Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa
File:                     3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (raw, json)
Hash identifier:          TlNubbEC148cAdiEPF2MQDiraCb1dG5XHceYv40l5u4=
Subject key identifier:   82:2B:BE:6F:1F:3C:5B:81:0D:7E:FD:AD:8A:F5:2B:2A:25:00:EA:6F
Certificate issuer:       /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F
Certificate serial:       7C410E8B05CC55846DCF832200239023B2BBEE1D
Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa
Signing time:             Sun 03 May 2026 02:34:29 +0000
ROA not before:           Sun 03 May 2026 02:29:29 +0000
ROA not after:            Sun 02 May 2027 02:34:29 +0000
asID:                     139419
IP address blocks:        103.144.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl
                          rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:41:0e:8b:05:cc:55:84:6d:cf:83:22:00:23:90:23:b2:bb:ee:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F
        Validity
            Not Before: May  3 02:29:29 2026 GMT
            Not After : May  2 02:34:29 2027 GMT
        Subject: CN=822BBE6F1F3C5B810D7EFDAD8AF52B2A2500EA6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:bc:b3:89:42:4c:fd:35:72:ff:3b:9a:f4:
                    a7:6f:bd:fa:c2:fd:82:f9:35:1a:bd:e6:45:69:35:
                    5a:4d:f8:74:68:ae:de:0f:17:85:eb:eb:2d:7e:57:
                    27:2b:bd:fc:ce:42:ef:00:4e:aa:aa:5b:d5:8f:8c:
                    18:6d:4f:b2:f7:7a:36:9a:1c:65:49:e6:e8:fd:0a:
                    1a:a9:8b:72:f9:24:6a:f6:33:3d:e5:3a:c5:01:3a:
                    40:71:9e:ba:ec:fd:5f:21:89:85:d9:0a:c2:de:aa:
                    3e:a4:83:84:bf:09:0f:00:ba:ce:0b:4d:5f:8a:b7:
                    6f:23:c9:79:07:b1:19:b9:e9:5b:67:70:3a:b7:70:
                    9d:60:f4:3e:83:7b:29:24:c7:0d:1c:bb:39:cc:41:
                    80:76:df:c2:0e:bd:20:15:bc:1d:d4:fb:1f:3d:71:
                    9e:86:22:5c:9e:53:bf:59:b3:7b:22:d5:33:94:22:
                    56:c6:b0:d5:b7:30:b5:74:e7:73:51:c8:21:b1:d3:
                    73:7e:ca:70:21:6e:a3:91:88:fa:5b:53:20:c9:2b:
                    82:ac:4e:53:27:43:90:49:2e:e9:be:22:70:3b:6e:
                    3c:d2:15:3a:95:de:ec:64:28:f0:bc:65:53:66:d0:
                    61:72:a1:b7:02:a8:c9:db:72:84:f9:42:de:be:cc:
                    a4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2B:BE:6F:1F:3C:5B:81:0D:7E:FD:AD:8A:F5:2B:2A:25:00:EA:6F
            X509v3 Authority Key Identifier:
                keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:26:28:8f:01:44:bc:36:aa:55:76:b6:2a:6b:7e:17:60:bf:
         fd:48:e8:e7:c2:75:67:ac:2f:da:0a:1b:bc:e9:f4:8e:81:70:
         d3:62:46:cc:6e:38:aa:4e:72:81:3a:be:4e:89:4b:e4:60:e0:
         24:fc:85:1d:82:81:05:0d:39:e9:9f:d0:b0:da:f5:82:06:f1:
         ac:b3:42:f9:82:31:1b:04:79:de:85:06:6a:75:3a:6e:e7:8f:
         bb:f4:5c:c6:2c:47:37:6a:68:10:30:ac:df:34:4a:ae:e5:26:
         b7:ba:ce:99:76:90:10:64:4f:5e:03:c3:f9:18:fa:94:1e:81:
         98:2b:d6:36:b8:b6:ff:50:4a:99:95:2d:1d:c1:77:23:a3:08:
         e8:e1:ee:6c:01:5a:fb:08:4e:47:34:59:68:2f:1b:78:a2:9b:
         f5:85:8f:de:92:bc:d6:6f:29:71:03:9c:97:82:4b:eb:ae:05:
         36:a6:27:62:e5:e6:c5:ec:00:ad:0e:f9:e7:61:9b:75:f7:ea:
         55:e9:b1:e5:39:14:d1:51:b4:c2:c1:63:8e:22:0f:28:c0:b9:
         23:96:32:3b:0d:f8:56:e4:a7:d7:89:8a:ed:56:15:c1:3a:8f:
         01:3d:ef:fa:4d:60:33:94:88:ed:0f:93:7b:b5:e4:68:a4:c5:
         58:50:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:10:31 2026 by rpki-client