Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/3130332e392e3134342e302f32322d3234203d3e20313331373133.roa
File:                     3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (raw, json)
Hash identifier:          4SizHs7Y7jbN84W7yqURK/C+aTckSwx11cvn67uUtqg=
Subject key identifier:   60:54:E5:FA:86:04:48:0C:23:9C:E5:46:F7:4D:0E:AD:6A:1B:E5:B7
Certificate issuer:       /CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB
Certificate serial:       2E7367EA86A960492F57549655ED18ED49AFB3B5
Authority key identifier: F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/3130332e392e3134342e302f32322d3234203d3e20313331373133.roa
Signing time:             Sun 03 May 2026 02:34:54 +0000
ROA not before:           Sun 03 May 2026 02:29:54 +0000
ROA not after:            Sun 02 May 2027 02:34:54 +0000
asID:                     131713
IP address blocks:        103.9.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl
                          rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:73:67:ea:86:a9:60:49:2f:57:54:96:55:ed:18:ed:49:af:b3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB
        Validity
            Not Before: May  3 02:29:54 2026 GMT
            Not After : May  2 02:34:54 2027 GMT
        Subject: CN=6054E5FA8604480C239CE546F74D0EAD6A1BE5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:f5:38:65:b0:a2:a6:a7:39:62:1b:89:ec:
                    e4:7a:f1:a6:0b:14:bf:e3:14:16:29:7a:fc:ad:f4:
                    0c:cf:b3:f0:58:25:76:ef:b6:8f:5d:dd:98:c2:2d:
                    c8:cc:01:d0:0f:c5:16:ee:8f:df:8d:c4:8d:28:58:
                    57:05:de:00:f3:1b:38:9c:31:dd:6c:fd:47:bf:6b:
                    93:36:e3:1a:51:3c:14:2c:c2:74:e1:c0:8a:aa:47:
                    10:59:9c:88:5d:ba:42:22:a4:b9:12:3c:90:22:3e:
                    25:16:7f:c0:3c:b8:27:cc:9a:c7:71:fd:51:2c:26:
                    de:98:c3:49:74:bf:a6:6c:b5:36:c5:6c:2b:f5:0d:
                    a1:a0:55:5e:35:30:9f:b5:36:83:19:03:d9:ee:a0:
                    e6:84:c3:61:7b:d9:0a:b4:bc:92:82:2b:a3:c3:aa:
                    89:55:bc:58:5a:ed:be:f8:fb:8e:50:74:3e:a7:9d:
                    06:5f:1c:8f:83:48:35:55:64:11:63:0f:8a:b7:a0:
                    60:4f:4c:67:e3:67:e6:0e:41:0f:74:1c:e3:80:ae:
                    5f:ea:3c:c4:06:58:1b:16:08:a0:70:13:e7:f9:2e:
                    71:ef:e6:84:36:c4:04:22:d5:83:5a:1f:c2:53:e1:
                    a1:0d:e8:cf:f4:1f:d5:29:5e:7d:16:db:ea:fa:27:
                    8a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:54:E5:FA:86:04:48:0C:23:9C:E5:46:F7:4D:0E:AD:6A:1B:E5:B7
            X509v3 Authority Key Identifier:
                keyid:F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/3130332e392e3134342e302f32322d3234203d3e20313331373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:45:44:f8:5a:7f:02:7c:ce:e3:2d:cc:3c:61:9d:f9:64:89:
         d5:14:30:e1:75:75:b7:80:65:84:a1:a1:81:f0:65:b4:30:cc:
         ee:36:93:1a:36:5f:a5:2e:da:d8:b3:4a:a2:53:c1:bf:91:a7:
         d0:9b:93:9e:2d:f8:3c:87:5c:9c:fd:c1:8e:d5:2e:6b:3b:67:
         1e:13:70:5f:37:f7:12:98:1d:41:1d:68:09:af:73:bf:fc:51:
         a0:c3:ea:5e:b3:e1:e7:be:25:15:cb:55:51:96:45:f6:7b:dc:
         eb:25:19:2e:77:ab:4b:6a:33:77:6e:c4:88:be:0c:52:6c:02:
         b2:69:0f:16:26:bf:7c:7d:b4:e4:74:9a:2b:15:e4:3d:48:5e:
         d5:5f:19:9b:da:e3:55:3d:f8:99:05:c2:f6:b0:b5:c2:e7:a0:
         04:f9:86:93:97:4a:46:9a:cb:e0:4b:90:8f:34:de:0e:3c:86:
         f9:62:c7:04:7b:a2:de:f8:0d:7a:fa:54:bd:fc:67:26:0e:be:
         ec:9e:42:fa:9c:d3:c9:b8:93:b6:58:c8:99:c6:8e:7b:c4:27:
         04:4d:a0:28:60:89:13:32:62:8e:3e:db:d5:83:9d:4b:13:ad:
         ee:bd:47:9f:60:c7:ff:e6:70:34:82:8f:fd:a6:86:51:55:4b:
         5f:32:2f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:01 2026 by rpki-client