Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          HZWp6s4pZWF/5Jmtyb043W9PpmxxelaQFAtDR552/AM=
Subject key identifier:   34:F3:AC:F3:EC:56:34:E7:47:E8:33:7E:1F:50:F0:3B:15:47:BB:8F
Certificate issuer:       /CN=E205BAF9253BD3679578372318D2263D430F4D99
Certificate serial:       3033B0DBCFF47D266544AF750C02D1DE3F4C67EC
Authority key identifier: E2:05:BA:F9:25:3B:D3:67:95:78:37:23:18:D2:26:3D:43:0F:4D:99
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 03:07:59 +0000
ROA not before:           Sun 03 May 2026 03:02:59 +0000
ROA not after:            Sun 02 May 2027 03:07:59 +0000
asID:                     17995
IP address blocks:        103.164.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.crl
                          rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 14:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:33:b0:db:cf:f4:7d:26:65:44:af:75:0c:02:d1:de:3f:4c:67:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E205BAF9253BD3679578372318D2263D430F4D99
        Validity
            Not Before: May  3 03:02:59 2026 GMT
            Not After : May  2 03:07:59 2027 GMT
        Subject: CN=34F3ACF3EC5634E747E8337E1F50F03B1547BB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:15:9e:00:a8:ba:77:3f:d4:e7:b0:f3:28:
                    88:57:7b:f3:40:eb:89:0d:4e:bf:ce:76:f3:b9:5c:
                    d3:39:de:9c:4c:c3:5d:72:2c:54:8b:1c:e2:3b:eb:
                    b9:3c:b2:19:82:18:b5:29:0b:93:0f:96:8d:66:06:
                    0d:88:8d:dc:c8:75:fb:2d:2d:8a:f2:1c:b9:37:d6:
                    32:cc:ac:af:dc:de:bd:06:d6:c6:33:3e:4a:04:85:
                    95:59:f0:91:f4:00:e4:ad:03:8c:24:53:72:e6:d9:
                    93:28:fe:6b:44:50:11:f1:06:98:66:26:e5:e1:d3:
                    99:0f:c0:58:ae:c0:0d:98:3d:a8:dc:1a:96:f7:9d:
                    fb:12:b0:cf:80:8a:53:7d:74:6d:96:8b:1a:fc:1a:
                    56:25:1b:83:ec:66:f9:fd:94:a2:2b:b2:66:54:15:
                    40:9f:69:d7:8e:58:ce:23:e0:59:9f:94:8e:95:f0:
                    62:2a:c5:aa:e6:f1:dd:b7:3f:cf:c2:09:ea:ad:f6:
                    0c:36:2f:7d:cc:fd:3b:ec:00:96:be:c3:d1:d1:ca:
                    8a:6f:da:1a:8a:c0:a4:f7:eb:1c:23:12:7e:d8:3b:
                    1a:51:d8:50:97:13:79:17:3e:f2:4e:23:c8:5b:05:
                    42:8d:8f:91:87:bd:49:85:76:05:a1:31:a1:7d:2d:
                    63:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F3:AC:F3:EC:56:34:E7:47:E8:33:7E:1F:50:F0:3B:15:47:BB:8F
            X509v3 Authority Key Identifier:
                keyid:E2:05:BA:F9:25:3B:D3:67:95:78:37:23:18:D2:26:3D:43:0F:4D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:0c:42:ee:62:c8:94:32:ef:24:e7:d5:e8:df:67:40:a0:79:
         d4:ed:63:7d:86:7e:17:01:19:e3:ca:65:15:00:8f:3e:40:92:
         67:4d:20:48:4d:5f:98:68:30:91:5c:43:39:e1:6b:6e:09:1e:
         cc:a4:22:4f:d9:c4:8a:66:49:76:7b:a7:7b:95:bc:be:71:e7:
         96:c3:43:fa:a8:1b:73:29:03:84:f5:c7:e1:70:1d:17:c4:6a:
         2d:f6:24:0c:3a:4a:de:c6:6d:b4:60:33:6c:b3:1d:80:f8:4c:
         09:31:ed:11:b6:6e:98:91:da:05:f3:a2:81:79:0a:31:69:03:
         b0:5b:4e:fd:91:f5:f5:79:70:02:a8:5f:73:bb:2b:a6:0c:85:
         9e:62:b0:98:c4:a9:1f:42:61:58:01:cf:58:7f:44:f0:0d:b2:
         df:bb:66:5f:1a:4c:fe:7a:af:d2:78:61:ad:b4:04:0d:47:62:
         bd:93:1c:de:37:08:1e:f7:32:75:62:3a:31:d3:e7:5c:f9:fb:
         05:69:3b:54:06:95:8a:5d:c4:24:ca:94:ea:17:aa:e3:ca:8e:
         51:be:87:67:da:13:2c:d4:02:b8:e2:ed:94:2d:3a:3f:3c:4e:
         25:cd:94:de:c2:aa:56:5c:a3:5b:43:a3:d1:e0:63:59:0e:e4:
         13:1e:f1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:33:55 2026 by rpki-client