Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          FvZ7WZxzfXpsSvXJhkiOD/3SywK9juuYWNoUcsri8H4=
Subject key identifier:   81:17:A1:F3:05:CF:6A:C7:69:87:8E:C7:80:43:44:96:3B:BC:F1:93
Certificate issuer:       /CN=45AB46F2FD631F732ABD2CA6402F2CD6704A930A
Certificate serial:       403791FBDC934EDEE35D3C46551BAD92220BF8C8
Authority key identifier: 45:AB:46:F2:FD:63:1F:73:2A:BD:2C:A6:40:2F:2C:D6:70:4A:93:0A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa
Signing time:             Sun 03 May 2026 03:18:51 +0000
ROA not before:           Sun 03 May 2026 03:13:51 +0000
ROA not after:            Sun 02 May 2027 03:18:51 +0000
asID:                     136052
IP address blocks:        103.117.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.crl
                          rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:37:91:fb:dc:93:4e:de:e3:5d:3c:46:55:1b:ad:92:22:0b:f8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AB46F2FD631F732ABD2CA6402F2CD6704A930A
        Validity
            Not Before: May  3 03:13:51 2026 GMT
            Not After : May  2 03:18:51 2027 GMT
        Subject: CN=8117A1F305CF6AC769878EC7804344963BBCF193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:17:fd:16:8b:9d:62:f3:a8:bd:c1:93:35:
                    fd:1b:39:7a:21:4c:e3:7d:9e:b6:a9:3e:fd:10:38:
                    b0:2d:ed:8c:6a:4c:f6:b2:ed:b4:0b:a2:87:15:e2:
                    0f:94:10:5c:90:29:bb:29:85:16:e3:73:bb:26:cb:
                    9f:b2:a6:05:d0:dc:7a:9a:91:72:4c:f5:e3:e9:60:
                    01:9d:d6:3e:fa:74:ec:76:f2:2d:2e:8a:f4:30:b2:
                    6e:d5:03:8f:86:e6:4d:d8:3a:50:ab:cf:e0:8e:49:
                    c7:30:3e:f3:a6:af:29:6f:d5:a5:ae:1d:ba:c2:81:
                    f3:ea:0b:e1:2b:b6:ae:33:b1:a1:b7:b9:de:1f:71:
                    b1:e3:29:5e:02:a3:83:5c:e8:08:40:c2:19:bb:a7:
                    10:ab:5d:34:78:57:f4:25:95:6d:e9:6f:71:a3:88:
                    f1:65:d4:23:3b:b9:02:a9:34:90:cd:38:e0:af:2e:
                    fe:48:aa:fd:20:04:35:43:c7:c7:5e:1d:55:1e:5a:
                    cc:0d:03:41:7e:57:18:5a:71:c0:b8:06:24:59:e6:
                    cc:fa:1e:96:9f:08:d2:ef:fe:cc:17:7e:63:c3:54:
                    f0:67:2f:41:3b:af:cd:d2:ec:92:e0:7a:77:ab:f1:
                    ca:98:a8:ad:9e:5f:a4:03:c4:cd:81:6d:e3:15:82:
                    1c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:17:A1:F3:05:CF:6A:C7:69:87:8E:C7:80:43:44:96:3B:BC:F1:93
            X509v3 Authority Key Identifier:
                keyid:45:AB:46:F2:FD:63:1F:73:2A:BD:2C:A6:40:2F:2C:D6:70:4A:93:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:cd:04:03:a2:60:be:c0:1d:44:cb:c6:e1:cf:11:01:8a:
         6e:7b:87:57:2a:ad:36:c8:fb:3e:12:c1:83:d3:be:af:d3:d5:
         be:1a:09:79:db:44:1b:03:2d:c1:c2:a4:40:a8:0c:c4:56:69:
         6d:b2:10:cc:72:cf:c0:dc:3c:cf:3c:ee:ac:5f:26:74:8a:42:
         93:82:25:f8:cc:db:56:71:75:8e:4a:8d:36:07:cd:85:9c:00:
         70:af:9e:d8:7f:d3:1f:79:78:bd:ff:27:37:f0:ea:7f:40:e3:
         81:19:95:12:94:bd:3d:5c:bd:b7:a1:26:67:4e:90:f3:36:7c:
         d6:eb:7b:cd:07:0b:93:6b:e8:50:96:f3:c3:3e:47:e5:e8:72:
         86:0e:2c:c5:90:5e:54:23:4b:15:9e:77:c7:6b:c5:21:5e:e0:
         2e:e3:c2:30:24:d8:ed:4d:56:99:41:c5:8c:36:32:64:83:a5:
         e4:b7:31:b4:c9:43:74:9d:a8:aa:40:bf:fa:d1:da:95:be:7a:
         c4:39:16:c8:67:3f:10:15:0a:39:27:55:af:8f:32:86:8f:57:
         67:01:97:87:ac:fc:7e:2e:2b:7f:63:09:9c:cb:fc:b9:f8:60:
         ce:68:dd:52:38:5f:66:4c:af:0e:0c:e2:6f:27:11:ef:0f:78:
         df:07:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:16 2026 by rpki-client