Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/3130332e37332e37322e302f32322d3234203d3e20313335343638.roa
File:                     3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (raw, json)
Hash identifier:          DOdXqvIf8YC77FzkFbP1ZhH9lDDTTUCUrQuHHws44kQ=
Subject key identifier:   48:A4:CE:29:CF:BB:D9:CD:BC:6A:C4:73:07:F7:FA:18:0A:C3:92:6C
Certificate issuer:       /CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC
Certificate serial:       4743420E80C5904BB5C8786E3A479D563F0DB315
Authority key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/3130332e37332e37322e302f32322d3234203d3e20313335343638.roa
Signing time:             Sun 03 May 2026 03:09:59 +0000
ROA not before:           Sun 03 May 2026 03:04:59 +0000
ROA not after:            Sun 02 May 2027 03:09:59 +0000
asID:                     135468
IP address blocks:        103.73.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl
                          rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:43:42:0e:80:c5:90:4b:b5:c8:78:6e:3a:47:9d:56:3f:0d:b3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC
        Validity
            Not Before: May  3 03:04:59 2026 GMT
            Not After : May  2 03:09:59 2027 GMT
        Subject: CN=48A4CE29CFBBD9CDBC6AC47307F7FA180AC3926C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:c9:a9:ca:f7:79:2c:46:2c:fa:e2:a7:0d:
                    29:c1:7b:1c:a9:02:f3:9e:f9:ae:f6:66:06:09:fe:
                    52:69:22:dc:ef:d2:eb:43:ef:63:0a:66:0f:9e:ab:
                    6f:1b:7f:a4:cb:06:5f:41:d4:37:22:b6:c2:34:23:
                    99:c3:51:c8:5f:f1:69:67:7c:cc:1c:b1:ed:dd:64:
                    59:06:b7:b3:e9:e5:2e:cc:2b:9d:4f:df:5e:1a:74:
                    46:25:40:3e:e6:10:31:ce:f9:98:1d:64:a1:55:0c:
                    e8:8b:e2:24:42:d3:bb:4a:4a:4f:1c:ff:27:72:a8:
                    0b:4c:02:2e:79:c8:f4:75:d9:76:56:2f:76:ab:f4:
                    a7:10:39:dc:85:e6:39:04:f1:5b:9f:18:15:1d:5a:
                    e1:f3:b0:67:47:cf:7a:c3:e4:2e:66:e4:52:00:af:
                    31:56:b5:8b:a9:47:82:4a:25:31:48:d7:78:2e:86:
                    f1:ae:80:46:8d:71:77:5c:9f:1e:4e:00:04:4b:b6:
                    1d:d0:3e:3d:f2:55:4e:98:13:dc:22:f0:a3:57:2f:
                    48:2d:9f:00:99:d9:5b:f1:99:56:0c:20:a4:9b:4d:
                    b5:78:94:b1:4b:95:6c:68:55:20:6c:69:e6:20:c1:
                    80:66:db:f0:cc:01:49:d9:0f:28:78:27:8f:d2:f6:
                    4b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A4:CE:29:CF:BB:D9:CD:BC:6A:C4:73:07:F7:FA:18:0A:C3:92:6C
            X509v3 Authority Key Identifier:
                keyid:B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/3130332e37332e37322e302f32322d3234203d3e20313335343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:83:bf:56:e7:f5:30:75:98:10:bf:9f:28:cf:cd:1a:71:d2:
         d8:3c:9c:c6:7e:16:01:13:be:1c:5b:1e:30:c1:5f:ed:c4:6d:
         5f:b4:96:66:c7:74:d3:84:8e:a7:92:ed:7e:7e:62:57:71:dd:
         c7:a1:81:6f:df:14:df:63:cb:d0:f0:ad:6b:d3:58:d6:59:9c:
         ce:ec:3e:7b:85:62:39:02:8c:1f:34:0e:92:43:98:0e:03:ec:
         0e:50:11:5f:03:b2:ef:73:c6:ea:5d:95:42:02:7f:9d:1e:bf:
         a6:91:3e:05:8e:6b:1c:88:d4:91:3b:bc:7b:f7:1c:ee:95:4e:
         5e:92:96:83:e5:20:67:80:4d:bc:9b:ee:e0:b8:f5:60:d7:11:
         76:1d:e9:15:05:47:c6:68:cb:ae:48:31:a0:1c:a2:79:c8:46:
         1f:bc:72:d7:3c:ea:c2:30:5e:04:f6:59:55:2d:1f:c3:e6:88:
         ed:36:ed:e7:8e:db:5d:d9:b1:a0:69:7c:81:80:24:0e:f7:db:
         70:6e:b3:04:b9:36:23:bf:c2:91:1c:46:bd:90:2b:91:66:d1:
         c0:46:87:25:75:46:21:bd:d4:62:74:b9:75:28:2e:d3:41:b2:
         6e:07:40:bf:f3:06:b0:d7:42:92:33:c3:db:7b:5f:00:08:3a:
         76:f1:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:45 2026 by rpki-client