Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          cg3Tr+ZR3IqdPJrclTSnhr/cIHYjQx4+i+x5ElcD2Yo=
Subject key identifier:   51:A1:4B:51:3A:29:76:00:47:3A:EE:82:6A:51:C7:0E:F3:1A:3F:E4
Certificate issuer:       /CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A
Certificate serial:       06AF58B62006C1308B41A6AE64D8C213698A777A
Authority key identifier: FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa
Signing time:             Sun 03 May 2026 02:10:22 +0000
ROA not before:           Sun 03 May 2026 02:05:22 +0000
ROA not after:            Sun 02 May 2027 02:10:22 +0000
asID:                     131111
IP address blocks:        103.159.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl
                          rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:af:58:b6:20:06:c1:30:8b:41:a6:ae:64:d8:c2:13:69:8a:77:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A
        Validity
            Not Before: May  3 02:05:22 2026 GMT
            Not After : May  2 02:10:22 2027 GMT
        Subject: CN=51A14B513A297600473AEE826A51C70EF31A3FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:fc:bf:aa:eb:70:06:61:3f:89:80:c4:9a:
                    f3:fc:d0:79:0f:06:2c:8a:ee:31:f2:d5:02:51:a3:
                    78:38:f4:de:47:44:6b:7e:a4:42:a8:67:12:da:06:
                    f8:61:1c:1c:02:fe:24:d9:6d:32:2d:e8:0c:09:b5:
                    08:0a:5a:dd:0a:82:d7:bd:fd:84:a1:47:e6:6e:29:
                    d2:37:94:30:0b:50:79:bb:d6:2f:db:02:76:38:61:
                    48:fa:06:c2:03:1f:30:94:6e:a2:91:96:18:6f:29:
                    70:10:aa:cc:a7:55:1a:70:1f:8e:84:c5:90:2e:27:
                    2b:dd:18:19:ea:87:2e:20:6b:6e:bd:23:aa:6e:c8:
                    91:ff:76:fb:52:52:26:6a:fc:11:41:e0:32:19:88:
                    e5:91:e0:02:04:8c:ef:f0:a9:39:ff:3c:fc:41:73:
                    5b:1a:f5:6e:c6:39:c1:ae:c4:cc:e3:8f:b2:51:f5:
                    67:16:36:e7:5f:35:59:0d:e1:9f:49:e5:7e:4c:5d:
                    76:ff:9f:01:50:2a:d1:f8:0f:83:c0:54:e3:e4:ef:
                    30:2c:73:01:8a:54:90:48:89:e5:7c:a4:fb:67:2d:
                    91:39:05:bb:c7:17:52:53:e5:c4:c0:16:f2:a5:8d:
                    63:ee:bc:e5:f7:16:56:d1:06:5a:39:0f:cf:93:69:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A1:4B:51:3A:29:76:00:47:3A:EE:82:6A:51:C7:0E:F3:1A:3F:E4
            X509v3 Authority Key Identifier:
                keyid:FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:ae:07:18:92:eb:39:74:f3:43:99:24:d0:2a:9e:3f:0b:92:
         d3:7a:83:de:38:9b:16:d1:3c:9a:81:9d:ea:17:ba:a1:e4:d7:
         4d:58:c3:91:ac:84:fe:5d:3f:fc:24:ad:da:25:67:28:a7:34:
         c4:cb:12:84:54:da:4d:4d:3e:04:06:da:f6:13:42:7e:de:5a:
         e6:b0:5f:a9:80:83:1e:10:2b:9a:24:fd:2e:69:ec:15:67:f0:
         32:69:50:f5:8a:a8:6f:71:83:c5:83:89:4e:be:1c:22:ca:e0:
         0d:d4:fb:7a:52:6f:a0:48:1d:2f:b6:dd:9b:6d:cd:d9:f4:f0:
         e5:17:04:49:f1:c2:23:8e:d7:bd:29:d4:f9:77:36:39:b4:6d:
         21:de:f7:6e:08:cf:18:84:4b:ad:a5:dd:75:eb:3e:df:42:ff:
         c8:85:a2:ba:59:de:19:2b:aa:b8:41:4f:47:08:46:6f:06:da:
         39:08:53:77:53:51:0b:40:d2:e2:4a:d4:ab:4d:e2:96:c2:4a:
         d0:57:0d:dd:ac:f7:39:34:62:bd:78:8c:69:7e:d6:8c:a4:1b:
         37:11:13:95:b6:9e:5d:94:a9:55:ee:9f:6a:fe:83:0c:90:05:
         d2:81:a0:ec:6a:5e:7f:53:8e:81:c2:0b:68:15:bb:f5:b0:36:
         ed:07:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:19 2026 by rpki-client