Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa
File:                     3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (raw, json)
Hash identifier:          IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=
Subject key identifier:   5A:36:D6:C8:E5:2E:B2:87:AD:1F:3A:A7:FB:81:E7:3A:DB:24:74:3C
Certificate issuer:       /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E
Certificate serial:       7854DF03809F6A709BD495C22643BDAEA7F6E6EA
Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa
Signing time:             Sun 03 May 2026 02:25:25 +0000
ROA not before:           Sun 03 May 2026 02:20:25 +0000
ROA not after:            Sun 02 May 2027 02:25:25 +0000
asID:                     139952
IP address blocks:        103.162.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl
                          rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:54:df:03:80:9f:6a:70:9b:d4:95:c2:26:43:bd:ae:a7:f6:e6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E
        Validity
            Not Before: May  3 02:20:25 2026 GMT
            Not After : May  2 02:25:25 2027 GMT
        Subject: CN=5A36D6C8E52EB287AD1F3AA7FB81E73ADB24743C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:10:81:4b:2e:58:1d:0c:21:5a:59:67:7e:66:
                    d8:ad:68:97:47:95:19:d2:33:e1:36:c2:c2:cb:08:
                    6a:a2:2d:8e:c0:00:79:0b:12:29:b7:ca:92:31:d5:
                    b0:73:66:a3:ba:a4:ec:e1:94:ea:64:1f:ea:a2:c7:
                    20:4a:84:ff:fa:62:61:72:89:75:ec:a9:0e:57:c7:
                    48:e8:06:ce:6c:bb:4e:6c:cf:66:8d:51:4b:b9:eb:
                    db:76:56:dc:3d:61:ab:2c:ae:9d:a5:44:17:fc:36:
                    3e:09:9f:2b:6a:a9:89:d5:a4:c0:6b:8d:51:07:d0:
                    89:d6:57:1d:5e:46:b4:22:c6:e7:25:77:e2:b1:63:
                    93:13:41:da:89:8d:72:c2:a9:68:5f:28:68:30:c9:
                    2f:10:7b:b7:5b:13:f0:f9:d7:22:f2:c7:e3:0c:b3:
                    7f:3d:83:ff:97:c9:3b:47:0a:55:47:66:e6:98:a1:
                    91:96:ff:e4:4c:f1:42:0b:39:94:f1:50:d7:2e:53:
                    bd:30:de:8c:c7:36:10:2b:05:a1:a8:d7:50:8a:ea:
                    9f:a1:84:e8:70:7f:64:da:5d:e6:29:85:59:66:f1:
                    f0:46:e9:7d:19:55:5c:63:a3:73:67:7e:a9:37:6b:
                    1e:d3:22:ac:c7:3a:23:72:4a:29:70:2a:87:dd:0c:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:36:D6:C8:E5:2E:B2:87:AD:1F:3A:A7:FB:81:E7:3A:DB:24:74:3C
            X509v3 Authority Key Identifier:
                keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:54:f8:66:1b:c6:13:06:98:6c:58:6a:06:06:82:0d:d4:47:
         fb:91:81:bb:0a:de:2d:41:4c:38:6b:5d:3f:b6:1a:bc:9f:13:
         9a:0f:89:db:bd:77:19:c4:e3:66:43:4a:65:26:7b:0f:90:6d:
         ba:bd:2f:6c:51:dd:36:9b:86:0a:50:d6:48:46:47:88:65:6b:
         27:dd:d0:2c:11:c8:3c:8b:4f:17:d9:10:1f:e2:2b:27:fc:4b:
         16:31:19:58:6c:c8:9e:90:6c:a9:98:a2:ec:c8:6a:25:06:49:
         3e:cc:62:6b:4d:96:11:e7:af:24:dd:46:b0:56:c0:fa:e0:97:
         62:c3:11:46:a3:a7:03:1f:35:ae:5e:30:5c:18:3d:bf:44:8f:
         12:23:47:48:ca:2b:45:b8:ed:7b:c1:ec:7e:55:db:27:ec:f4:
         68:cb:f4:8e:a1:c6:fe:0f:c4:c9:da:9d:c8:8b:08:99:78:76:
         d2:93:56:89:69:01:82:23:84:1e:4f:ec:43:95:d1:29:6f:3c:
         e9:cf:b1:70:5b:3c:98:ff:d1:7b:d1:57:5e:ac:2b:6e:f2:46:
         dd:2e:5a:09:6b:73:5c:f4:6e:b3:f4:7a:a6:31:88:9e:76:52:
         00:e5:ad:e7:9b:64:48:7a:7d:08:6e:1b:54:33:19:d0:53:85:
         a1:ce:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:57 2026 by rpki-client