Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa
File:                     3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (raw, json)
Hash identifier:          tdzqlaQf0fF4d+ZUvSQhNIWl0HYGOdoxh6aHUWDnZjg=
Subject key identifier:   08:0E:06:D0:03:02:8E:AE:5E:70:BD:3D:8C:81:C8:68:F7:28:1C:18
Certificate issuer:       /CN=5BD70FF0C393471CFAF795433474B327BD4832F9
Certificate serial:       77AC0BC9B8CC41F6E56FFBC0EC57E5B35F2A3E44
Authority key identifier: 5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa
Signing time:             Sun 03 May 2026 03:10:44 +0000
ROA not before:           Sun 03 May 2026 03:05:44 +0000
ROA not after:            Sun 02 May 2027 03:10:44 +0000
asID:                     136878
IP address blocks:        103.105.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl
                          rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ac:0b:c9:b8:cc:41:f6:e5:6f:fb:c0:ec:57:e5:b3:5f:2a:3e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD70FF0C393471CFAF795433474B327BD4832F9
        Validity
            Not Before: May  3 03:05:44 2026 GMT
            Not After : May  2 03:10:44 2027 GMT
        Subject: CN=080E06D003028EAE5E70BD3D8C81C868F7281C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:42:ad:4a:0c:72:04:3f:ce:5b:11:3e:06:
                    12:80:a5:2b:b3:b9:51:1a:c8:08:85:8f:13:5b:28:
                    6f:85:7b:ac:82:da:99:bc:7e:f2:4d:ef:62:2b:ed:
                    85:86:77:a3:98:7d:8c:65:3a:c6:c8:49:a8:e7:d1:
                    b0:79:94:d5:ca:59:d1:14:e4:95:1c:3f:ce:65:64:
                    11:6c:a6:66:0f:29:96:02:cb:ed:85:26:22:b3:cf:
                    de:02:fe:f0:59:03:28:df:d5:83:05:93:8d:15:85:
                    98:29:87:a7:b2:de:bb:f2:6b:ac:0a:15:81:17:be:
                    69:ae:70:ad:2b:e1:3b:a6:c4:41:6e:fe:89:f9:3a:
                    eb:9b:c3:5e:13:af:01:aa:07:a3:1c:bd:55:dd:82:
                    f3:5b:bb:53:eb:51:36:c6:0f:d3:08:1c:33:86:47:
                    82:ae:25:be:83:12:78:e5:bd:c0:b0:4a:89:44:de:
                    4e:27:ed:97:13:89:f1:cb:cc:e5:76:41:c1:a3:1c:
                    9c:97:f8:a8:f1:c3:9f:0d:ba:94:3b:c9:ab:be:df:
                    f6:ad:08:d6:91:2f:cc:96:37:bd:61:d2:f4:31:36:
                    78:1a:a1:03:a5:72:5e:c2:ef:fb:da:3f:f0:d6:17:
                    29:9d:20:b1:f9:12:d5:df:99:ea:4f:15:a2:60:f3:
                    4d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0E:06:D0:03:02:8E:AE:5E:70:BD:3D:8C:81:C8:68:F7:28:1C:18
            X509v3 Authority Key Identifier:
                keyid:5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c4:c8:83:a9:87:05:61:16:44:c5:a8:83:cd:a1:cf:36:0d:
         19:71:0d:e1:c3:c3:b0:f8:c6:9b:b1:b0:08:77:35:93:23:75:
         bf:cc:af:64:63:85:d7:de:58:e3:21:27:45:3e:6a:51:fa:ba:
         9e:09:71:4b:44:cc:bb:b2:04:78:20:a7:04:3f:6b:3f:92:a8:
         43:c0:ea:4a:4a:77:49:68:ac:e3:75:4e:c2:5c:34:2b:32:2b:
         78:9d:e0:37:5e:45:6d:8d:19:3c:e7:91:cd:92:f9:2c:fc:b7:
         e1:ac:cf:9d:f8:3e:6c:48:ba:cb:4d:fe:64:18:7e:60:9b:44:
         a4:db:83:26:69:6f:e1:c4:fb:29:6c:05:ab:06:bc:fb:e9:50:
         be:01:a4:de:19:14:be:b3:d1:f7:33:59:44:de:3a:9d:fa:88:
         f7:e1:bb:f9:2a:5c:f8:e2:d7:96:4a:a9:fa:ac:99:57:53:ed:
         b1:4b:be:02:2b:3b:09:7a:d4:42:e9:05:49:a8:94:62:ef:8c:
         8c:80:c7:87:a2:1a:4f:9c:67:93:ff:b6:3e:2f:3a:b8:04:a9:
         40:42:2e:ed:3d:19:e1:29:56:a8:ba:ac:af:25:d6:b2:53:50:
         74:96:d4:c3:d5:ee:9f:e5:6f:77:f6:4e:1c:f8:b8:8a:bf:79:
         8a:ed:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:14 2026 by rpki-client