Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa
File:                     3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          orsjKTV02O8TMgWpMnovRo4VVZwRW9a2U4tEzVvr014=
Subject key identifier:   F3:1F:1E:99:AC:B1:F5:80:CB:9A:A0:0C:B4:45:0D:1D:A2:DA:0C:8D
Certificate issuer:       /CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831
Certificate serial:       64C931E4D34B766E11644BF4DBE1EEA9571B838C
Authority key identifier: FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:28:41 +0000
ROA not before:           Sun 03 May 2026 02:23:41 +0000
ROA not after:            Sun 02 May 2027 02:28:41 +0000
asID:                     23679
IP address blocks:        103.245.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl
                          rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c9:31:e4:d3:4b:76:6e:11:64:4b:f4:db:e1:ee:a9:57:1b:83:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831
        Validity
            Not Before: May  3 02:23:41 2026 GMT
            Not After : May  2 02:28:41 2027 GMT
        Subject: CN=F31F1E99ACB1F580CB9AA00CB4450D1DA2DA0C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:bd:9d:6a:24:e6:af:7c:97:33:88:06:71:
                    9b:58:00:da:36:cd:db:45:6d:01:99:7d:24:1f:f0:
                    d5:98:91:17:bb:84:74:7f:1e:aa:03:67:78:a6:ff:
                    01:9a:c2:93:0c:a2:c3:91:dc:60:42:03:04:ae:ef:
                    13:39:2c:ca:2f:71:bc:46:87:f2:9e:e0:ca:33:fc:
                    ac:60:f1:a9:39:34:7f:72:87:8b:85:fc:ac:cf:93:
                    71:59:7c:cb:f4:35:f2:25:69:5a:f5:1c:ec:46:ed:
                    52:fa:d3:8f:96:cc:60:57:bd:78:7c:63:3a:d3:82:
                    f4:eb:c4:6d:85:1d:ba:df:ca:4d:8f:d9:19:cf:27:
                    22:6d:eb:02:f5:8f:5e:b6:72:30:08:a3:af:ce:5a:
                    64:5d:9a:28:5c:48:e9:42:00:bb:1c:25:29:05:a2:
                    95:76:97:15:f8:a9:0b:d0:bb:70:f1:3f:a0:42:1d:
                    7a:df:ff:0d:98:eb:6e:52:24:9d:ed:c3:1d:28:bb:
                    03:e9:4e:41:65:d8:a7:80:20:b1:1a:99:2f:91:b7:
                    de:bb:57:cc:54:4d:1f:03:4b:80:c0:6f:c9:6e:68:
                    45:ed:83:9d:e1:de:e7:52:3c:f6:6c:e3:6c:89:ed:
                    57:8c:6f:d9:23:ac:f6:8c:99:eb:09:8d:59:f1:48:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1F:1E:99:AC:B1:F5:80:CB:9A:A0:0C:B4:45:0D:1D:A2:DA:0C:8D
            X509v3 Authority Key Identifier:
                keyid:FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:c6:0f:e3:25:d9:38:a5:b4:c6:83:cd:b1:21:3d:32:cd:40:
         1c:95:1e:1e:23:ae:6b:c9:b8:57:cc:ca:ff:70:25:0d:9d:fb:
         eb:61:64:89:17:d7:55:69:99:0d:ea:af:9a:33:e0:e2:0f:15:
         02:75:e8:49:f6:a7:0f:c1:d0:4a:90:49:9d:2a:03:0e:c2:34:
         fc:0b:f6:24:aa:b1:0f:98:69:8e:3e:a8:f4:e7:28:dd:4e:ae:
         e3:a9:ba:4d:26:2b:31:82:7b:0f:ed:3d:4f:c3:69:46:03:b1:
         38:ee:28:db:c5:2f:8e:e1:bf:36:46:48:4d:05:e0:7a:93:3c:
         86:e0:e7:f1:57:ef:eb:2f:0f:bd:cc:30:9a:21:18:6a:b7:20:
         fc:51:33:b8:2c:ef:f8:f6:fe:bf:1e:ee:e2:bd:7e:74:15:a2:
         e8:6c:59:47:10:98:3f:4f:54:fb:0d:a7:98:8b:b2:44:0e:e7:
         7c:2d:6c:6d:90:ce:84:55:e3:d5:e4:c3:93:71:79:6a:43:f0:
         d1:77:a2:5e:27:15:4a:79:4e:c7:24:0f:aa:a6:d5:7d:c0:d0:
         47:88:7d:f4:a2:e2:e9:51:1e:11:15:34:54:af:cf:d6:5e:5d:
         48:94:7b:f4:89:d6:17:88:c9:7a:fd:59:85:86:ed:2d:0b:64:
         f6:ee:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:49 2026 by rpki-client