Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa
File:                     3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (raw, json)
Hash identifier:          7MJm9/1g/gkw58AS1qnqSYx9VaW3KBNo5zcIcw63iro=
Subject key identifier:   6A:3F:E4:28:48:BB:61:7F:88:54:47:94:4C:64:00:F9:08:86:78:5D
Certificate issuer:       /CN=F23594312FE527F86185AE38CC16265280FD40FA
Certificate serial:       4AD4A335FA873454DE401F5ABDA7E58332F46B70
Authority key identifier: F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa
Signing time:             Sun 03 May 2026 02:29:53 +0000
ROA not before:           Sun 03 May 2026 02:24:53 +0000
ROA not after:            Sun 02 May 2027 02:29:53 +0000
asID:                     38758
IP address blocks:        103.231.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl
                          rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d4:a3:35:fa:87:34:54:de:40:1f:5a:bd:a7:e5:83:32:f4:6b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23594312FE527F86185AE38CC16265280FD40FA
        Validity
            Not Before: May  3 02:24:53 2026 GMT
            Not After : May  2 02:29:53 2027 GMT
        Subject: CN=6A3FE42848BB617F885447944C6400F90886785D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:9a:02:fb:7d:77:ee:b5:d2:08:28:a9:47:
                    37:69:04:ba:58:82:d9:d1:8a:25:fe:cb:f6:4c:89:
                    ac:ee:17:bc:64:2f:16:a0:72:5a:79:49:3d:fb:a8:
                    16:ba:10:34:f7:16:5f:3c:63:00:09:1a:5a:e9:ff:
                    a5:12:21:3f:ce:0a:69:de:a4:f0:0b:ca:c8:bb:d5:
                    e2:fc:e3:62:9a:bf:d2:e1:43:fd:0c:14:0a:10:2b:
                    43:e3:1b:5e:55:40:66:ec:5e:59:2e:b8:e9:97:53:
                    1a:03:1e:28:f7:69:4c:1c:ad:ee:81:e2:49:58:f4:
                    8d:41:5d:fb:5a:48:2f:4a:a7:a4:df:e1:f1:21:2f:
                    b7:2e:a3:af:c6:58:a6:3d:dc:98:57:d9:e0:9d:46:
                    e7:fc:00:a7:94:f4:e0:88:64:69:aa:5f:eb:28:ad:
                    a6:36:63:cd:63:0a:9b:cc:36:5a:e9:28:e7:73:ad:
                    35:49:6a:07:59:5e:24:95:b2:5b:dc:89:e5:b8:5f:
                    cc:74:8e:b8:89:f5:72:c8:34:9c:0d:40:34:5e:ea:
                    ea:11:65:45:ea:6c:bf:d6:51:49:a1:d7:a2:49:cd:
                    e6:40:3c:ed:f2:2c:bd:38:e1:e1:25:92:19:c9:04:
                    4f:bc:4b:b1:ea:24:6f:ba:1f:6b:c3:72:cb:52:d2:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3F:E4:28:48:BB:61:7F:88:54:47:94:4C:64:00:F9:08:86:78:5D
            X509v3 Authority Key Identifier:
                keyid:F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:85:33:34:20:90:b4:88:61:a0:5e:08:07:66:cd:8c:7e:37:
         20:63:86:f6:97:63:ab:35:56:90:5a:3f:5c:25:52:bc:ed:b6:
         2a:f3:c1:8d:2e:80:80:d6:28:da:4c:58:ce:0f:37:94:17:75:
         90:bf:53:e4:c7:de:5c:e6:e7:fc:ff:bf:1a:8e:4a:8a:7b:d5:
         ae:59:0a:93:bf:80:c6:e3:39:71:53:1e:ff:dd:5a:0f:f7:e6:
         9d:5c:42:47:1c:90:cf:b4:f5:0c:12:6f:f3:22:2d:04:aa:2e:
         a9:8c:a7:21:69:81:62:90:ea:92:2f:fe:52:54:c2:3d:58:40:
         9b:dc:e5:ff:08:6f:dc:37:89:46:28:27:77:30:16:0e:9e:83:
         ad:fd:b7:7d:8e:cf:d5:0a:c1:f2:6e:46:af:3e:59:a0:01:8f:
         a5:9b:1c:09:2f:46:47:55:ba:f8:06:e9:8d:ff:cd:7c:5c:9e:
         45:6d:8d:42:ce:96:db:75:2b:16:36:07:24:27:be:93:b4:60:
         c9:eb:2b:00:6f:8e:5a:4e:04:77:b0:7d:e7:cb:8e:20:e1:23:
         b8:d0:f2:6d:ad:42:bf:fe:9c:ea:d4:a6:f1:55:8f:29:b2:16:
         87:de:ad:27:8c:d6:a1:f8:18:1f:a7:42:e0:20:9b:3e:a9:9d:
         74:64:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:24:20 2026 by rpki-client