Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa
File:                     3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (raw, json)
Hash identifier:          Ctn3mxVihWEQWfZTzb0YPQIateGW/rElkgUhKfXEfc0=
Subject key identifier:   6B:BA:D6:F2:14:96:BD:47:E6:20:0E:DA:E0:94:81:DE:35:12:9D:79
Certificate issuer:       /CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0
Certificate serial:       2E7DA098CE562396B630B056FF98933E215FBF14
Authority key identifier: 22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa
Signing time:             Sun 03 May 2026 02:20:13 +0000
ROA not before:           Sun 03 May 2026 02:15:13 +0000
ROA not after:            Sun 02 May 2027 02:20:13 +0000
asID:                     132669
IP address blocks:        103.112.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl
                          rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7d:a0:98:ce:56:23:96:b6:30:b0:56:ff:98:93:3e:21:5f:bf:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0
        Validity
            Not Before: May  3 02:15:13 2026 GMT
            Not After : May  2 02:20:13 2027 GMT
        Subject: CN=6BBAD6F21496BD47E6200EDAE09481DE35129D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b2:0d:2b:fa:0c:ba:74:62:01:f4:1d:f1:2d:
                    ba:88:7f:51:37:ea:57:ff:36:d3:7a:2e:94:39:0d:
                    96:5d:b8:b9:19:85:b4:d3:bb:bf:49:d9:c1:c2:a6:
                    02:2c:50:1f:9c:ae:90:87:20:6c:1b:e6:f1:db:26:
                    da:f3:95:08:50:ae:1d:f8:32:dd:6f:f1:fb:46:1d:
                    fa:c1:75:29:11:69:da:9f:8d:a3:2f:38:26:cf:0a:
                    63:af:95:4b:79:53:69:03:3b:15:18:f6:af:9c:00:
                    e1:b4:e1:93:d5:1d:e8:a3:ee:78:58:cc:67:a3:c8:
                    36:43:e2:61:1e:58:1f:47:12:f4:7d:f2:f9:ac:47:
                    d1:85:27:df:ad:90:1a:a5:34:e5:f4:f4:27:53:58:
                    cf:83:b6:b8:fe:40:dd:59:7c:8e:9d:28:7a:be:28:
                    21:b3:b6:55:15:f6:11:79:78:cb:95:08:ff:09:32:
                    e4:c5:bf:c4:46:00:c6:0d:55:79:f6:56:01:0e:20:
                    51:c7:82:24:6c:11:4c:56:ab:27:72:d2:75:a5:49:
                    0d:ce:ae:d4:0b:a9:72:92:1c:38:90:53:89:3e:56:
                    1f:12:82:69:b5:c4:08:99:80:86:19:ae:8e:2f:89:
                    a3:a1:59:a6:7f:84:9b:ee:4e:5b:67:f7:a4:ab:37:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BA:D6:F2:14:96:BD:47:E6:20:0E:DA:E0:94:81:DE:35:12:9D:79
            X509v3 Authority Key Identifier:
                keyid:22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:53:4a:be:af:68:5a:a1:14:98:27:f8:10:05:ad:2b:66:b2:
         91:a8:21:0f:c3:d2:bc:16:84:94:cd:3e:e0:06:d2:d6:f3:83:
         b6:ca:01:a2:bd:de:15:c0:ed:57:96:22:3a:f3:b3:e8:4e:9e:
         2b:4b:bd:6e:80:13:7b:65:93:9e:3d:98:7c:1d:31:d5:9b:4a:
         de:38:c7:a7:4b:91:8f:4e:ce:18:0f:45:b8:a0:8e:8f:c9:32:
         37:9e:1b:9f:aa:1d:8a:72:2d:e6:92:c8:a4:00:c7:97:aa:7d:
         4a:71:1b:88:59:dd:cf:b5:30:84:81:b9:95:b6:e9:ac:9c:d8:
         e1:a9:cc:34:00:cc:47:b5:4d:7c:f3:2f:78:a0:b6:a5:f2:b3:
         c4:9a:ca:e5:fd:ac:8c:8d:ff:c8:8d:35:3a:f0:33:cb:85:70:
         5f:00:e7:44:19:c2:13:47:dc:d5:84:a4:7b:9e:5b:93:df:90:
         00:be:6a:b7:b6:6f:19:02:9a:34:4e:68:f5:eb:67:69:c3:2f:
         69:16:da:e5:1c:5b:69:7d:73:cb:56:f0:12:dc:dd:f8:58:5e:
         f0:ec:f6:4b:9f:fb:a2:a8:00:a8:ac:ac:26:41:a8:5d:2c:15:
         19:08:74:07:5e:94:58:44:0b:b7:ec:f9:6a:3a:83:6a:43:b0:
         54:db:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:09 2026 by rpki-client