Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa
File:                     3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (raw, json)
Hash identifier:          WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=
Subject key identifier:   3F:D7:09:CF:F9:5C:9E:03:65:67:C0:66:60:23:B1:2A:07:D1:FC:67
Certificate issuer:       /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Certificate serial:       2C9DAE5DA8C1C7A047FECC5DE022C9796ECFD3F5
Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa
Signing time:             Sun 03 May 2026 02:17:22 +0000
ROA not before:           Sun 03 May 2026 02:12:22 +0000
ROA not after:            Sun 02 May 2027 02:17:22 +0000
asID:                     141898
IP address blocks:        103.164.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
                          rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9d:ae:5d:a8:c1:c7:a0:47:fe:cc:5d:e0:22:c9:79:6e:cf:d3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
        Validity
            Not Before: May  3 02:12:22 2026 GMT
            Not After : May  2 02:17:22 2027 GMT
        Subject: CN=3FD709CFF95C9E036567C0666023B12A07D1FC67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:c4:23:b7:b5:7f:25:30:78:02:a7:9b:b0:
                    14:1d:c9:8f:28:bb:d2:df:8c:43:cb:ab:86:f9:ad:
                    e7:ca:f5:6d:ea:94:ff:13:0f:d3:02:64:ce:51:d0:
                    f8:27:7d:5c:de:58:99:7b:5d:73:66:50:92:a5:50:
                    85:46:49:bb:c2:71:2f:eb:cf:e6:fc:cc:9f:84:25:
                    ee:a8:41:de:8d:78:dc:c4:95:6e:94:dc:16:22:d0:
                    9b:be:a6:46:93:69:a3:c2:ca:4f:dd:f6:37:91:a1:
                    5f:13:3a:01:60:3c:cd:56:06:26:c5:0e:4a:5f:5a:
                    2e:4f:24:f0:9e:59:32:25:cb:7f:11:4a:eb:f9:9e:
                    25:46:17:78:a2:7b:3c:8a:81:b4:7a:56:20:7a:0a:
                    5e:fa:e9:8d:46:dc:d7:37:e6:79:30:8e:8d:b6:28:
                    5e:63:f1:d5:b7:95:b2:81:6c:81:6c:5a:3a:c6:f4:
                    6a:2a:86:e3:02:c4:a2:59:b4:5b:db:5a:62:e3:3e:
                    74:59:89:66:e1:8f:ac:d2:29:c4:0d:66:e8:ff:51:
                    8d:05:c1:9d:63:2b:88:14:b8:25:63:d4:f0:ef:05:
                    01:ab:7e:79:24:8d:3d:5e:dd:24:be:3b:48:c5:bb:
                    f6:0d:b6:cd:d0:00:a1:b6:a5:56:ab:a7:92:97:40:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D7:09:CF:F9:5C:9E:03:65:67:C0:66:60:23:B1:2A:07:D1:FC:67
            X509v3 Authority Key Identifier:
                keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:20:c4:0c:31:4b:31:aa:29:a6:db:47:2e:5b:5c:2a:41:73:
         62:53:1f:c5:df:21:21:87:4c:46:e7:c5:34:ea:90:8c:20:0c:
         67:6a:93:fe:82:7d:e5:6a:7d:be:d4:c6:24:52:de:4c:df:8e:
         3c:1d:5a:42:41:14:40:f9:37:69:10:43:0a:02:8e:47:1a:eb:
         0a:a6:80:43:40:5d:d4:37:4a:1a:68:d6:7e:6f:27:fe:ba:25:
         70:3a:2e:01:e4:d8:c0:65:08:f6:c5:ae:0a:63:39:fd:b9:3a:
         e8:08:52:dd:5a:77:03:f1:31:b9:d0:82:fb:00:5b:b6:0f:5c:
         d0:5f:be:63:a2:ec:5e:c1:34:74:c9:e1:94:7f:6f:41:3c:6d:
         04:c9:f8:64:0c:31:65:b7:bb:3c:fc:5b:0a:5e:08:5a:96:06:
         2a:23:7c:ae:26:5a:67:42:20:da:83:cb:a6:f2:0f:93:c1:bb:
         06:86:d7:33:50:df:fb:94:33:1b:a3:e2:02:2d:b2:c9:f2:4a:
         ae:f1:58:31:b3:2c:dc:32:20:60:8f:13:cb:66:d9:3f:c0:ec:
         5c:e1:d4:a4:96:e1:73:4d:4d:ce:19:11:c5:fe:ee:8e:ae:c7:
         93:d8:02:01:d6:e4:60:ce:1d:f9:6d:90:0f:00:0a:82:4c:b1:
         24:0c:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:05 2026 by rpki-client