Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa
File:                     3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (raw, json)
Hash identifier:          PPKzPS1avC1hYARVLoXIKKmtPdbk4f7qBVqCnnsV8sM=
Subject key identifier:   D9:ED:7F:CA:6D:92:3C:8D:46:4C:28:AE:4A:D9:4A:93:13:D1:27:EF
Certificate issuer:       /CN=B68CA352FD19570302F874C669E957D75A73CB1A
Certificate serial:       391B55070C0CBC7859D1B1269058912C150BD57A
Authority key identifier: B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa
Signing time:             Sun 03 May 2026 02:18:39 +0000
ROA not before:           Sun 03 May 2026 02:13:39 +0000
ROA not after:            Sun 02 May 2027 02:18:39 +0000
asID:                     139438
IP address blocks:        103.145.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl
                          rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1b:55:07:0c:0c:bc:78:59:d1:b1:26:90:58:91:2c:15:0b:d5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B68CA352FD19570302F874C669E957D75A73CB1A
        Validity
            Not Before: May  3 02:13:39 2026 GMT
            Not After : May  2 02:18:39 2027 GMT
        Subject: CN=D9ED7FCA6D923C8D464C28AE4AD94A9313D127EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:fa:ae:29:f0:46:ae:e5:ab:97:58:53:a9:
                    ce:52:11:a5:11:25:91:3d:9c:79:38:26:3f:05:95:
                    20:f6:0b:9c:90:8e:a1:4b:1f:83:d2:d4:13:38:e3:
                    05:20:f0:9a:be:3b:2d:48:59:db:a9:67:a8:50:8c:
                    a0:51:d1:98:ff:b5:2a:f9:92:84:67:ed:66:2d:34:
                    3e:25:a7:fb:f9:76:65:3c:d1:49:53:07:0a:75:01:
                    00:5c:ec:91:e6:f1:0b:48:bf:e4:b5:cf:b4:f1:9e:
                    21:66:0f:ba:16:49:f8:7e:4d:df:67:be:8c:e1:b3:
                    3e:19:80:ed:43:95:67:0a:88:8a:8e:ff:40:28:12:
                    6f:72:0f:4e:23:c5:0d:83:be:ab:0a:dd:26:7e:6e:
                    b7:88:ef:f8:9a:09:1a:f5:fd:1b:db:31:16:f0:a2:
                    80:6b:7f:bd:7e:c6:0a:ce:06:66:9b:21:12:d8:0b:
                    03:b4:93:d3:6d:2a:53:1c:0b:5c:b5:12:0e:ae:bd:
                    af:63:ca:e9:ff:72:d8:0d:b5:5c:fd:b0:d4:6c:d6:
                    e3:46:83:7e:2b:bc:39:80:57:32:d2:7a:7d:fb:eb:
                    61:be:4b:75:01:2d:cf:d9:6a:a4:b0:19:c3:b6:09:
                    9e:42:39:93:a9:f3:ac:78:15:5d:d6:a6:7f:2c:2e:
                    ec:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:ED:7F:CA:6D:92:3C:8D:46:4C:28:AE:4A:D9:4A:93:13:D1:27:EF
            X509v3 Authority Key Identifier:
                keyid:B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:4f:1f:40:8e:cc:f9:8e:b0:2e:15:0d:5d:b0:4b:59:9b:58:
         ba:85:72:c7:58:be:96:c5:09:40:c8:63:26:69:bb:d1:1e:71:
         62:96:b7:98:34:11:21:de:99:2c:4e:89:6e:ca:0a:8e:9e:e0:
         d3:57:ad:c8:ee:88:38:79:ce:5d:02:0a:22:7c:ac:ac:19:39:
         0c:09:02:b1:58:23:a0:51:d8:82:93:94:0b:2c:4b:3d:af:d0:
         57:c2:7a:18:92:af:f9:b1:32:4d:cc:a1:a6:c7:cc:6b:f9:4f:
         04:41:b7:df:cb:b1:27:00:9d:40:c1:e4:e5:a4:b6:ec:c6:84:
         0e:ad:f3:74:ba:10:98:5a:66:fd:e2:2e:21:72:99:98:77:c9:
         3c:21:1e:0c:05:ce:22:c8:51:aa:f5:ad:75:a6:78:a8:c5:a6:
         29:37:29:f8:d5:79:af:7f:d8:29:78:2f:4a:91:af:54:c5:d4:
         d2:f7:d2:93:2c:3e:36:90:18:69:2e:ac:c1:74:0e:65:20:67:
         dd:13:cb:cd:e0:7b:4d:88:c1:fe:3c:46:2b:be:76:92:c7:69:
         01:9c:d0:bf:89:9a:df:bf:c9:38:23:be:c7:6d:68:8c:fb:7e:
         25:a0:b7:d7:cf:7e:3b:cb:c9:5c:84:b9:ca:40:31:f0:9c:dd:
         f3:4b:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:33 2026 by rpki-client