Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/3130332e39352e34302e302f32322d3234203d3e203538343935.roa
File:                     3130332e39352e34302e302f32322d3234203d3e203538343935.roa (raw, json)
Hash identifier:          imn0bSKNfH06upPmhn2tYthgsfP9Fs6RXvoYDtKKr64=
Subject key identifier:   4A:CA:DA:D4:90:3E:1A:A4:A4:C0:A8:90:42:5A:2F:ED:4D:6A:9D:75
Certificate issuer:       /CN=F36B468C4CF4F06F0C43FAE230EE86C7DA06C797
Certificate serial:       757740B7472D6035687712709CCD2EB855467A31
Authority key identifier: F3:6B:46:8C:4C:F4:F0:6F:0C:43:FA:E2:30:EE:86:C7:DA:06:C7:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/3130332e39352e34302e302f32322d3234203d3e203538343935.roa
Signing time:             Sun 03 May 2026 02:45:55 +0000
ROA not before:           Sun 03 May 2026 02:40:55 +0000
ROA not after:            Sun 02 May 2027 02:45:55 +0000
asID:                     58495
IP address blocks:        103.95.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.crl
                          rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 20:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:77:40:b7:47:2d:60:35:68:77:12:70:9c:cd:2e:b8:55:46:7a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B468C4CF4F06F0C43FAE230EE86C7DA06C797
        Validity
            Not Before: May  3 02:40:55 2026 GMT
            Not After : May  2 02:45:55 2027 GMT
        Subject: CN=4ACADAD4903E1AA4A4C0A890425A2FED4D6A9D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:b3:35:21:27:1c:6b:f5:09:77:ec:3a:4d:
                    c7:b2:eb:72:88:47:0b:68:90:8d:73:9d:25:dc:e6:
                    b5:25:72:11:ac:cc:c1:9d:aa:e5:40:45:cd:3b:28:
                    75:2a:18:eb:56:a3:f2:c5:3a:a6:67:96:81:e6:e3:
                    83:a6:e4:f0:23:45:95:48:ee:3b:79:a5:d9:e0:fb:
                    01:38:a2:f4:db:46:81:d3:4d:fb:6c:47:7a:b7:8c:
                    97:fb:f6:10:54:8d:a6:4a:d0:0f:49:51:5a:f9:d5:
                    05:cf:6c:f3:4c:05:78:cd:58:04:be:95:db:f1:33:
                    da:a9:6a:88:40:8b:aa:56:51:e3:46:84:4d:79:db:
                    47:45:a6:3e:48:ab:3c:ea:ce:2f:3e:83:d3:e2:0d:
                    6e:36:61:1e:13:10:c1:eb:ee:6f:6c:33:0e:01:e1:
                    9b:7e:92:47:69:6f:91:5e:3c:e7:25:93:e4:ba:f9:
                    97:85:f1:a5:14:78:89:c2:b3:17:9f:d4:08:7f:2a:
                    fa:44:70:b8:2e:93:66:2d:e5:49:96:cb:f3:69:6b:
                    28:a9:b7:df:b1:10:d0:70:40:58:8e:64:99:04:21:
                    af:3d:6f:61:e4:b8:86:f1:62:f2:ac:95:b3:c9:26:
                    de:6e:d2:b2:14:6c:43:fb:6a:95:6a:22:d4:dc:29:
                    9c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CA:DA:D4:90:3E:1A:A4:A4:C0:A8:90:42:5A:2F:ED:4D:6A:9D:75
            X509v3 Authority Key Identifier:
                keyid:F3:6B:46:8C:4C:F4:F0:6F:0C:43:FA:E2:30:EE:86:C7:DA:06:C7:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/3130332e39352e34302e302f32322d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:64:ee:0a:e7:1c:e1:a1:d0:27:ff:3d:cc:4b:4e:5f:d2:f0:
         6a:a4:70:9c:e4:24:86:fa:6f:03:7c:24:f4:fd:c2:75:c9:be:
         eb:01:f1:fb:cb:fd:fe:5d:88:fc:65:35:f5:c1:32:f1:17:87:
         c4:ed:82:e8:0c:e1:15:6e:53:fc:57:44:33:38:ba:77:c6:c5:
         12:cd:22:35:c2:9f:60:6a:d2:98:2a:6f:26:7c:75:ef:5e:34:
         f7:e2:9d:48:db:93:5c:44:34:21:8b:3c:f9:10:08:9a:57:93:
         1a:74:34:1e:23:71:78:92:d0:3a:46:e8:27:cf:3e:3a:62:10:
         0a:8d:cd:bd:c1:7d:29:2b:99:a7:59:43:d1:71:29:96:c6:69:
         89:6f:91:62:1a:9e:a7:de:34:0c:3b:8f:93:d1:c8:49:60:41:
         f8:51:43:ff:4b:07:48:00:89:4f:33:e7:82:0f:84:04:93:e9:
         35:6b:25:af:58:ed:f1:c2:4b:fb:ad:6f:d6:e9:23:9a:6c:a3:
         cb:2c:c1:1e:1a:29:a4:a8:41:9d:e5:77:75:cd:c9:de:e6:aa:
         86:9e:c6:c3:45:cc:82:99:4a:7e:a1:c4:2c:ea:c2:d7:39:30:
         95:82:50:37:41:cf:ec:37:e6:4c:e0:9a:aa:4c:ee:b9:d9:54:
         09:3e:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:25 2026 by rpki-client