Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa
File:                     3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (raw, json)
Hash identifier:          nzJ2KTaH0mWJ2JUT7TIQaEIs1V4rS2Hb5qe4oVuW+qY=
Subject key identifier:   7A:93:AD:92:AF:88:ED:B3:81:2D:91:70:54:81:06:FA:F8:C4:93:6D
Certificate issuer:       /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8
Certificate serial:       41A0B82125460E8D0B063779C1BF6C0CAC576C8A
Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa
Signing time:             Sun 03 May 2026 03:07:24 +0000
ROA not before:           Sun 03 May 2026 03:02:24 +0000
ROA not after:            Sun 02 May 2027 03:07:24 +0000
asID:                     136820
IP address blocks:        103.98.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl
                          rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a0:b8:21:25:46:0e:8d:0b:06:37:79:c1:bf:6c:0c:ac:57:6c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8
        Validity
            Not Before: May  3 03:02:24 2026 GMT
            Not After : May  2 03:07:24 2027 GMT
        Subject: CN=7A93AD92AF88EDB3812D9170548106FAF8C4936D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:22:40:5b:96:22:5c:3a:ba:36:2e:d0:87:
                    6b:70:d6:60:0b:5f:1d:5d:90:6f:55:18:64:bc:c7:
                    1c:10:83:cb:67:db:12:71:21:67:0a:a7:4b:27:ee:
                    a1:23:25:46:9c:d5:fb:70:64:96:83:a6:95:3c:e4:
                    1a:62:87:48:ac:45:13:20:13:69:5d:c7:0a:6a:af:
                    1e:45:dc:ed:e7:d0:1d:dd:83:9d:0b:51:43:60:96:
                    67:1c:e2:66:9c:8a:77:c9:03:ca:15:70:b3:38:67:
                    96:25:d1:a8:99:4c:79:f7:f8:85:cb:2d:c2:2f:0a:
                    36:a4:06:5d:f1:dd:e7:6a:08:a6:36:79:c5:47:46:
                    2f:5c:75:7c:12:7e:07:2b:80:56:8c:cf:62:74:97:
                    7d:ff:d9:1d:12:f3:43:a6:b9:5a:31:89:d9:e1:13:
                    ee:b8:09:07:a1:bb:37:df:fa:c7:bb:af:b8:59:87:
                    9c:44:b9:26:d1:26:92:02:05:e1:00:00:56:21:0a:
                    f0:98:f4:5f:1f:38:98:26:fb:38:5c:45:16:bf:46:
                    27:a7:d5:e7:e0:ff:96:f7:47:19:ab:ed:4b:12:87:
                    81:04:9a:9a:16:58:24:c3:59:79:f8:8b:2e:ac:ad:
                    4a:6d:f4:c4:a1:fa:b7:fa:b8:da:b6:cf:a6:27:36:
                    d6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:93:AD:92:AF:88:ED:B3:81:2D:91:70:54:81:06:FA:F8:C4:93:6D
            X509v3 Authority Key Identifier:
                keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:33:10:7e:75:bd:98:fb:8e:36:29:84:37:03:30:e6:26:
         98:c2:74:1b:d7:c3:3b:d0:50:be:ce:9f:d3:da:e8:4f:cd:66:
         f9:88:2e:da:ec:27:4b:e2:c9:5b:b0:96:8e:bc:72:c1:34:1f:
         ab:7f:2d:01:8e:af:bf:37:27:8c:fd:cd:bd:35:ff:5f:87:27:
         2a:8f:d5:11:e8:cb:ff:4e:78:44:14:35:3c:2d:99:8e:22:8c:
         95:47:63:60:00:48:1f:6b:31:41:12:f1:a0:70:95:9a:2f:85:
         69:17:14:9e:c4:ec:97:63:85:50:4b:75:84:97:11:bd:80:71:
         c0:52:64:c1:79:f0:c2:ff:83:f8:76:82:ea:e0:9a:29:7c:b9:
         14:b4:c9:45:11:75:27:72:a4:a1:a1:62:bf:db:60:c1:c5:2b:
         cf:d6:f5:a4:b9:40:21:bb:ec:6c:da:de:58:88:27:b6:c1:34:
         bc:08:5d:ac:25:4d:22:85:ef:5d:3f:c0:f4:9c:26:65:f5:00:
         58:63:33:bd:04:dc:6b:05:f7:be:e6:3d:99:f5:ad:dd:a9:c4:
         82:3f:00:12:d8:c8:6b:0d:e4:fc:ee:6d:2e:6a:64:59:ee:0c:
         73:69:c0:be:6b:06:f9:da:ee:fa:ee:2d:1c:db:88:a6:a9:02:
         16:b8:c6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:35 2026 by rpki-client