Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa
File:                     3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (raw, json)
Hash identifier:          vnuBG2aS4W7tq40+VdqRRoETLLV2uQRbtOl7x5fTejI=
Subject key identifier:   6C:BF:D4:33:50:0D:13:94:DF:BF:1C:3D:F9:93:91:44:75:5D:60:82
Certificate issuer:       /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7
Certificate serial:       1DFEED5A40CC38B00FD24061975026D541110303
Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa
Signing time:             Sun 03 May 2026 02:35:33 +0000
ROA not before:           Sun 03 May 2026 02:30:33 +0000
ROA not after:            Sun 02 May 2027 02:35:33 +0000
asID:                     139424
IP address blocks:        103.144.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl
                          rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fe:ed:5a:40:cc:38:b0:0f:d2:40:61:97:50:26:d5:41:11:03:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7
        Validity
            Not Before: May  3 02:30:33 2026 GMT
            Not After : May  2 02:35:33 2027 GMT
        Subject: CN=6CBFD433500D1394DFBF1C3DF9939144755D6082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:72:25:24:a9:68:65:85:83:72:93:bf:1c:
                    76:52:c7:ea:04:16:94:5e:4a:ea:0c:0b:da:78:5a:
                    ef:cb:bb:8f:da:90:c6:ab:4e:9e:54:52:6a:c2:86:
                    7f:3d:57:49:2d:f8:5d:73:42:53:99:b8:e2:5a:61:
                    02:94:5c:f3:db:4d:1c:30:8a:30:5c:5b:d0:35:c0:
                    23:4c:90:c7:01:e5:3d:f2:02:d2:11:6c:f9:39:b6:
                    35:0e:35:38:f6:81:d5:4c:9c:ee:33:73:70:e4:3f:
                    e1:57:3a:15:20:e7:03:30:c7:3b:3c:22:08:b6:66:
                    a3:94:3d:84:e1:9a:4d:52:a3:30:f4:0f:f5:59:3c:
                    eb:d2:6b:65:a9:23:0a:2c:99:35:c9:d9:5e:03:91:
                    85:66:90:e4:1b:91:c9:c3:4f:a2:11:16:26:d8:7f:
                    1b:7c:29:5f:94:d9:6c:08:ea:b1:03:2c:73:bd:f2:
                    f7:96:65:8b:7e:2a:e1:66:ca:2b:a7:b4:97:c9:17:
                    6e:3a:d6:59:9f:49:43:3e:99:be:90:ea:c6:1d:4f:
                    ee:b5:b9:58:41:a4:5a:88:77:23:7b:0d:34:92:e3:
                    d0:1e:7b:55:b0:a2:99:d5:8f:a2:4e:c1:78:1b:9c:
                    17:5f:c6:e3:a9:de:e8:12:63:ef:12:99:4a:d7:46:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BF:D4:33:50:0D:13:94:DF:BF:1C:3D:F9:93:91:44:75:5D:60:82
            X509v3 Authority Key Identifier:
                keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:96:bb:fe:ec:29:6f:4b:b0:e3:96:30:d8:e3:13:54:b8:5e:
         e5:21:6f:b1:ea:d8:39:6d:dc:19:e9:22:0a:05:18:f5:35:b5:
         4e:af:65:82:aa:c5:15:e9:af:48:1f:6d:a0:00:5d:b5:5a:68:
         57:a0:c3:64:70:0a:7a:e9:c4:88:d5:2b:e4:4d:3c:b1:9b:d4:
         55:fe:08:c0:a9:3f:fd:bd:71:27:94:9c:d8:e5:f4:79:07:df:
         c8:8f:eb:d9:33:f6:01:bd:08:ee:1c:4a:8b:1d:25:7b:66:e6:
         61:58:47:dd:9d:58:56:67:c4:14:87:42:32:40:50:44:5d:19:
         dc:a5:86:a5:9d:c5:3c:ca:60:12:cb:6b:9f:7d:14:96:b5:ee:
         b5:d6:42:db:00:fb:d8:55:a2:c4:d8:d4:66:7a:b2:6e:0a:1b:
         0d:7c:27:f0:5e:56:49:1e:27:c3:17:b0:74:94:09:c4:91:b2:
         b0:01:2a:27:f0:e8:c8:b6:29:90:3c:4c:bd:b7:f4:59:cf:81:
         27:29:d8:7e:ed:6d:2f:45:86:31:fa:86:9d:3d:2e:f1:d2:3a:
         6d:4e:51:c9:2e:01:9c:6e:cd:f6:73:85:f9:b8:11:75:d2:25:
         64:95:7e:5d:14:8a:87:87:12:fa:88:0b:f8:13:fa:65:44:ad:
         3b:ff:91:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:14 2026 by rpki-client