Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa
File:                     3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (raw, json)
Hash identifier:          yCX5+Dxju6djsJMnbOlkqP9bGOuuQKBHDP9eW/sQSSc=
Subject key identifier:   5C:86:02:1D:F5:FE:AE:0E:99:B9:50:63:63:33:28:37:B2:09:ED:ED
Certificate issuer:       /CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579
Certificate serial:       3F773F64742000980B57CFC012C6AA4648659B7A
Authority key identifier: EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa
Signing time:             Sun 03 May 2026 02:28:52 +0000
ROA not before:           Sun 03 May 2026 02:23:52 +0000
ROA not after:            Sun 02 May 2027 02:28:52 +0000
asID:                     133349
IP address blocks:        103.230.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl
                          rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:77:3f:64:74:20:00:98:0b:57:cf:c0:12:c6:aa:46:48:65:9b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579
        Validity
            Not Before: May  3 02:23:52 2026 GMT
            Not After : May  2 02:28:52 2027 GMT
        Subject: CN=5C86021DF5FEAE0E99B9506363332837B209EDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:8a:de:c4:c0:f0:4b:fb:a6:19:1b:36:c2:
                    e5:de:39:65:75:90:2c:76:0e:4d:96:28:68:90:fe:
                    bf:e9:32:5c:7f:3a:9b:0b:f6:c3:84:97:fa:2c:95:
                    ee:a9:76:56:a9:72:36:ed:3e:65:e6:87:b2:8c:52:
                    30:df:ce:0f:c7:f6:3f:13:67:b4:49:4d:32:f8:53:
                    ed:67:f6:03:6a:f0:63:c2:43:0e:b4:6e:4f:61:93:
                    cd:ee:e5:44:75:43:36:4c:81:46:46:40:b1:77:f2:
                    56:55:ba:58:1f:b5:05:53:1f:9c:d4:3b:d6:79:c1:
                    70:ef:9c:12:66:64:9d:77:82:34:4d:d8:25:89:ee:
                    df:8b:88:16:72:96:01:f6:de:a0:8a:dc:ad:23:8d:
                    5d:44:2c:30:e8:b7:7a:2a:db:33:85:ed:99:ae:a8:
                    69:3c:4d:15:ba:8a:9c:2d:71:51:2a:14:0a:fd:96:
                    0c:61:94:8d:fc:bd:89:be:30:55:d4:85:ae:3c:c4:
                    67:86:88:53:b5:9c:c9:84:18:25:1e:7b:26:bd:6b:
                    2a:ad:f2:3c:ad:72:0e:f5:6c:b2:4e:c8:99:29:68:
                    82:88:38:2a:29:af:c2:45:db:5c:53:28:6e:fa:84:
                    76:ae:76:20:25:19:97:8c:4a:6e:af:56:b7:91:a5:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:86:02:1D:F5:FE:AE:0E:99:B9:50:63:63:33:28:37:B2:09:ED:ED
            X509v3 Authority Key Identifier:
                keyid:EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:a5:e4:c4:d1:7c:ae:e4:fb:53:4f:c0:ea:35:5f:9c:32:13:
         f0:61:8f:8f:cb:66:0c:3a:8a:1c:88:69:6b:3e:8a:60:a0:53:
         98:4b:38:43:f0:23:cc:1e:ea:ba:be:08:36:55:93:9e:63:26:
         ba:0c:d6:6f:d5:c8:0a:aa:c0:af:e4:e5:4a:8c:b5:52:3f:ea:
         ac:f5:ae:f7:68:0e:c6:f3:1c:f3:15:19:28:be:62:7e:24:06:
         12:8a:95:11:a9:56:54:97:fd:dd:f2:58:f0:28:ef:2f:89:78:
         ed:95:6b:83:ac:f8:66:41:37:40:11:4d:7c:28:ba:58:6c:bc:
         66:fc:e5:c5:9f:04:a2:fb:b2:93:d7:ce:30:1a:e0:c0:61:cb:
         2f:7f:38:22:85:5a:6d:98:6f:f3:0e:88:73:ff:95:69:5c:02:
         40:a9:07:ac:20:62:89:cf:a9:1a:bc:72:64:f3:44:fe:20:37:
         74:79:cc:e2:ba:e9:e6:51:42:57:df:62:eb:ff:89:8b:02:d8:
         ca:83:7b:4e:10:90:4d:36:50:1e:69:d3:d6:ee:f8:d1:de:6d:
         8c:89:ff:17:43:f1:f7:89:f6:1c:ea:a3:0f:24:9d:64:5f:e2:
         4d:fc:b9:03:82:85:98:e2:7a:53:ce:96:07:f8:f3:ef:fd:48:
         1a:a0:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:34:16 2026 by rpki-client