Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/3130332e36372e36392e302f32342d3234203d3e20313531393938.roa
File:                     3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (raw, json)
Hash identifier:          qeHJ1PkAaAN+foqEt/Aw5gnh3414OQ8lq2kg+Oj23CQ=
Subject key identifier:   AE:93:4C:01:2C:6E:C7:87:FF:36:1E:9A:9B:FD:BB:DF:79:AB:17:3E
Certificate issuer:       /CN=5645F0B82898A2A9A354AB086BC696E81297553D
Certificate serial:       1EACEF86C3BE468B9450DE43FB0BEECDD1CE1A54
Authority key identifier: 56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/3130332e36372e36392e302f32342d3234203d3e20313531393938.roa
Signing time:             Sun 03 May 2026 03:16:31 +0000
ROA not before:           Sun 03 May 2026 03:11:31 +0000
ROA not after:            Sun 02 May 2027 03:16:31 +0000
asID:                     151998
IP address blocks:        103.67.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl
                          rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ac:ef:86:c3:be:46:8b:94:50:de:43:fb:0b:ee:cd:d1:ce:1a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5645F0B82898A2A9A354AB086BC696E81297553D
        Validity
            Not Before: May  3 03:11:31 2026 GMT
            Not After : May  2 03:16:31 2027 GMT
        Subject: CN=AE934C012C6EC787FF361E9A9BFDBBDF79AB173E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:04:33:27:c6:78:e1:99:b4:6c:a8:9a:e3:
                    55:75:b7:2f:ea:da:85:74:75:fb:36:5e:5d:79:fb:
                    26:99:b3:27:d5:9b:45:bc:db:e4:e8:33:67:96:34:
                    ea:00:54:38:48:7e:28:83:7b:3b:c9:64:d2:8a:0c:
                    3d:b0:8a:88:63:0f:b9:f3:e7:c2:c6:ff:de:4e:b2:
                    78:35:f1:a5:d2:3f:90:ed:9a:af:4d:35:fc:a8:7a:
                    e5:9f:6c:eb:83:30:26:27:15:58:3a:0e:c6:43:66:
                    df:d2:41:ea:cb:ac:92:22:eb:9a:cc:7d:65:15:0a:
                    9e:22:a4:46:75:13:84:e6:d9:52:56:9d:7c:b3:0c:
                    a8:41:74:0b:5f:c1:82:99:de:59:bf:11:28:5a:b3:
                    fc:a1:07:82:e3:b8:6f:21:05:71:7a:b6:88:87:a0:
                    9a:89:9f:ff:38:51:ba:b9:81:27:f4:bb:37:fd:9d:
                    ee:a7:92:04:22:30:70:a3:ae:60:50:9d:0f:63:0f:
                    26:03:bc:05:e6:29:05:dd:52:0b:89:a6:6f:ef:59:
                    ee:ac:1f:94:1d:f1:4f:bb:11:45:a8:3b:ca:35:df:
                    81:4d:82:89:80:25:e3:49:1f:e5:c7:12:3c:32:53:
                    01:14:02:8a:a8:57:3a:1f:94:aa:54:a6:96:b4:0c:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:93:4C:01:2C:6E:C7:87:FF:36:1E:9A:9B:FD:BB:DF:79:AB:17:3E
            X509v3 Authority Key Identifier:
                keyid:56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/3130332e36372e36392e302f32342d3234203d3e20313531393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:c2:9a:75:ce:25:47:40:08:7e:47:78:23:ee:14:50:90:
         fc:3a:8c:78:be:20:a8:9c:37:6c:35:0c:62:7d:cd:28:95:ca:
         d1:c2:a9:84:f0:4c:a8:56:29:df:96:fe:e8:20:ef:51:65:4b:
         87:06:ef:cc:fe:0e:8f:62:1d:f8:f2:03:36:ea:6f:44:1e:13:
         6e:1e:a5:5a:7a:e9:52:9e:87:30:dd:38:42:1b:cf:38:ac:f1:
         26:8b:be:04:43:92:49:f0:1f:33:3b:26:e3:a9:aa:a1:49:85:
         8c:a9:78:80:ad:29:b1:cd:93:15:3b:69:3e:72:5a:0e:04:84:
         cb:e2:89:31:43:d3:b2:01:e1:26:01:a1:de:2c:fb:15:95:3d:
         7d:8b:7d:11:da:af:24:08:80:e7:72:df:b7:cf:62:89:39:26:
         87:e6:c8:55:a4:e4:5a:00:e2:26:8e:88:29:e2:f0:03:4a:2b:
         1f:ca:0d:2c:9b:52:41:98:e1:90:26:b4:69:97:70:19:73:fd:
         e6:bb:e8:ec:4f:27:e1:9c:3f:73:fc:40:27:f8:b2:7a:7f:95:
         08:4d:d0:00:70:80:d7:7d:7a:ef:a7:8a:31:76:b2:9f:e3:d6:
         48:12:29:2c:ec:cf:10:ff:73:2a:98:5f:db:d7:f6:74:9e:b5:
         2d:84:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:38 2026 by rpki-client