Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa
File:                     3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (raw, json)
Hash identifier:          5rI4L+b8xzlRIUsWxeEF2NdCqFStv1SMLdpn9443Ve4=
Subject key identifier:   A1:62:FD:73:7F:71:63:17:73:F5:8E:D5:DB:C3:C9:B9:E1:95:0E:E8
Certificate issuer:       /CN=9F018573ABC40A1244EF018EE95D73D8E54A5247
Certificate serial:       73A369A9B723143AF40E96BF67CCA571ACF63ABC
Authority key identifier: 9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa
Signing time:             Sun 03 May 2026 02:33:33 +0000
ROA not before:           Sun 03 May 2026 02:28:33 +0000
ROA not after:            Sun 02 May 2027 02:33:33 +0000
asID:                     18351
IP address blocks:        103.231.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl
                          rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a3:69:a9:b7:23:14:3a:f4:0e:96:bf:67:cc:a5:71:ac:f6:3a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F018573ABC40A1244EF018EE95D73D8E54A5247
        Validity
            Not Before: May  3 02:28:33 2026 GMT
            Not After : May  2 02:33:33 2027 GMT
        Subject: CN=A162FD737F71631773F58ED5DBC3C9B9E1950EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:77:e7:24:36:b8:04:85:56:34:4c:ae:8f:
                    87:57:69:24:17:01:0a:7a:98:27:00:cc:66:8c:6d:
                    ad:91:29:03:34:db:42:15:c8:4d:08:90:e0:8a:70:
                    87:58:0c:89:6c:58:7c:bc:8c:d7:8c:9c:8c:10:c2:
                    b0:02:2d:1e:44:33:32:12:fb:01:3c:43:78:b0:d5:
                    2f:d1:24:b8:88:57:fe:c5:f8:33:68:35:7f:3b:8c:
                    b7:8d:f6:db:09:29:f0:6c:d0:74:b6:ce:aa:36:49:
                    1e:9a:31:74:75:60:88:2a:f1:1d:7d:0f:f9:ac:52:
                    52:c7:f2:58:13:a1:62:e9:d4:19:ae:78:f8:a9:83:
                    16:1e:d2:e0:da:6b:18:b8:50:c0:e8:f1:ef:c1:b6:
                    fc:c8:3a:26:6d:24:72:e3:5a:a8:8f:89:e7:9c:4c:
                    d9:4e:cf:7f:00:11:e0:d5:94:db:72:03:8d:9e:f4:
                    d2:33:54:04:f4:12:0c:6f:36:c8:f3:83:f7:96:ec:
                    a3:08:e4:b4:c3:d5:bd:93:53:1f:6c:a5:66:1d:c8:
                    af:83:ad:4f:98:ae:59:cb:cd:35:bc:1c:db:a6:ab:
                    ab:01:b1:bc:44:eb:af:0b:37:58:4e:5c:50:91:7e:
                    d4:89:23:91:47:7f:44:88:71:cb:c7:66:b1:23:27:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:62:FD:73:7F:71:63:17:73:F5:8E:D5:DB:C3:C9:B9:E1:95:0E:E8
            X509v3 Authority Key Identifier:
                keyid:9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:47:c7:fc:ab:56:b9:49:ad:b6:b9:f9:90:8f:37:ef:4a:cf:
         49:a1:5e:fb:7f:0e:55:49:dc:de:80:e1:4b:be:ef:54:9d:22:
         d0:e2:73:0d:43:d5:2f:3e:f9:49:9c:53:18:86:82:a9:ec:9d:
         5d:0d:7b:e3:e2:db:cc:cc:8a:99:ba:59:eb:6e:99:3c:25:ad:
         63:49:60:98:da:72:ac:42:5b:27:93:d2:cf:19:45:9d:37:67:
         c0:0f:15:7b:bd:d9:88:52:e2:e4:27:6b:c3:3c:6f:d1:9a:49:
         4b:ca:5a:fc:9c:a1:82:26:6d:4c:74:20:99:14:e2:d7:fe:cf:
         76:8c:e8:e5:fa:82:63:74:a6:4f:ea:29:e9:f9:fd:50:00:b0:
         6c:85:38:bf:3d:d0:1c:a6:72:1d:a8:30:a5:58:62:36:72:97:
         ee:36:f0:5b:67:0f:4f:ee:66:03:d0:81:da:2a:f6:75:b1:aa:
         41:88:75:75:4b:d4:dc:ab:2f:ee:46:19:05:bc:15:11:75:fd:
         8d:9a:51:2f:0b:70:78:98:10:fc:f2:bf:97:af:de:65:0d:99:
         ac:0e:27:24:1a:c2:10:74:93:7e:54:73:b4:4a:e2:22:13:c9:
         62:1c:5d:eb:83:51:a9:15:b2:c0:68:fe:18:41:63:43:a2:89:
         4b:28:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:45 2026 by rpki-client