Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa
File:                     3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          d3+XsStuI4V6Oj2xnH0hFfx5wuWKXEgPdu/mNqcOqsI=
Subject key identifier:   78:8C:37:CA:F2:05:88:E7:DC:D9:BD:38:BB:77:61:60:7F:D2:F4:F0
Certificate issuer:       /CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA
Certificate serial:       773368A18990A9A87D0CE836C467C502BC25D258
Authority key identifier: D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa
Signing time:             Sun 03 May 2026 03:16:46 +0000
ROA not before:           Sun 03 May 2026 03:11:46 +0000
ROA not after:            Sun 02 May 2027 03:16:46 +0000
asID:                     58821
IP address blocks:        103.169.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl
                          rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:33:68:a1:89:90:a9:a8:7d:0c:e8:36:c4:67:c5:02:bc:25:d2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA
        Validity
            Not Before: May  3 03:11:46 2026 GMT
            Not After : May  2 03:16:46 2027 GMT
        Subject: CN=788C37CAF20588E7DCD9BD38BB7761607FD2F4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:c9:5a:37:41:da:7a:89:3a:72:17:18:9b:
                    7b:2b:b4:d6:c7:55:8a:f5:cc:0c:ae:6b:05:d5:7b:
                    6e:e0:20:55:61:44:d1:b6:3a:5a:83:2d:80:aa:87:
                    c2:07:6d:f5:be:86:dd:8d:4c:18:45:8a:c0:c1:9d:
                    96:9a:ab:20:c2:2c:00:6a:5b:9b:72:e2:9d:93:14:
                    af:74:f0:bf:41:26:ab:db:79:8d:25:c4:06:35:78:
                    59:7a:b5:e1:9a:07:1a:5d:94:0b:86:29:b1:83:10:
                    4b:26:62:d7:6f:fd:da:23:13:40:8b:40:8a:c4:6c:
                    cf:bf:99:14:70:a9:00:55:73:cb:e8:6a:71:d8:61:
                    be:19:4b:2c:bf:64:13:55:af:7f:7b:80:c2:d0:32:
                    7f:a7:e8:7f:0e:e9:6e:0b:bd:1e:8e:5e:8c:f9:8d:
                    8b:a2:5e:2a:46:10:82:9f:2a:be:cd:4c:72:92:54:
                    35:c0:bf:09:03:92:f1:1a:00:c0:89:d9:f3:5c:2d:
                    8b:7b:1f:01:d1:6f:a4:bb:ce:99:a6:04:9a:d2:11:
                    3c:9b:e7:22:a7:4a:b2:d7:57:1c:18:0d:06:ee:89:
                    a8:aa:f8:63:04:c8:f8:6a:11:c9:ff:c7:03:76:51:
                    a1:61:e0:04:4d:7e:c3:c4:a7:af:36:92:60:ac:2c:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8C:37:CA:F2:05:88:E7:DC:D9:BD:38:BB:77:61:60:7F:D2:F4:F0
            X509v3 Authority Key Identifier:
                keyid:D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:48:89:4c:93:d9:17:70:b0:38:a1:ec:9a:f2:dc:e4:38:0c:
         06:bd:9b:08:82:61:b9:73:02:b9:7a:e0:a8:99:d5:ea:45:98:
         2e:53:e2:a1:43:41:a9:e9:b0:1a:4e:19:9d:50:38:a2:6c:80:
         25:9f:3b:e3:e8:06:2e:ba:48:14:60:2f:61:a6:ae:d2:80:4c:
         42:96:e9:af:ef:f6:ce:fe:23:2a:0b:d8:db:28:f0:17:09:cf:
         75:6f:12:7e:ff:c7:bd:39:0d:b9:94:73:54:11:a1:59:85:82:
         18:39:51:52:9b:0c:57:fc:40:aa:9e:c1:eb:51:d5:b3:4c:2e:
         4c:1e:7e:70:12:1d:12:ce:2a:37:a4:1a:19:3a:77:5b:98:66:
         91:01:b9:d9:ee:cf:4c:de:79:34:30:13:6b:aa:a3:39:b1:5d:
         26:1a:5b:bc:b5:5b:be:6f:7b:5c:d4:61:b7:3a:9d:e2:47:9b:
         78:c8:16:26:65:06:3a:43:98:7b:57:08:fe:43:03:35:3b:fc:
         70:6a:43:61:b7:d2:ea:f4:22:62:e2:d7:8e:1d:f3:38:d6:f3:
         89:2e:42:6f:34:ea:2f:06:8f:ac:22:41:36:ca:b0:ed:31:6c:
         56:13:34:00:8e:5f:8d:ae:35:23:9e:3f:be:78:14:a8:8d:66:
         f8:5d:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:37 2026 by rpki-client