Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa
File:                     3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (raw, json)
Hash identifier:          52S2LH7XP8/eJAv2z0VJNDFFpAYh34WjK2J7d6q8uvc=
Subject key identifier:   B3:48:E9:F8:50:3D:A7:39:18:A2:F0:74:4E:6F:31:65:6F:77:58:22
Certificate issuer:       /CN=0139BB0BDA0215A5AD4AB57CF22329862077511D
Certificate serial:       1A71C88FDEB87D019300A71A1A86C338EF4F08B9
Authority key identifier: 01:39:BB:0B:DA:02:15:A5:AD:4A:B5:7C:F2:23:29:86:20:77:51:1D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa
Signing time:             Sun 03 May 2026 02:19:04 +0000
ROA not before:           Sun 03 May 2026 02:14:04 +0000
ROA not after:            Sun 02 May 2027 02:19:04 +0000
asID:                     142333
IP address blocks:        103.65.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.crl
                          rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:71:c8:8f:de:b8:7d:01:93:00:a7:1a:1a:86:c3:38:ef:4f:08:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0139BB0BDA0215A5AD4AB57CF22329862077511D
        Validity
            Not Before: May  3 02:14:04 2026 GMT
            Not After : May  2 02:19:04 2027 GMT
        Subject: CN=B348E9F8503DA73918A2F0744E6F31656F775822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:06:69:35:7f:30:f2:39:ce:7f:81:bf:7f:
                    ac:0f:f2:70:39:5d:c9:71:74:ee:86:18:67:51:fb:
                    21:6e:ab:e0:97:e2:bb:c7:a0:8f:10:6d:0c:f0:04:
                    4c:18:3f:04:d6:21:2b:6a:b9:fd:67:05:be:43:a3:
                    1d:00:75:18:7e:7c:72:cd:fa:f8:96:d1:d8:06:ba:
                    95:ac:3a:af:48:52:e2:ad:de:4b:c0:bb:bc:69:d2:
                    b3:f0:b7:56:b8:03:d0:84:4c:2c:44:a4:e2:82:d5:
                    09:75:35:e4:fd:b4:4a:56:2c:e3:ba:ee:30:20:6d:
                    e1:11:4f:63:6d:a1:81:ce:9a:3c:d0:bb:67:2a:a9:
                    8c:80:2e:ef:25:b1:26:4e:2b:94:b8:93:e2:32:1b:
                    ac:53:f1:53:cd:0b:f2:9a:05:9c:3f:0c:3c:6a:f1:
                    d6:0e:e5:7d:4c:2c:28:d3:d7:58:24:47:d6:4b:2b:
                    a0:58:50:79:3a:4b:6f:8e:96:7e:4f:2a:37:7f:3f:
                    d6:fe:4d:f0:f9:c1:2f:75:6b:7c:d8:0f:04:6c:01:
                    3a:31:d3:e6:b3:14:b3:36:90:23:c0:05:7b:3e:2b:
                    c2:f0:ac:18:25:85:ca:3f:4d:e9:6a:62:ca:00:61:
                    93:01:a8:a2:ee:97:d2:90:71:28:49:c7:3f:b1:78:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:48:E9:F8:50:3D:A7:39:18:A2:F0:74:4E:6F:31:65:6F:77:58:22
            X509v3 Authority Key Identifier:
                keyid:01:39:BB:0B:DA:02:15:A5:AD:4A:B5:7C:F2:23:29:86:20:77:51:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:89:52:4f:72:d1:bb:b9:c7:97:17:ad:85:6d:60:4c:e6:da:
         dc:a3:b9:51:e6:74:46:3d:53:7f:26:73:df:fd:93:9f:b2:08:
         6c:d7:2d:6a:96:d8:b0:2d:ba:85:ba:9a:dd:79:b7:79:d6:f9:
         21:5b:2b:4e:43:fa:4a:35:cc:46:68:9c:99:e0:7e:fa:3f:db:
         59:98:32:56:84:c4:d3:29:5b:ee:8a:79:f5:cc:4e:32:a1:39:
         84:9d:de:ec:5f:52:01:10:9b:0d:99:16:a6:b4:04:9d:7f:86:
         fb:83:44:e1:cc:a0:61:97:85:f2:bb:a8:b1:89:1b:a4:e7:34:
         80:d1:d7:f5:d1:f8:0a:62:38:d7:d0:99:12:01:74:93:00:3d:
         ec:25:bd:dc:01:3d:11:69:4d:d4:43:46:df:c6:f5:d3:d9:01:
         fb:85:b0:4a:f5:08:22:44:1b:d5:d7:3c:33:82:98:6e:f6:d1:
         bc:ac:00:b9:17:b9:f4:50:ef:de:e4:c9:85:a7:2d:da:53:f7:
         28:ed:c4:8a:18:a7:09:dc:bb:e5:6c:ca:e8:8b:02:47:cc:48:
         b9:bf:75:fc:e6:31:13:ce:e1:23:b7:38:ae:2a:88:18:11:d0:
         a8:40:ef:47:df:c8:0f:0a:fe:4c:45:03:2e:c7:e0:1f:f2:36:
         51:49:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:58 2026 by rpki-client