Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa
File:                     3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier:          zQyUZlOFUHDGNe+npgwTsdpaoQy1XyYjr7ZYgl99pvg=
Subject key identifier:   67:24:98:D9:EE:B3:8C:85:E3:9C:49:CE:DF:E6:29:6B:D2:C3:15:D5
Certificate issuer:       /CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54
Certificate serial:       6F33EBAF08857AFDCF53C3055A309A4DBC2AE4F8
Authority key identifier: EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa
Signing time:             Sun 03 May 2026 02:13:37 +0000
ROA not before:           Sun 03 May 2026 02:08:37 +0000
ROA not after:            Sun 02 May 2027 02:13:37 +0000
asID:                     131769
IP address blocks:        103.141.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl
                          rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:33:eb:af:08:85:7a:fd:cf:53:c3:05:5a:30:9a:4d:bc:2a:e4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54
        Validity
            Not Before: May  3 02:08:37 2026 GMT
            Not After : May  2 02:13:37 2027 GMT
        Subject: CN=672498D9EEB38C85E39C49CEDFE6296BD2C315D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:a0:c0:f4:d1:d2:88:58:ef:65:0b:e9:0f:
                    dc:e0:a4:ff:86:4f:88:f4:33:1a:ed:11:35:32:3c:
                    18:17:e0:a1:6a:61:d2:6e:52:00:b2:d3:5f:50:40:
                    47:84:53:3f:18:40:40:e1:d2:ca:41:b4:20:fb:aa:
                    dc:d3:51:0f:b3:23:49:d9:6f:3e:36:2c:c4:39:c7:
                    49:e7:35:ed:1c:29:ed:35:91:c0:ef:04:80:fa:cc:
                    00:6c:e5:0b:92:01:87:c9:24:b2:d9:52:21:97:69:
                    a4:98:49:47:01:98:b5:d2:e1:04:46:73:f9:a5:91:
                    32:58:30:02:62:23:97:0d:5e:fa:4e:7e:7f:a8:f9:
                    9b:51:53:e2:68:a4:91:3c:a0:be:30:a1:b9:fe:7c:
                    2d:d8:04:8b:d9:73:b1:cb:48:8a:31:a8:f5:54:b5:
                    23:0b:2c:8a:b6:77:3e:4a:77:88:07:59:ba:90:fb:
                    c4:1f:37:c4:09:ec:d6:06:06:08:8d:97:50:3f:81:
                    42:03:a7:3a:52:7f:4e:86:87:44:be:3f:46:3a:7a:
                    10:10:64:ba:4e:eb:9a:77:52:ff:54:45:bd:61:c9:
                    0a:82:06:c0:bc:28:bb:4f:f4:33:d2:49:8f:b1:a6:
                    3d:11:d2:67:a6:03:53:b2:97:c3:0d:14:5c:9d:cf:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:24:98:D9:EE:B3:8C:85:E3:9C:49:CE:DF:E6:29:6B:D2:C3:15:D5
            X509v3 Authority Key Identifier:
                keyid:EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:39:29:b1:ec:c2:f6:35:89:14:9c:f4:e0:8e:96:30:ee:e4:
         12:25:ed:24:17:1c:1a:61:12:36:dd:06:8a:5a:71:27:f7:0e:
         e3:05:2b:e7:a2:2a:07:a8:17:c5:b4:6e:2b:6d:c9:3e:fb:d3:
         e9:dd:b0:be:12:37:cd:ad:db:80:07:3f:b9:12:cb:ca:99:f5:
         93:97:ce:73:f0:db:62:e8:67:03:ef:68:fe:d9:5c:b8:70:20:
         e1:1c:0b:ac:70:e3:6c:28:2e:8f:54:ac:52:2b:be:5e:cf:66:
         77:fb:88:b8:bb:71:e9:59:62:2a:fa:2f:ea:d7:68:c0:56:44:
         84:78:f9:c7:af:d7:fa:25:00:3b:92:2e:72:bc:8b:ea:1d:29:
         0e:1a:f0:ad:bd:5e:e8:82:4b:12:1d:d7:5f:77:fe:f7:21:2c:
         2c:88:74:43:85:c4:f8:35:e0:41:1f:94:26:5b:7a:75:1b:88:
         00:da:ef:e0:d8:cc:01:53:22:7f:96:a3:51:07:b8:28:54:15:
         39:52:19:3d:89:fd:67:4f:36:7d:1e:72:67:b1:72:6f:6a:14:
         94:89:b4:f7:68:69:ec:c5:40:80:c2:bd:d0:00:2b:ba:02:a8:
         e3:82:94:a3:0f:b8:6f:f5:73:61:91:77:bc:8b:6f:b2:e4:19:
         70:51:85:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:34 2026 by rpki-client