Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32322d3232203d3e20313332363337.roa
File:                     3130332e31392e35362e302f32322d3232203d3e20313332363337.roa (raw, json)
Hash identifier:          JZgdRbJu890tbXcbh9Oxv/c/hndsIuQkwCj004yU0ZY=
Subject key identifier:   65:53:36:F8:23:F8:96:09:49:DF:4A:F1:53:14:1F:C7:19:A5:5E:CE
Certificate issuer:       /CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835
Certificate serial:       45E2C8DD6EE0478A4EBEA2D24ADD8273DB7D8D6C
Authority key identifier: 2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32322d3232203d3e20313332363337.roa
Signing time:             Sun 03 May 2026 02:22:33 +0000
ROA not before:           Sun 03 May 2026 02:17:33 +0000
ROA not after:            Sun 02 May 2027 02:22:33 +0000
asID:                     132637
IP address blocks:        103.19.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl
                          rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e2:c8:dd:6e:e0:47:8a:4e:be:a2:d2:4a:dd:82:73:db:7d:8d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835
        Validity
            Not Before: May  3 02:17:33 2026 GMT
            Not After : May  2 02:22:33 2027 GMT
        Subject: CN=655336F823F8960949DF4AF153141FC719A55ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:40:60:36:2f:cd:ff:16:04:83:ad:38:00:
                    de:77:00:1f:c7:1d:bf:6d:4e:f5:5d:78:dd:92:d5:
                    a0:aa:7b:70:16:7a:43:43:96:4a:92:75:dc:c0:d5:
                    18:6e:8c:fe:b3:99:38:91:48:b7:86:18:29:6e:b4:
                    16:f7:8e:ee:04:f5:67:e2:9c:db:70:35:24:cd:ca:
                    a6:eb:23:25:e1:01:3e:24:b3:58:4c:92:cc:da:ab:
                    8d:30:f3:b4:3e:6b:19:82:09:47:9f:92:19:32:ab:
                    b5:f7:af:fe:a9:61:da:74:19:57:05:ab:50:2d:6c:
                    96:8d:d9:6b:4c:56:e5:22:d8:a3:c7:95:e1:70:31:
                    2d:98:e8:59:49:de:df:7b:c0:df:33:f9:11:b8:37:
                    12:e7:ec:4a:e3:7d:43:33:86:80:3b:6c:3b:80:ba:
                    66:e2:9d:05:ff:92:63:73:0b:da:20:5d:e7:ad:96:
                    d4:ac:da:54:e4:d7:63:88:6d:ae:ad:4c:e8:58:6b:
                    47:a1:49:19:99:8f:82:fa:8a:ed:fb:f9:5c:f2:a8:
                    c5:92:2f:ac:d1:3c:09:96:01:44:76:ef:3f:79:87:
                    16:e4:38:56:04:c7:d0:b2:20:3a:5f:2b:79:88:6e:
                    c3:81:e4:e5:c1:14:af:e3:46:86:f1:76:29:2b:61:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:53:36:F8:23:F8:96:09:49:DF:4A:F1:53:14:1F:C7:19:A5:5E:CE
            X509v3 Authority Key Identifier:
                keyid:2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32322d3232203d3e20313332363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:b7:ce:95:4c:46:51:e6:bc:d6:35:07:2f:dd:0f:be:99:ff:
         26:c1:0c:fe:87:2c:6b:9d:03:81:de:3f:fb:27:1e:3d:d9:b1:
         48:04:91:08:00:6d:1e:00:07:96:34:54:b7:69:e3:b4:7f:23:
         96:e3:d5:48:61:f2:e8:43:bc:0a:29:c4:25:70:b0:1a:05:26:
         65:c6:89:ba:c9:dd:8a:2e:dc:da:02:8f:bf:33:f0:f6:30:42:
         ce:fe:fc:2e:13:82:fa:0d:48:c1:dc:e9:6e:c8:3b:34:69:53:
         ea:3b:d4:e5:1b:84:10:f7:5a:1f:93:3c:e0:44:39:a7:60:f4:
         87:5a:0d:89:50:e5:2b:34:7a:db:00:ec:2b:b9:85:49:c2:ff:
         bf:cc:a3:d5:28:62:8a:fd:a7:8b:56:90:97:ca:9e:8a:12:bb:
         82:cc:df:ea:c1:44:a3:55:b6:ff:8e:1b:11:a5:78:35:96:bf:
         4a:41:43:3b:31:33:7c:05:c1:51:ff:cd:0a:7d:b3:63:b4:fe:
         8c:01:43:9a:5e:c0:0a:92:c7:e6:0b:20:59:17:5a:3c:cd:dd:
         e5:e4:9b:22:34:61:51:a8:99:bb:2b:c3:a6:43:1e:12:e5:7b:
         19:5e:ad:cd:27:02:1d:d8:9f:24:c1:44:e3:97:cf:4c:ae:34:
         f9:db:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:25 2026 by rpki-client