Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa
File:                     3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (raw, json)
Hash identifier:          Ff6Wy4wyEywRk6LONIzh1Zz/4K7kEOV4YAssJYfhUsI=
Subject key identifier:   3A:03:4A:7B:D5:76:A3:F2:FF:E7:4D:8C:E0:F8:4D:1C:94:61:6A:B1
Certificate issuer:       /CN=A58E55B7CCE754B9CB71A0C874161981234B001D
Certificate serial:       29B38CD6568AA0FB210DF7BA67E01FEF6D4120BB
Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa
Signing time:             Sun 03 May 2026 02:30:53 +0000
ROA not before:           Sun 03 May 2026 02:25:53 +0000
ROA not after:            Sun 02 May 2027 02:30:53 +0000
asID:                     141073
IP address blocks:        103.155.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl
                          rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b3:8c:d6:56:8a:a0:fb:21:0d:f7:ba:67:e0:1f:ef:6d:41:20:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D
        Validity
            Not Before: May  3 02:25:53 2026 GMT
            Not After : May  2 02:30:53 2027 GMT
        Subject: CN=3A034A7BD576A3F2FFE74D8CE0F84D1C94616AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:bc:ae:5c:2d:cb:b1:46:99:27:f6:29:66:
                    62:2e:fd:60:cd:16:5c:b4:a7:96:ec:14:98:6e:d2:
                    de:76:16:9d:73:fe:18:b4:4c:f1:32:b3:4b:6b:bd:
                    c8:5f:cb:ba:02:15:e7:e3:9d:3d:91:43:5d:1a:92:
                    47:92:5d:0b:9b:51:31:2d:d2:d7:6a:b3:74:2d:28:
                    e7:81:55:df:b9:0a:86:5b:cf:41:9b:ec:96:60:41:
                    ea:68:03:6f:56:2b:38:57:5c:30:a1:8f:60:dc:9f:
                    2b:17:2e:ee:01:0b:e5:73:d1:f0:73:50:2b:18:7f:
                    83:be:fe:10:2f:94:35:a8:1c:0b:cb:27:ce:44:14:
                    35:8c:90:02:27:ee:59:a7:aa:35:a1:cc:89:23:d1:
                    71:eb:f4:15:13:49:b4:d5:91:38:3f:2a:3f:25:26:
                    71:69:a2:39:22:fd:ef:73:24:b0:91:10:61:b5:e1:
                    48:bd:49:75:a2:ba:d5:2a:50:ae:e7:10:55:fe:eb:
                    2e:34:5e:86:67:33:2c:b5:44:0d:79:65:6d:31:ff:
                    ea:cd:a4:f8:11:d3:74:8f:12:9a:18:bf:3b:56:cf:
                    f2:19:6b:4a:72:2c:33:ab:56:f5:27:c8:71:cd:00:
                    64:b5:a4:bb:fd:ad:e5:29:36:f4:69:bf:c3:54:a6:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:03:4A:7B:D5:76:A3:F2:FF:E7:4D:8C:E0:F8:4D:1C:94:61:6A:B1
            X509v3 Authority Key Identifier:
                keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:a6:ce:05:82:f0:f5:58:40:a9:94:76:0d:dd:f5:26:3a:15:
         c9:4f:0f:99:f9:74:05:1e:3e:35:8c:6c:c1:f3:65:6b:39:b2:
         47:7b:7a:b0:16:5a:5c:21:53:e3:88:46:b3:ef:36:e3:78:d7:
         04:5a:65:d7:d7:eb:f3:10:72:e5:67:a6:02:97:35:b0:5f:0e:
         8c:20:16:38:1e:ac:2d:b1:0a:93:27:51:75:b3:9e:2a:36:09:
         b8:0a:fb:13:a6:82:f9:40:57:c0:fd:69:6c:db:a8:73:8f:00:
         aa:d5:c3:ae:f9:62:47:e5:fe:83:bc:70:87:7d:6f:5c:55:68:
         30:6b:5a:9c:21:73:1d:72:0d:45:3f:55:d2:49:7d:a3:25:8e:
         42:78:0b:76:aa:d3:75:43:a2:55:13:1b:c8:13:26:ca:bf:8d:
         9b:86:d9:99:a4:0a:84:7a:59:ae:bd:aa:fc:87:4a:5e:b5:5c:
         a8:0a:09:91:c1:bf:87:6a:75:92:37:6b:0d:77:83:83:b0:4b:
         a1:9d:fe:4b:bc:40:4b:d9:7c:5c:02:d0:3b:f6:bd:c4:cc:22:
         a4:13:a8:57:c3:03:a2:d6:72:84:60:70:6e:b1:f7:38:94:d5:
         2d:df:ed:36:10:8c:53:80:d3:bf:f6:db:35:88:2e:28:bf:26:
         c5:63:0c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:43 2026 by rpki-client