Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/3130332e35342e3133342e302f32342d3234203d3e203633383736.roa
File:                     3130332e35342e3133342e302f32342d3234203d3e203633383736.roa (raw, json)
Hash identifier:          aHCNlAy7B2t9yJyBpwmBhqrxzNOWMF1L8lQqLFVE1Pk=
Subject key identifier:   F0:40:B1:97:AE:1D:BB:3C:6A:8A:16:71:BD:10:68:0F:75:FE:C7:BC
Certificate issuer:       /CN=184000F41BB7BD55B1460CDE2EEB3CC42C6366CF
Certificate serial:       66C224C763B0E88DE9C2847787791BBA7486DF60
Authority key identifier: 18:40:00:F4:1B:B7:BD:55:B1:46:0C:DE:2E:EB:3C:C4:2C:63:66:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/184000F41BB7BD55B1460CDE2EEB3CC42C6366CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/3130332e35342e3133342e302f32342d3234203d3e203633383736.roa
Signing time:             Sun 03 May 2026 03:05:47 +0000
ROA not before:           Sun 03 May 2026 03:00:47 +0000
ROA not after:            Sun 02 May 2027 03:05:47 +0000
asID:                     63876
IP address blocks:        103.54.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/184000F41BB7BD55B1460CDE2EEB3CC42C6366CF.crl
                          rsync://rpki-rsync.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/184000F41BB7BD55B1460CDE2EEB3CC42C6366CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/184000F41BB7BD55B1460CDE2EEB3CC42C6366CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c2:24:c7:63:b0:e8:8d:e9:c2:84:77:87:79:1b:ba:74:86:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184000F41BB7BD55B1460CDE2EEB3CC42C6366CF
        Validity
            Not Before: May  3 03:00:47 2026 GMT
            Not After : May  2 03:05:47 2027 GMT
        Subject: CN=F040B197AE1DBB3C6A8A1671BD10680F75FEC7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d0:c7:e2:27:0c:12:3c:81:8a:11:81:39:e7:
                    b9:96:48:08:06:5e:be:57:5c:d1:8c:3b:64:26:be:
                    3f:9c:34:2a:20:15:a7:c1:f0:82:3f:c4:d9:00:e4:
                    3a:b4:26:0b:3b:fb:d0:18:64:59:3e:99:25:d3:15:
                    8f:1b:50:16:21:cd:3e:f9:69:ec:73:42:b6:23:e2:
                    e1:8c:8e:86:6c:3c:1f:7d:28:ef:e8:e8:d1:20:99:
                    d8:93:cf:af:0d:98:b0:7a:88:1a:d6:9f:6e:de:52:
                    bd:60:0f:53:c9:5e:61:95:9b:58:11:5b:75:bd:fa:
                    ee:ee:81:1c:05:b1:e4:fd:be:3e:72:6c:5c:28:83:
                    88:c8:65:47:07:94:28:5f:72:a8:8e:39:27:03:6f:
                    bc:2f:50:0b:86:44:ca:90:23:4d:29:7e:15:db:6b:
                    89:37:9a:21:c9:fc:56:42:bb:37:ea:b7:dd:f4:57:
                    cb:a8:3d:cc:06:bc:19:a0:32:14:cc:39:66:be:3e:
                    cb:ad:26:ae:5c:49:6b:d7:32:18:ce:36:c4:33:c7:
                    3d:b1:fd:de:39:58:fc:68:5f:64:13:ab:b5:23:56:
                    4b:07:be:83:b6:fb:20:88:7c:a6:87:40:0c:bb:d8:
                    08:17:e5:50:06:3b:8b:12:6c:7c:42:f7:d9:55:ce:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:40:B1:97:AE:1D:BB:3C:6A:8A:16:71:BD:10:68:0F:75:FE:C7:BC
            X509v3 Authority Key Identifier:
                keyid:18:40:00:F4:1B:B7:BD:55:B1:46:0C:DE:2E:EB:3C:C4:2C:63:66:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/184000F41BB7BD55B1460CDE2EEB3CC42C6366CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/184000F41BB7BD55B1460CDE2EEB3CC42C6366CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/3130332e35342e3133342e302f32342d3234203d3e203633383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:01:49:cf:c4:4f:aa:5f:d9:f1:0b:69:df:14:da:78:4a:8b:
         6e:f4:2e:65:98:8e:de:3a:fc:29:d3:50:c0:93:e4:6b:49:0f:
         66:06:11:61:fd:91:17:3a:43:90:ac:19:69:85:9f:4d:9a:4a:
         00:62:80:a4:9b:ab:ca:a4:06:5a:3f:d7:f5:6f:19:59:b3:6a:
         91:c4:60:45:e7:6c:ff:8a:68:1f:f3:70:0c:c7:09:c2:55:14:
         c8:dc:20:d1:5b:61:c8:58:84:5e:77:6a:0f:ca:8f:11:30:8b:
         cf:3c:d9:86:b3:d6:82:87:68:6b:c3:dc:40:ff:fb:e2:aa:fe:
         1f:11:31:d1:79:5f:b2:39:c6:79:77:9b:39:d8:ce:bb:c1:04:
         e0:f0:75:96:b3:dd:95:39:02:ce:59:da:f4:5b:92:6c:f9:40:
         47:d2:1f:3b:37:f2:be:e9:9b:34:00:aa:cd:aa:3d:67:00:0f:
         e6:16:c5:f0:6f:87:92:86:32:24:7c:c9:0f:f3:1e:37:3a:8b:
         95:cf:ed:ac:6b:1e:e5:84:bd:7f:7b:d8:c7:ac:07:40:d8:ae:
         28:53:56:8b:f1:3f:31:11:81:0f:0c:02:3f:9a:3e:da:63:43:
         83:03:90:72:d5:b5:19:20:5c:b0:c7:59:55:53:a3:3d:80:a7:
         78:2e:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:54 2026 by rpki-client