Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa
File:                     3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          vSt0O12iEjIfejoamLvxd1FSHE5umSqpwwku+iFtKN4=
Subject key identifier:   7A:22:F0:6C:19:BD:06:5E:B3:98:80:3A:2F:D7:FC:B7:C5:FD:29:16
Certificate issuer:       /CN=0D2802EC43905EEA387602B994B8B579041C8507
Certificate serial:       1C4F442A38161B9E8473FB1C681CED5E85629921
Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 03:13:13 +0000
ROA not before:           Sun 03 May 2026 03:08:13 +0000
ROA not after:            Sun 02 May 2027 03:13:13 +0000
asID:                     154410
IP address blocks:        103.137.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl
                          rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4f:44:2a:38:16:1b:9e:84:73:fb:1c:68:1c:ed:5e:85:62:99:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507
        Validity
            Not Before: May  3 03:08:13 2026 GMT
            Not After : May  2 03:13:13 2027 GMT
        Subject: CN=7A22F06C19BD065EB398803A2FD7FCB7C5FD2916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:b1:08:c7:a5:43:f7:7c:47:c7:2a:c0:d0:
                    20:5a:a9:df:28:bc:d1:49:aa:24:f3:bf:ed:22:13:
                    ff:bb:cb:07:28:66:37:b3:4e:c5:fb:3c:90:41:82:
                    1f:75:8d:34:57:a8:14:16:74:38:97:15:7d:ff:52:
                    9d:20:0d:0c:85:10:65:19:84:f0:1b:a7:ca:eb:85:
                    58:96:4a:24:5b:bb:1e:73:43:33:8a:df:b6:7f:89:
                    e7:06:ef:41:71:7b:6e:62:4d:77:ee:be:a2:93:47:
                    aa:85:4b:c1:e1:e6:94:94:ec:1e:50:de:6f:52:01:
                    d0:bf:4f:8c:54:e6:a6:93:c3:dd:3f:c1:33:b3:ca:
                    9b:87:fb:b1:e9:70:be:62:69:f2:74:9d:22:b5:33:
                    7e:a4:50:7a:57:34:da:fc:c5:8f:bf:32:b5:e8:0f:
                    dd:6e:5f:b3:e8:3f:97:b9:a7:18:38:ee:b9:37:64:
                    b0:6f:41:db:66:29:8f:ef:a0:7e:6c:37:18:30:5b:
                    d1:06:24:38:d6:d2:06:43:b6:a5:a1:2f:c6:e7:c4:
                    71:9b:9a:19:f0:68:54:57:e6:f9:db:2f:1a:bd:23:
                    30:90:d9:55:14:cd:f3:08:99:73:70:53:f7:57:f0:
                    c7:f3:48:13:f0:63:c5:b9:06:e9:18:2c:20:51:de:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:22:F0:6C:19:BD:06:5E:B3:98:80:3A:2F:D7:FC:B7:C5:FD:29:16
            X509v3 Authority Key Identifier:
                keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:3e:63:61:84:92:93:0d:6a:5e:85:fd:20:e1:27:59:30:
         79:80:06:97:84:e0:8e:76:f5:d2:b4:6a:94:84:5d:60:4c:4d:
         d0:cd:fd:a0:86:ad:b4:e7:ed:43:94:62:52:47:1a:5c:5c:19:
         52:da:18:4d:e8:5d:47:24:a7:f9:55:d6:70:f5:c2:34:8c:cd:
         a0:6e:8b:43:27:08:2f:3a:bf:da:24:a2:98:46:45:91:6c:91:
         cd:a3:59:95:4c:c8:0d:45:7f:99:6f:ec:0d:b3:e1:9c:ac:9f:
         e1:23:1a:cf:de:99:81:b2:4b:4e:ae:37:f8:f9:dd:12:5d:8f:
         9c:4d:84:14:7b:fe:a1:a2:a9:7e:8e:6b:39:b7:d3:0b:b3:63:
         ed:0b:b0:83:8a:33:46:cb:ee:99:33:03:4e:11:07:bd:9f:94:
         74:ee:0e:b2:9a:ea:e0:73:65:bb:65:e1:d5:ac:07:d4:00:ce:
         04:b2:3b:95:c6:eb:20:4f:de:88:fc:cb:30:7a:b5:87:1c:a6:
         f6:e0:a0:c7:51:08:ad:d1:8a:a0:a3:bf:85:33:56:20:4d:74:
         6f:e4:fe:41:54:50:c7:5c:a2:6c:5c:b5:54:4e:32:cb:d5:c3:
         d3:c2:c3:31:2d:a5:bb:f1:a1:49:85:38:18:41:e7:4a:dd:0e:
         ee:32:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:56:20 2026 by rpki-client