Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa
File:                     3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (raw, json)
Hash identifier:          7kCoo2bMrWx+NgrVIZTs8BnZTFozYrI1Yx+Eu/FeGxM=
Subject key identifier:   18:96:2E:93:57:D5:C2:DE:72:D5:E1:CA:31:3C:A8:22:D8:F8:D5:DA
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       7CFE3252CCA9477E318EA69FA513B993575D26B1
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa
Signing time:             Sun 03 May 2026 03:06:20 +0000
ROA not before:           Sun 03 May 2026 03:01:20 +0000
ROA not after:            Sun 02 May 2027 03:06:20 +0000
asID:                     55653
IP address blocks:        103.254.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fe:32:52:cc:a9:47:7e:31:8e:a6:9f:a5:13:b9:93:57:5d:26:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: May  3 03:01:20 2026 GMT
            Not After : May  2 03:06:20 2027 GMT
        Subject: CN=18962E9357D5C2DE72D5E1CA313CA822D8F8D5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:34:03:6b:fc:84:56:36:3c:63:24:6e:23:
                    e9:ce:42:7d:8a:f8:97:4f:ad:87:cd:8a:49:97:19:
                    42:f4:7b:de:2b:d8:da:42:06:c0:e2:d5:5b:a5:84:
                    4e:dc:98:47:40:61:16:b2:84:2b:15:25:cb:fb:23:
                    dc:cb:01:0f:b6:fd:a5:a3:d0:bf:f0:cd:6f:fb:5c:
                    10:10:b3:ec:cb:d8:25:f7:80:21:05:b8:7d:52:93:
                    81:a8:23:d5:bf:b5:cb:f6:db:84:73:da:c8:d5:31:
                    9c:f7:d5:b4:50:28:e3:9e:89:77:e4:99:88:c7:3e:
                    54:f4:12:cb:0d:06:dc:a5:e6:57:c5:6a:aa:59:e9:
                    50:74:f6:70:b9:d3:49:57:27:8a:be:50:44:a3:fe:
                    18:de:6f:ef:85:38:cc:b3:da:4b:09:16:e5:b9:0e:
                    ea:a0:04:c5:fc:ce:53:a1:6f:3e:d1:65:d9:8f:58:
                    40:c6:85:fe:36:dd:42:51:e3:d3:1a:65:2e:4c:69:
                    cb:92:96:d6:c8:bd:c1:34:76:75:a8:5d:4e:9c:33:
                    18:fa:76:9e:5f:db:33:58:28:b3:4f:ff:f7:30:84:
                    f5:ed:7a:7b:74:e0:85:a8:c1:3b:e8:f5:6f:cf:b0:
                    cb:a2:ca:35:ae:87:a4:f9:b0:90:59:c1:06:e5:68:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:96:2E:93:57:D5:C2:DE:72:D5:E1:CA:31:3C:A8:22:D8:F8:D5:DA
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:d0:14:93:fa:54:86:23:b5:e2:d7:21:34:85:4c:cc:ff:35:
         f5:63:75:52:69:3b:ed:82:5e:10:cd:17:49:96:75:16:a5:31:
         8f:65:b9:c8:58:83:bf:e9:11:4a:04:74:d7:94:6d:df:9d:b7:
         6b:d7:4f:3b:28:b3:b3:cc:36:c7:ba:66:04:5e:96:1d:4f:46:
         d2:2f:2e:3b:06:0a:c3:be:20:87:3b:2a:07:54:d0:c0:cc:f6:
         b5:4f:c1:5b:ab:a7:2e:da:22:b5:10:f4:5e:9a:e1:57:c4:7e:
         59:92:ab:e7:e0:6c:4a:87:92:c7:fd:29:29:81:7e:24:69:55:
         07:4f:fd:6a:6a:a9:f4:7c:99:fc:db:e6:17:25:60:5f:c2:43:
         e0:fb:8b:93:3b:59:62:da:d3:02:bd:5b:bb:68:24:33:52:7c:
         c0:2b:7a:36:cd:e0:01:f8:62:66:13:75:1b:99:d7:05:c4:2c:
         40:8d:cb:76:38:8e:2c:51:fa:e6:99:5e:28:56:f5:32:48:01:
         aa:55:f6:f0:6f:c4:fe:f9:7e:84:6f:81:64:11:2d:8d:6b:95:
         09:44:64:c7:12:26:a9:32:99:39:21:94:9f:4c:ac:3e:39:bc:
         3d:66:57:3c:8e:4e:3e:85:73:3d:82:cc:7d:da:d2:18:17:cc:
         ad:86:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:59 2026 by rpki-client