Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa
File:                     3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (raw, json)
Hash identifier:          LWJq/XJLjGCHAx0PdP5FSd33v0EqmvbG5/RZUAKgCgs=
Subject key identifier:   04:38:0B:6C:2E:51:8C:49:D3:C6:46:3D:F3:B8:BB:90:79:12:B9:50
Certificate issuer:       /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
Certificate serial:       7944B2725968CFCEFA0CCE87DAF121715A9BC64B
Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa
Signing time:             Sun 03 May 2026 02:37:13 +0000
ROA not before:           Sun 03 May 2026 02:32:13 +0000
ROA not after:            Sun 02 May 2027 02:37:13 +0000
asID:                     136865
IP address blocks:        103.102.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl
                          rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 11:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:44:b2:72:59:68:cf:ce:fa:0c:ce:87:da:f1:21:71:5a:9b:c6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
        Validity
            Not Before: May  3 02:32:13 2026 GMT
            Not After : May  2 02:37:13 2027 GMT
        Subject: CN=04380B6C2E518C49D3C6463DF3B8BB907912B950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4e:3c:47:eb:79:4a:db:b5:bb:05:b1:df:2e:
                    a5:a3:50:30:33:f4:c9:61:0c:05:fc:4b:d9:c0:97:
                    36:e1:08:7e:c0:f5:14:3d:f7:97:52:f3:e9:ff:eb:
                    16:c2:dd:0d:49:b1:2f:7d:fa:08:83:ca:82:7e:7a:
                    8f:a7:d9:0d:d2:82:b6:a8:72:4e:21:2f:87:83:1e:
                    04:b1:ce:95:8d:6e:08:1b:fe:d3:fe:71:f8:41:c3:
                    a9:ac:f0:fc:8d:20:af:e5:30:24:44:f2:9c:1d:49:
                    39:ed:9c:97:df:23:81:5c:3b:28:4d:be:03:5b:c1:
                    d0:06:84:1c:29:2f:5b:f1:f3:27:88:7b:27:dd:e7:
                    8d:27:0a:77:89:08:e0:a6:d3:18:58:0b:91:67:a9:
                    b1:e5:53:e6:88:91:0a:50:e2:2c:a1:d5:f9:59:bf:
                    c5:f5:5e:47:f3:3d:7b:d2:20:c9:50:09:4f:f5:fa:
                    32:51:73:2b:f4:c5:71:22:40:af:e0:53:bf:9c:5a:
                    15:bb:05:28:c2:ac:a4:e2:a8:ef:1e:47:fb:8e:03:
                    e2:c7:94:fd:6e:d1:a4:39:85:f0:61:fb:c7:81:7a:
                    bc:9b:16:9c:96:5a:b6:24:8d:84:81:ac:69:ab:f3:
                    db:a2:ae:97:1f:10:ef:13:e4:53:8a:fa:b9:22:db:
                    f5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:38:0B:6C:2E:51:8C:49:D3:C6:46:3D:F3:B8:BB:90:79:12:B9:50
            X509v3 Authority Key Identifier:
                keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d5:a6:28:60:bd:b7:ea:21:4d:a2:1d:92:04:97:7c:a8:ed:
         27:59:1a:ee:ed:45:0d:39:ac:20:5a:ea:6e:ae:99:dd:bf:37:
         8b:b2:b0:6f:58:03:2d:84:b3:a8:8a:a5:fe:ac:47:cd:ed:8a:
         a5:ab:cc:01:f2:76:21:ea:0d:81:c7:f7:a4:e3:2f:88:0b:4f:
         07:25:80:1e:17:4a:06:06:0f:c2:2d:0a:3a:d0:ad:79:2a:10:
         ff:4d:76:1f:19:e3:76:59:4d:71:b2:70:d0:b9:e8:ee:4a:20:
         99:1d:b8:58:46:32:a2:4b:e2:e0:3f:bc:0e:03:7e:d5:6f:38:
         9b:bd:1d:9e:dc:23:54:5c:94:78:84:3a:bd:cc:b5:a8:fa:d0:
         82:56:c3:3e:3a:13:7a:da:8a:21:95:7c:63:62:c7:ec:5a:1e:
         9c:cc:8b:9a:ef:e7:ab:52:e8:4c:44:e0:13:32:1e:14:4f:77:
         81:60:d7:ea:10:64:30:d7:93:91:4f:6a:1d:0b:48:79:c5:5b:
         a6:0a:1b:e3:27:b0:b2:1b:b7:40:06:90:d4:b8:2e:98:4d:4a:
         7b:4b:dc:d4:37:01:c4:b7:84:1f:7d:b0:a4:0f:39:67:a5:7f:
         71:66:9c:3d:d4:76:b9:8f:30:87:b7:b7:30:17:20:48:1e:37:
         17:d1:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:24 2026 by rpki-client