46:1d:6e:
                    d2:02:2c:00:3b:99:ae:90:75:64:fb:cf:48:2b:36:
                    06:ab:c7:1a:13:22:7c:49:3b:49:a4:69:c7:39:d8:
                    3d:d0:b2:48:e7:0b:a1:99:dd:99:81:b7:76:ac:bc:
                    78:87:c7:62:46:ee:22:32:35:8d:ad:9f:4a:3b:db:
                    95:4f:b3:24:ee:cb:26:43:c0:cd:ec:6e:b3:1a:bd:
                    55:07:d6:b6:28:40:d8:65:ad:fe:9b:65:7f:7a:12:
                    33:de:da:be:f8:bc:d8:5a:81:e1:be:8b:21:49:a2:
                    cd:d6:46:e2:7e:3d:9a:86:14:1b:af:be:0a:3c:c4:
                    56:97:78:d4:26:0a:de:21:0f:39:e9:db:a8:61:61:
                    c3:01:10:5d:9f:d2:a6:14:ea:fe:56:a0:cf:43:9c:
                    94:53:e8:72:15:b9:be:76:e0:a2:6f:4f:d5:78:ff:
                    ac:b1:bc:ce:c0:69:c9:0a:0b:90:e8:d3:99:6c:fc:
                    33:eb:a1:65:b9:ae:6b:82:de:1b:55:56:20:82:e7:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:74:8B:02:2B:F1:E0:BC:1F:14:02:E9:81:A5:28:E5:25:58:E9:E4
            X509v3 Authority Key Identifier:
                keyid:D7:60:F9:F9:DA:86:BC:E5:94:00:DB:E9:D8:11:D4:48:25:45:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D760F9F9DA86BCE59400DBE9D811D4482545E268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/3130332e32362e3230382e302f32322d3234203d3e203138313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:1c:45:f0:7b:b9:77:23:de:65:ea:7f:33:94:45:11:b5:df:
         4b:8f:35:92:f8:29:78:8e:e9:f7:3a:f4:85:49:44:e1:61:9d:
         ee:51:b9:56:72:7e:a5:27:23:7e:1d:0a:a5:e3:43:a7:f4:67:
         b8:e1:0d:73:7d:43:7c:81:f3:28:e7:c8:fb:5c:62:65:0f:84:
         ad:1f:00:ac:3b:ea:cc:12:2b:e8:a7:59:7c:3b:60:5a:66:4f:
         88:a1:c8:f2:be:a1:2b:96:8c:d7:07:55:11:66:17:7f:9f:1f:
         44:e6:5b:7a:14:49:16:33:c8:4d:94:e0:66:98:98:21:51:d4:
         1b:6f:2a:e6:c9:ed:0d:44:60:27:f3:b9:87:a9:af:86:2a:85:
         ed:56:5b:c3:42:d6:41:64:d3:3b:49:9f:a7:49:a6:48:dd:49:
         1e:20:fa:97:fd:c3:0f:51:5b:02:0f:bc:88:8f:14:4d:b4:08:
         8f:76:20:b3:8f:b6:dc:cb:9e:b5:29:6b:55:a6:f9:52:b2:e4:
         47:84:1b:5f:10:eb:64:87:f8:41:7b:be:41:09:b3:be:83:f1:
         e5:dc:f7:0a:ab:d5:f4:99:0f:77:a4:da:97:37:5f:ca:9b:04:
         26:e1:16:87:5d:a3:f2:1a:e8:72:fe:5e:3d:14:07:d3:df:4a:
         44:cc:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:40 2026 by rpki-client