Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=
Subject key identifier:   7E:7D:C3:87:39:20:92:5E:CE:89:54:BA:29:36:8A:2A:22:A6:B3:22
Certificate issuer:       /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242
Certificate serial:       1D0A0F0DAA06902A94C4749F0E5C19F0CEBD53A0
Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:48:29 +0000
ROA not before:           Sun 03 May 2026 02:43:29 +0000
ROA not after:            Sun 02 May 2027 02:48:29 +0000
asID:                     9341
IP address blocks:        103.181.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl
                          rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0a:0f:0d:aa:06:90:2a:94:c4:74:9f:0e:5c:19:f0:ce:bd:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242
        Validity
            Not Before: May  3 02:43:29 2026 GMT
            Not After : May  2 02:48:29 2027 GMT
        Subject: CN=7E7DC3873920925ECE8954BA29368A2A22A6B322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:29:14:b3:f5:92:8e:f3:5e:2d:90:3b:c5:
                    7f:91:0c:55:c9:a9:fc:b5:a7:d9:46:61:c9:ae:cd:
                    57:5c:06:d1:de:74:42:e6:1c:f7:59:a5:c1:da:47:
                    16:7d:a6:cc:7f:40:38:c0:e8:07:45:4c:5d:eb:39:
                    e5:a8:aa:c5:d2:41:85:5e:1d:af:83:11:23:f8:ec:
                    30:21:7a:24:ba:b0:9c:b3:62:c3:2c:79:83:ad:d2:
                    c3:4f:1c:71:f0:eb:ad:cc:17:bc:e4:98:ee:fa:6b:
                    26:b7:27:a4:41:8c:8c:1b:66:36:0e:6b:0b:fa:67:
                    69:a1:a9:c8:8e:ac:ba:ef:fc:8a:4a:9f:be:16:ee:
                    8b:fe:40:9d:01:7b:f4:c8:f9:63:79:c0:9a:29:20:
                    fb:ea:49:31:39:5d:ed:95:a0:46:a9:d8:e4:b7:01:
                    95:75:49:3e:af:87:71:24:ad:75:22:04:a5:78:da:
                    ed:1b:75:27:d8:24:05:87:7f:a6:af:a2:94:2d:d3:
                    d0:a6:1c:b2:f3:95:ac:e0:82:e8:4e:ec:93:4e:0a:
                    10:8a:1d:8c:a7:d0:27:81:93:9a:fd:88:cf:45:05:
                    68:6b:b1:a0:c0:c5:56:05:28:a5:0d:d3:04:b3:c9:
                    ae:81:e6:bd:c1:51:f4:3e:b4:1a:d9:26:da:a7:69:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7D:C3:87:39:20:92:5E:CE:89:54:BA:29:36:8A:2A:22:A6:B3:22
            X509v3 Authority Key Identifier:
                keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:76:36:7e:bf:b5:6c:61:bc:68:5f:5a:e3:60:0c:16:02:73:
         7a:20:98:9d:50:7a:54:83:9b:cf:6e:4b:3b:a3:a6:69:a1:4f:
         f9:31:8a:63:b6:5a:5f:e6:87:71:f2:0f:4d:0e:f8:a3:b3:9d:
         0b:1a:68:ae:ff:8c:d3:b0:04:19:19:8d:17:2f:7b:19:a4:96:
         b5:d8:b7:aa:97:48:dc:92:39:dc:5e:44:45:eb:80:88:5c:2d:
         24:38:41:75:09:80:cb:43:63:60:d7:28:1d:b2:7e:67:4d:9e:
         58:28:f6:2f:6e:05:4e:c5:3e:15:d8:dd:3b:24:52:dc:ee:0b:
         65:3c:52:d4:25:c4:de:b2:71:98:20:52:49:7e:b0:23:bd:81:
         25:ef:09:51:b3:7b:67:93:1f:80:42:47:53:2f:9a:60:78:bf:
         18:a0:e1:46:95:2c:15:40:1f:7c:65:fe:1c:19:54:08:c6:93:
         67:c2:fa:a4:3b:7c:03:2c:82:2e:c7:77:80:d7:5f:5b:22:a4:
         ad:33:ca:63:31:2b:64:4a:2d:bc:99:bb:c6:9f:ad:3a:08:15:
         aa:39:f8:a8:af:bf:b4:7b:33:05:85:4c:c8:1a:81:fb:d1:ee:
         e0:66:25:be:e8:3b:8b:03:a9:29:69:f5:c7:e1:11:9c:ad:a2:
         10:31:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:26:35 2026 by rpki-client