Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36362e302f32342d3234203d3e203539313538.roa
File:                     3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (raw, json)
Hash identifier:          CaktXeTtnkylUI+n1xZGKMIR5SWqXLjJULrGhcPeRfc=
Subject key identifier:   90:74:00:1D:4C:27:D7:A0:CD:9A:89:90:3B:E2:BA:71:8C:74:9A:19
Certificate issuer:       /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE
Certificate serial:       6FB0F8BF228E4F26D50F201B3C26221787F42014
Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36362e302f32342d3234203d3e203539313538.roa
Signing time:             Sun 03 May 2026 02:31:15 +0000
ROA not before:           Sun 03 May 2026 02:26:15 +0000
ROA not after:            Sun 02 May 2027 02:31:15 +0000
asID:                     59158
IP address blocks:        103.224.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl
                          rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b0:f8:bf:22:8e:4f:26:d5:0f:20:1b:3c:26:22:17:87:f4:20:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE
        Validity
            Not Before: May  3 02:26:15 2026 GMT
            Not After : May  2 02:31:15 2027 GMT
        Subject: CN=9074001D4C27D7A0CD9A89903BE2BA718C749A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:fc:7e:31:1e:70:83:ff:33:28:23:b7:f2:
                    5e:ed:3c:e1:96:50:dc:3a:3d:13:6f:e6:d0:a2:0e:
                    ee:a5:05:be:c7:81:75:72:79:83:52:9c:6e:63:56:
                    e0:76:d8:b8:5c:1a:f5:21:6a:71:67:58:e6:a5:b3:
                    75:a6:46:fb:c6:b0:e7:ce:a8:3c:34:24:2a:fe:a9:
                    35:99:a1:c1:a5:dd:3b:6a:ad:c5:71:64:01:bc:13:
                    95:f4:27:4a:13:ce:0a:9f:58:0c:6f:34:01:44:3c:
                    d8:76:c8:80:80:89:b0:b2:92:ab:db:46:11:06:51:
                    49:90:ad:c8:e2:d3:3d:ad:ad:37:b1:46:12:2f:4f:
                    3f:93:1d:57:db:50:73:48:a1:4b:db:7f:72:0e:fb:
                    22:2b:2b:1e:72:d4:5b:66:29:45:2f:08:33:96:c3:
                    4b:6e:26:0c:e7:d5:f3:74:85:be:15:19:1a:08:db:
                    76:cc:17:3b:e6:32:d4:6b:eb:9f:90:da:14:de:24:
                    3e:2b:a1:b1:e2:a0:86:8b:ee:46:2e:e6:7e:c8:93:
                    e6:12:69:b6:fa:84:44:f0:c2:42:66:f7:fc:91:42:
                    b8:e3:6f:3c:fd:15:39:5e:fb:6b:44:0c:2b:df:9b:
                    7a:c6:2c:e3:64:dc:72:e4:48:94:f9:99:2b:d8:94:
                    b1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:74:00:1D:4C:27:D7:A0:CD:9A:89:90:3B:E2:BA:71:8C:74:9A:19
            X509v3 Authority Key Identifier:
                keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36362e302f32342d3234203d3e203539313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:c3:e2:01:3e:a7:43:f8:4c:b9:4e:66:f2:ec:08:37:3e:f3:
         e6:82:ad:10:13:55:44:69:79:56:e4:ce:db:ed:a0:5e:7c:52:
         d1:f7:87:3f:5e:cd:60:bb:a3:e2:4a:da:cf:eb:ec:a2:85:ee:
         48:12:49:c0:ca:0a:f1:bf:df:f7:d2:24:eb:07:14:fd:3c:a1:
         ec:51:cf:f3:b6:9b:dd:0d:2c:38:9e:00:c3:c2:67:be:de:6d:
         b4:e8:76:9c:85:01:0f:65:ec:84:66:c9:52:f6:18:4e:3e:7b:
         b7:16:c0:a4:cc:db:91:72:d1:0e:75:78:68:bf:3e:e3:13:2a:
         16:cc:23:02:58:59:2d:f5:79:d8:0f:f5:8f:15:14:a4:2d:35:
         78:b9:84:f5:bf:f0:fd:03:22:34:1c:e6:ff:9c:ed:5f:15:9f:
         b0:56:ca:dc:07:fc:a2:97:58:90:12:2c:1c:04:3c:e7:55:2f:
         58:39:dc:9c:92:80:4f:77:5a:b6:66:bd:d3:11:f9:58:f2:57:
         d3:4d:a0:db:d4:10:fa:35:ca:ca:4d:26:a5:ac:ef:47:dd:0f:
         d1:17:6e:17:2b:d5:e0:cb:9e:a0:4b:20:51:57:40:b1:43:f2:
         38:db:cf:0b:f0:68:81:79:55:a6:0b:a2:49:89:58:bb:53:d0:
         29:0a:1b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:17 2026 by rpki-client