Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa
File:                     3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa (raw, json)
Hash identifier:          I2YIeew2oZSIPdct3GSYzDNuqJxTOhVzByMVv86tq2I=
Subject key identifier:   12:53:30:47:F4:15:90:65:4D:77:C3:8D:65:5F:34:CB:A5:0B:C0:BF
Certificate issuer:       /CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7
Certificate serial:       6E8A713331274EADE0D5C48895D3B7BE6A2BE64C
Authority key identifier: 2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa
Signing time:             Sun 03 May 2026 02:16:34 +0000
ROA not before:           Sun 03 May 2026 02:11:34 +0000
ROA not after:            Sun 02 May 2027 02:16:34 +0000
asID:                     150224
IP address blocks:        103.16.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl
                          rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8a:71:33:31:27:4e:ad:e0:d5:c4:88:95:d3:b7:be:6a:2b:e6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7
        Validity
            Not Before: May  3 02:11:34 2026 GMT
            Not After : May  2 02:16:34 2027 GMT
        Subject: CN=12533047F41590654D77C38D655F34CBA50BC0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:a0:d3:4d:ac:2c:1d:60:09:e4:0c:46:9b:
                    d3:11:a1:da:ef:86:07:68:f5:28:da:97:29:29:25:
                    27:54:e8:f6:01:37:31:40:84:c8:66:67:b6:7d:23:
                    d7:d8:49:e7:09:0c:bf:5a:c5:23:c6:74:8e:89:69:
                    cd:fb:9a:ff:85:03:b0:ec:04:05:43:68:cd:df:59:
                    d1:6a:8c:39:28:d0:08:aa:36:bc:d7:05:95:06:ef:
                    e5:b0:3e:ed:4c:26:fd:e4:37:a7:6a:cf:57:17:32:
                    f9:22:3d:91:b0:ef:24:d1:f1:5b:c8:46:6e:c1:bd:
                    8e:d8:00:c0:e6:9b:e1:af:f7:91:9c:20:f4:52:bd:
                    f4:3a:36:79:39:eb:27:c8:54:cf:65:eb:b2:84:cd:
                    f3:da:f3:12:97:9c:8d:30:64:d9:b0:8d:23:a1:55:
                    65:1b:e3:24:a0:5e:95:e7:10:f3:9b:9a:23:2d:c3:
                    bf:16:10:cb:1f:d1:c8:30:3c:2c:af:26:af:6b:94:
                    6e:02:ca:64:66:58:49:35:98:18:63:ef:05:da:73:
                    76:7d:84:10:e2:ed:56:99:1d:21:9f:bd:99:cd:22:
                    98:90:f5:83:6d:1d:09:fb:30:98:3c:96:41:35:5d:
                    fb:96:42:42:68:8a:fc:18:2f:81:82:a7:a7:49:b8:
                    bd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:53:30:47:F4:15:90:65:4D:77:C3:8D:65:5F:34:CB:A5:0B:C0:BF
            X509v3 Authority Key Identifier:
                keyid:2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:98:9d:66:d4:e6:24:3f:f8:6c:db:d6:bb:3e:4b:5f:65:57:
         39:d9:b6:a2:78:86:29:04:25:f5:fa:39:7c:b2:66:e2:b4:7f:
         44:09:e0:dc:43:be:73:4a:ef:f4:0f:08:d3:66:ea:a6:fa:c5:
         60:be:aa:dc:a7:63:7f:84:7e:7a:cb:81:ce:1e:d2:e3:f8:b7:
         1c:dc:ca:d8:9e:0c:b3:d1:76:a6:12:d9:e0:06:ad:ee:e7:4f:
         79:33:8a:cf:e3:21:00:7d:31:ef:f2:bf:68:9a:e9:e5:aa:58:
         57:c8:ea:3e:d9:f7:2a:ca:3f:44:d8:2c:d1:65:b9:d0:bb:d3:
         90:d7:af:81:77:05:4b:63:62:52:ce:e7:00:2c:e0:a1:56:6b:
         27:4f:f0:ad:9d:b5:f9:2d:2c:00:39:d5:d2:f2:34:49:d1:fe:
         54:c4:f7:7a:45:13:a3:61:55:15:76:99:4d:f2:3a:5d:14:66:
         0a:c9:be:ea:c1:0d:ec:9a:3a:af:56:81:8f:b5:2d:e0:be:53:
         bf:7a:a9:9a:2d:5d:85:86:88:f0:18:38:ac:ba:ff:1a:cc:6c:
         f7:28:59:13:a0:00:b1:eb:41:4a:27:ab:26:3d:79:c7:d6:cf:
         08:6a:7a:b1:f8:16:64:2e:ea:07:11:3d:f9:d4:24:28:0e:9d:
         74:94:c8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:23 2026 by rpki-client