Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32332d3234203d3e203436303233.roa
File:                     3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier:          9oKw8VPoGRe3WqWHLUItkitkfdRCjKfZ2jlw7IVeUGY=
Subject key identifier:   D2:99:63:37:C4:32:01:56:E3:DC:2C:6A:4C:16:A4:F8:64:2D:01:CD
Certificate issuer:       /CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Certificate serial:       20F6AAE0BF2F8791EBEAE34A8B69E70867C86F6F
Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32332d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 02:33:46 +0000
ROA not before:           Sun 03 May 2026 02:28:46 +0000
ROA not after:            Sun 02 May 2027 02:33:46 +0000
asID:                     46023
IP address blocks:        103.245.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
                          rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f6:aa:e0:bf:2f:87:91:eb:ea:e3:4a:8b:69:e7:08:67:c8:6f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067
        Validity
            Not Before: May  3 02:28:46 2026 GMT
            Not After : May  2 02:33:46 2027 GMT
        Subject: CN=D2996337C4320156E3DC2C6A4C16A4F8642D01CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:7c:49:9e:b0:55:a1:c2:f6:e0:a3:2c:91:
                    7d:99:e5:8a:22:50:2f:53:c9:07:34:17:2a:81:80:
                    4f:51:8d:79:7d:e9:e9:95:00:49:dd:44:28:07:05:
                    7e:ed:81:5e:3a:a9:b4:23:52:d4:a1:36:fc:65:4f:
                    8b:26:f4:82:29:80:f6:45:d7:16:2c:d7:fd:c6:b1:
                    0d:af:77:81:42:e2:e3:d6:eb:8a:c8:2e:d7:e7:16:
                    04:78:62:c8:dc:f1:9d:32:19:25:85:4c:6c:59:8a:
                    46:4e:91:2e:41:40:2c:a2:14:b1:35:17:37:35:32:
                    f6:8a:5f:5b:53:a0:08:be:7a:30:8c:00:ff:55:7f:
                    4f:f3:df:19:66:e7:bc:75:51:49:a0:e3:9a:a2:57:
                    02:0b:19:89:86:42:c3:16:c9:a7:cf:08:0b:b7:ad:
                    7a:53:ec:80:0a:e6:85:be:ea:6d:a7:f7:e1:a6:5e:
                    44:d2:dd:eb:5b:11:0c:19:f6:33:84:cc:0e:a3:d6:
                    9b:da:c6:ce:b2:74:11:44:3b:e7:67:b7:fb:88:1c:
                    65:05:d1:5c:b9:06:8b:47:b7:0d:ca:99:a9:97:27:
                    72:09:9d:38:3d:63:e4:a1:78:58:07:3f:9c:59:ec:
                    0a:ee:26:69:ae:d4:1c:04:61:4f:b9:b0:8a:b5:c1:
                    1c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:63:37:C4:32:01:56:E3:DC:2C:6A:4C:16:A4:F8:64:2D:01:CD
            X509v3 Authority Key Identifier:
                keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32332d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:b9:92:21:9c:68:8d:82:f4:ce:26:ba:51:86:5d:50:57:83:
         60:00:31:68:8c:77:67:95:85:e5:4d:87:dc:03:6d:e9:03:4c:
         b5:7b:4e:dc:13:c3:44:af:50:bb:97:0a:37:aa:f4:f6:94:35:
         82:30:05:db:f7:ac:1a:5a:0d:51:bf:c6:a0:4b:3f:e3:2c:91:
         04:cb:07:0c:dd:83:7d:8b:75:a6:13:48:08:12:36:f1:5f:8e:
         04:18:3b:91:25:e9:5d:22:df:2b:78:ee:a5:5c:22:16:c2:59:
         2a:13:f0:f3:5c:62:7a:e5:57:30:d3:d3:0e:26:52:89:35:83:
         81:7a:ca:f1:7e:3f:ec:19:a2:df:3a:31:57:fa:a9:05:46:72:
         ec:3a:82:92:f3:f4:3d:8e:65:00:e1:b7:78:07:c4:22:2a:d1:
         4c:24:cc:3b:04:ab:d5:45:b9:a2:3f:f4:8c:e0:15:72:9f:29:
         10:dd:2c:cb:af:1d:95:ae:41:eb:0c:3a:af:4c:8b:7a:9c:22:
         eb:bc:a8:d8:4b:8f:8a:61:35:d8:78:6f:10:bf:54:8a:57:6f:
         16:d8:7e:00:1d:18:6f:41:d7:13:ac:20:3d:fb:40:0e:2b:72:
         45:4f:a3:4e:dc:24:be:75:dc:dc:a8:3f:da:df:24:70:57:2a:
         07:dd:45:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:58 2026 by rpki-client