Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa
File:                     3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (raw, json)
Hash identifier:          GZ2/sYXm8mn6l79+sWeTVBLDtiFjEldYgeqXYA/mkHs=
Subject key identifier:   B4:B1:63:02:3A:70:0F:43:9D:2D:1B:64:91:0E:B4:F2:81:D9:7D:3A
Certificate issuer:       /CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0
Certificate serial:       4B72E737148F271513CF7144C7EDBF02A3285D8D
Authority key identifier: 22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa
Signing time:             Sun 03 May 2026 02:20:13 +0000
ROA not before:           Sun 03 May 2026 02:15:13 +0000
ROA not after:            Sun 02 May 2027 02:20:13 +0000
asID:                     132669
IP address blocks:        103.112.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl
                          rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:72:e7:37:14:8f:27:15:13:cf:71:44:c7:ed:bf:02:a3:28:5d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0
        Validity
            Not Before: May  3 02:15:13 2026 GMT
            Not After : May  2 02:20:13 2027 GMT
        Subject: CN=B4B163023A700F439D2D1B64910EB4F281D97D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:e4:b0:55:89:d1:af:c0:dc:fd:f1:20:58:
                    e3:75:6d:ac:d9:e8:03:8e:60:9e:a4:04:62:39:ee:
                    e2:b4:25:4b:da:25:c8:8d:0d:6f:e7:69:b9:63:f0:
                    c7:00:e2:b8:0c:ed:5f:08:26:4e:2f:9e:9a:6d:96:
                    5d:58:52:26:22:da:8a:bf:ac:fb:9d:9a:bc:20:42:
                    32:fa:6a:9c:f3:78:1f:87:cf:cc:bf:2a:4e:d8:d6:
                    db:41:6e:3e:4d:f9:6e:45:bf:2a:e4:74:27:da:19:
                    df:9a:04:2d:11:7e:ba:7e:e1:00:6e:84:a3:73:b4:
                    3b:cb:65:f6:a7:58:0a:38:9f:a8:c1:fb:1c:bb:02:
                    23:ea:6c:e4:11:c4:01:2b:ee:71:d3:d8:de:59:e0:
                    dc:c4:31:0a:82:02:68:4c:d4:38:55:ad:f2:41:7c:
                    c1:58:9c:2a:90:1e:42:33:55:61:3a:08:b3:37:e9:
                    66:e7:e5:01:94:0b:a5:f3:2b:c0:1c:bf:c4:f2:57:
                    8b:c0:1e:ef:ec:24:80:71:f4:a8:d6:99:a1:31:61:
                    13:da:65:f8:dd:e5:8e:0a:0a:90:77:d7:8f:af:27:
                    ca:fb:bc:f2:e3:50:72:ca:43:6a:2d:30:82:bc:d8:
                    aa:41:99:69:c0:55:ae:b0:3a:df:0c:b5:46:61:c9:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B1:63:02:3A:70:0F:43:9D:2D:1B:64:91:0E:B4:F2:81:D9:7D:3A
            X509v3 Authority Key Identifier:
                keyid:22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:5d:41:cc:a6:5a:5c:2c:d0:12:bc:6f:2e:e8:d9:35:05:9b:
         d6:f3:fa:79:01:08:dd:df:28:fe:fa:7d:12:d2:89:2f:00:83:
         54:b3:7a:d2:d0:b6:51:13:50:65:e6:41:da:bb:33:cd:2d:ac:
         dc:4f:28:f9:50:43:5c:3f:85:e3:fe:fd:0d:1f:d5:6d:1e:bb:
         e0:ea:7b:b3:9c:f7:7d:f8:58:f1:50:d6:c0:ee:b2:57:75:83:
         34:a1:31:da:2c:73:0b:15:f8:7c:65:20:f7:48:8b:87:07:d0:
         32:d9:ff:e0:4c:e9:6c:df:29:40:ec:17:f1:b6:62:25:16:fa:
         90:25:0f:eb:3a:00:d9:c2:9e:ca:dc:a8:91:1c:0b:f5:c8:bc:
         6a:51:89:16:78:39:07:10:2b:31:cd:93:9b:cb:c7:25:29:5d:
         7c:6a:7c:aa:9d:df:04:44:f8:77:00:4f:2f:73:be:41:dd:ed:
         13:96:88:22:a0:7e:de:75:ed:13:3d:8b:32:54:4f:d1:e0:2d:
         2f:e7:40:ee:44:f3:02:96:ee:b3:f5:0c:80:c7:f3:5c:ac:ed:
         ed:1c:96:8b:a6:df:a0:0d:e8:31:28:79:0b:41:75:c1:ef:1c:
         6e:92:07:25:cf:83:f5:17:6a:f7:9e:f9:39:b3:a2:56:6f:63:
         93:42:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:47 2026 by rpki-client