Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          c0+q/NVTLzO/hS8+W37na92ADaS9y92HcCmUqDS60d0=
Subject key identifier:   AE:17:7B:BC:D2:C5:88:E0:F8:27:DE:4F:5A:66:0A:57:0C:9B:08:60
Certificate issuer:       /CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B
Certificate serial:       7434040C378C9C463E253905C7179870E56B9568
Authority key identifier: 9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 03:12:35 +0000
ROA not before:           Sun 03 May 2026 03:07:35 +0000
ROA not after:            Sun 02 May 2027 03:12:35 +0000
asID:                     135478
IP address blocks:        103.121.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl
                          rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:34:04:0c:37:8c:9c:46:3e:25:39:05:c7:17:98:70:e5:6b:95:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B
        Validity
            Not Before: May  3 03:07:35 2026 GMT
            Not After : May  2 03:12:35 2027 GMT
        Subject: CN=AE177BBCD2C588E0F827DE4F5A660A570C9B0860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:8a:9d:d2:6a:39:f0:0d:b3:57:4b:b2:cb:
                    a5:7d:b2:d8:e7:9f:70:91:9e:98:4b:83:f4:aa:af:
                    93:8c:46:d7:46:36:4c:ab:cb:50:79:9f:d7:44:87:
                    08:a0:cc:6b:a8:95:27:43:1f:22:0a:55:dc:e8:ac:
                    26:a6:99:9b:37:ea:7f:c0:d8:7e:6f:cd:6e:f1:db:
                    b7:d4:27:d6:e5:8f:ba:52:8f:6a:34:ec:46:bc:b5:
                    40:c5:a3:40:6c:0f:c0:c5:61:90:e1:f5:50:ad:4e:
                    24:20:93:ca:7b:04:6e:d6:b3:c8:71:73:10:7a:3a:
                    56:c3:b3:f7:4b:f3:07:82:51:e9:3d:ab:bc:35:18:
                    26:7b:6e:58:d8:40:97:68:44:3a:0e:c4:1b:8e:60:
                    be:9e:5d:73:7d:2c:45:ac:fb:12:28:1c:7d:97:b4:
                    0c:a2:0b:24:da:0e:14:32:cf:27:8b:02:25:b0:cf:
                    8f:dc:3a:7e:8d:d6:ea:75:1d:a0:8b:40:ea:b4:d8:
                    f9:9d:0b:6c:66:8d:cb:cd:c8:ab:b3:f7:86:88:33:
                    2d:25:87:45:06:55:ad:f1:dc:9c:f6:76:ab:b1:40:
                    fc:29:74:15:37:f2:e4:3c:23:8f:fd:09:48:03:d4:
                    ca:13:4e:52:64:ba:7f:4b:cd:95:99:ba:4a:22:fb:
                    0d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:17:7B:BC:D2:C5:88:E0:F8:27:DE:4F:5A:66:0A:57:0C:9B:08:60
            X509v3 Authority Key Identifier:
                keyid:9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:14:90:be:99:b8:81:7e:36:30:06:64:ea:97:ef:9c:9d:84:
         28:be:51:e2:bf:68:52:77:b3:62:40:24:75:b6:0b:f9:85:12:
         67:c0:d5:38:e4:56:f8:33:56:b0:66:3c:ab:ad:6a:3f:99:ed:
         e6:bf:e2:80:82:86:38:b7:00:f5:10:ac:1d:ae:fb:5f:81:87:
         a0:40:d6:02:60:0a:d9:e6:06:d6:ef:6b:e7:13:b1:90:52:38:
         19:5e:02:0d:38:5c:7f:14:ca:2b:33:35:35:88:7d:a7:e3:e5:
         8c:3b:30:75:68:8a:ed:c3:6c:32:0b:a7:ff:f7:25:0d:d0:e3:
         c9:bc:c7:01:cf:61:9c:28:cb:7b:66:72:b7:b4:73:fa:df:9f:
         b5:13:da:d3:a9:51:3a:81:fc:2e:42:57:08:c7:a8:8a:f0:65:
         2b:57:b4:c2:28:ac:21:e9:d2:77:c5:32:be:ba:60:09:b4:4b:
         94:58:82:62:05:60:33:b7:f5:82:e6:91:c7:aa:c0:aa:01:03:
         54:5e:61:cf:98:a6:30:e4:fe:e4:42:30:bd:d9:45:e2:eb:59:
         41:4e:5a:03:c2:d6:d3:41:7a:0e:27:72:d2:41:5c:3f:87:1c:
         1c:db:bb:83:2a:62:95:5d:16:c4:b4:99:d6:dd:f6:cd:2d:37:
         74:22:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:27 2026 by rpki-client