Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232332e302f32342d3234203d3e20313430343233.roa
File:                     3130332e3135312e3232332e302f32342d3234203d3e20313430343233.roa (raw, json)
Hash identifier:          zQDfW1NxwBHwSXrBjSCIb/N2klzYd2Y+T4JOb1cDmQA=
Subject key identifier:   37:B6:5D:3D:6D:ED:21:4C:30:82:91:AF:07:98:F4:FB:3D:1E:33:63
Certificate issuer:       /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
Certificate serial:       63ACEC998E28C15351AF30A967B4CBAD5CBA1F54
Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232332e302f32342d3234203d3e20313430343233.roa
Signing time:             Sun 03 May 2026 02:16:43 +0000
ROA not before:           Sun 03 May 2026 02:11:43 +0000
ROA not after:            Sun 02 May 2027 02:16:43 +0000
asID:                     140423
IP address blocks:        103.151.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl
                          rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ac:ec:99:8e:28:c1:53:51:af:30:a9:67:b4:cb:ad:5c:ba:1f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
        Validity
            Not Before: May  3 02:11:43 2026 GMT
            Not After : May  2 02:16:43 2027 GMT
        Subject: CN=37B65D3D6DED214C308291AF0798F4FB3D1E3363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:1d:d8:ba:6a:32:2e:6c:9c:99:ec:c0:2b:
                    27:63:0e:4a:47:4f:91:1e:45:30:e0:0d:45:c0:5a:
                    8d:9a:e1:4d:1a:e0:04:91:89:78:df:0d:0e:3c:ac:
                    a3:40:f5:72:6e:04:6b:82:fd:db:30:3f:bb:be:64:
                    b7:da:ca:1f:71:f4:0e:91:d0:08:6b:de:14:3b:46:
                    60:72:d4:50:5c:09:c9:28:f0:a1:11:9b:59:bf:fe:
                    cd:74:a4:c8:2c:16:e9:a9:e2:09:e7:50:0f:53:c5:
                    ff:6d:7d:61:36:93:a3:de:27:dd:4b:31:6b:90:43:
                    b6:cf:fc:41:d6:93:21:63:19:60:2d:8f:d2:39:0d:
                    d4:b1:27:49:e3:68:b2:35:73:f9:2e:1f:6d:2b:5d:
                    45:b8:d7:02:fa:4a:6c:4d:9e:ae:2f:b8:34:f4:11:
                    c7:76:bd:4c:70:79:70:b8:f6:c9:5e:6c:85:19:b9:
                    de:55:8b:a4:bc:8a:3a:16:47:0e:5f:b6:a2:8c:cc:
                    19:b9:55:22:0b:37:5f:cb:af:de:ba:3a:33:de:97:
                    b0:81:98:cb:d2:d5:74:f2:29:ad:03:6b:06:78:9c:
                    8d:61:08:d5:2b:c3:86:6a:ce:65:de:1e:6e:44:03:
                    88:c2:4f:e5:a2:9c:ca:4c:ff:0e:a6:39:c3:aa:f4:
                    e1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:5D:3D:6D:ED:21:4C:30:82:91:AF:07:98:F4:FB:3D:1E:33:63
            X509v3 Authority Key Identifier:
                keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/3130332e3135312e3232332e302f32342d3234203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:24:1f:26:7e:60:3f:e3:f6:e2:56:d4:d1:4e:d4:0e:39:df:
         07:3c:eb:73:97:f6:58:bb:7d:44:d5:4d:8a:c4:f4:63:98:b7:
         38:2c:cb:10:f5:ce:87:d0:5e:5e:0f:dc:37:dc:43:a1:b0:5e:
         25:08:1c:8e:81:14:ae:15:7e:4e:53:fb:7d:6b:75:82:0d:d1:
         5f:72:ba:70:b7:98:1d:f1:4e:3c:25:29:3b:f2:f9:7f:c9:b0:
         7a:39:6a:86:e2:c7:4a:80:85:91:e6:2f:9a:09:f8:b1:1b:39:
         ac:59:a0:5a:39:66:80:b7:73:ac:e8:f6:65:0d:05:13:7b:33:
         a1:57:ca:41:94:ca:45:1f:53:23:d2:14:87:64:1e:96:63:a3:
         b9:6d:76:0d:c7:4b:02:93:75:dd:e7:2e:a5:1a:9a:6c:42:96:
         fc:bc:17:65:2a:49:00:33:93:3c:8a:47:63:43:fc:6f:76:37:
         dd:73:7f:60:b8:fb:df:c2:33:f8:88:1a:ab:37:a7:4a:d7:57:
         d5:42:90:a3:59:94:9b:22:e1:ff:11:b4:0d:ac:cd:1d:ca:bf:
         31:3b:a6:89:f9:cb:86:f5:6a:b3:73:7f:12:8a:79:dc:2a:6b:
         40:1a:4e:e0:c6:21:05:ff:06:ab:ef:c3:cd:46:ab:5d:11:24:
         53:62:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:59 2026 by rpki-client