Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa
File:                     3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (raw, json)
Hash identifier:          x5pTQNGt4/kN10M+oZQf7PVzLTBro78R5GXb0E/MdHE=
Subject key identifier:   0C:FF:67:41:CE:39:0C:26:3F:25:01:37:2F:7E:15:4C:8A:B7:15:D7
Certificate issuer:       /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F
Certificate serial:       4CCB02AD3FC09CE12962E543E4D45DB2BEAF0F33
Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa
Signing time:             Sun 03 May 2026 02:34:27 +0000
ROA not before:           Sun 03 May 2026 02:29:27 +0000
ROA not after:            Sun 02 May 2027 02:34:27 +0000
asID:                     139419
IP address blocks:        103.144.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl
                          rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:cb:02:ad:3f:c0:9c:e1:29:62:e5:43:e4:d4:5d:b2:be:af:0f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F
        Validity
            Not Before: May  3 02:29:27 2026 GMT
            Not After : May  2 02:34:27 2027 GMT
        Subject: CN=0CFF6741CE390C263F2501372F7E154C8AB715D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:87:85:e2:eb:0d:7c:2e:b0:01:83:ac:9d:d1:
                    a0:95:10:fb:29:89:78:a7:4f:63:8b:c7:31:a2:d4:
                    fe:a5:f0:f9:00:4f:72:d5:37:32:61:61:f8:4a:17:
                    4c:4d:a6:b9:85:43:fe:26:50:8a:6a:cc:f6:45:14:
                    61:7a:64:21:6a:9e:19:f5:d4:5f:2d:1c:53:4f:ee:
                    28:65:a3:33:b6:07:ae:9e:44:28:2a:a5:58:15:51:
                    0c:7c:f8:a5:f0:bc:14:6f:0b:c0:8b:dd:ff:e4:e7:
                    dd:67:22:b0:24:e7:06:60:f1:4a:92:cf:07:88:1d:
                    81:35:b1:9b:87:44:68:be:50:f1:62:44:09:ae:1e:
                    dd:fe:bd:d3:9a:8a:1a:93:1b:6b:83:25:42:c0:c6:
                    f2:5d:da:e3:94:ee:c9:06:c5:6d:34:97:0d:be:0a:
                    2d:80:74:a7:d5:fb:95:12:1f:a1:eb:b4:c1:be:14:
                    a7:30:82:5e:75:0f:18:4a:cd:81:3b:1a:f6:7f:13:
                    b6:34:9e:a8:27:12:08:5c:cd:0c:61:42:fc:be:6d:
                    21:b6:bd:1a:3a:09:b4:e3:fe:16:e7:2f:43:44:32:
                    11:5d:20:9e:64:2d:97:12:75:ba:f9:e0:07:31:4a:
                    73:7a:98:77:df:a9:41:42:5e:f3:58:66:ff:ae:0b:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FF:67:41:CE:39:0C:26:3F:25:01:37:2F:7E:15:4C:8A:B7:15:D7
            X509v3 Authority Key Identifier:
                keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:04:20:d5:5e:11:15:aa:89:7b:39:d7:a9:59:83:cd:f4:cf:
         aa:6e:5f:f4:82:de:8d:b0:d7:23:be:fd:c3:fc:0f:2b:cd:7d:
         7f:fb:bc:bb:db:82:9b:c7:c7:bf:43:d4:8e:f8:b3:ed:f6:d8:
         e5:47:6b:c5:1e:7b:c4:e8:b7:a1:19:56:b8:00:34:b3:c7:bb:
         03:fe:0b:df:1a:09:56:ec:43:31:bf:fc:56:6e:06:8f:04:5e:
         04:b4:a3:3b:a7:37:a7:28:31:1d:fd:a9:fe:c0:69:6a:04:52:
         50:b2:d4:b0:8a:00:59:a4:d4:a7:d9:4a:78:46:f7:22:2a:ec:
         6d:d6:2e:d8:0c:56:f8:10:ac:0f:66:3e:53:4c:64:8b:51:0b:
         7d:e7:a9:6c:dc:50:4e:86:83:41:97:d2:e6:64:91:15:6a:af:
         a9:6a:8d:4d:78:41:67:bc:7d:5e:ef:d0:41:f7:47:00:9a:03:
         4f:d8:20:e9:c7:81:36:db:d0:38:3e:be:ab:db:fb:44:6d:56:
         01:54:63:3e:d5:42:4f:49:a8:95:75:53:d6:a1:80:5f:51:6a:
         82:6e:5b:a8:8a:f7:e6:85:11:49:82:fc:e3:7d:62:20:1b:01:
         30:fc:50:ec:a1:53:f6:8e:0c:9f:ab:84:db:2c:73:ce:0a:33:
         b5:7d:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:49 2026 by rpki-client