Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa
File:                     3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (raw, json)
Hash identifier:          Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=
Subject key identifier:   87:CE:FD:43:3A:57:5F:BF:5F:56:E5:C6:0B:C2:1A:CD:FC:7F:62:8F
Certificate issuer:       /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7
Certificate serial:       0F3C243CD805E7BD76604553F8FE3B514FE134D3
Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa
Signing time:             Sun 03 May 2026 02:35:34 +0000
ROA not before:           Sun 03 May 2026 02:30:34 +0000
ROA not after:            Sun 02 May 2027 02:35:34 +0000
asID:                     139424
IP address blocks:        103.144.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl
                          rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3c:24:3c:d8:05:e7:bd:76:60:45:53:f8:fe:3b:51:4f:e1:34:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7
        Validity
            Not Before: May  3 02:30:34 2026 GMT
            Not After : May  2 02:35:34 2027 GMT
        Subject: CN=87CEFD433A575FBF5F56E5C60BC21ACDFC7F628F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:99:47:09:53:5a:55:cb:b5:4a:3b:80:7b:a1:
                    de:63:a9:c1:17:7d:c6:c8:18:82:00:73:ee:18:f5:
                    c8:f9:52:5c:9e:11:73:07:13:00:f7:6d:45:7d:44:
                    d9:1f:c3:ff:e5:9e:f4:ff:66:4c:35:7e:6f:ad:f8:
                    f1:61:44:9d:ba:90:cf:5f:e1:53:0b:ba:39:42:3c:
                    4d:c3:b8:ff:0f:d0:4a:a8:52:ed:2c:4d:2e:2e:3c:
                    11:ab:22:38:3a:65:a1:8a:97:73:74:a2:0a:1e:cb:
                    4c:bd:97:da:eb:7d:09:b8:08:27:cd:8c:7f:b9:1d:
                    cc:ae:74:21:5d:82:87:1a:01:81:86:c3:10:9a:20:
                    ed:4b:39:32:94:55:1a:73:90:0c:a5:5c:3a:07:92:
                    00:0d:2f:15:ba:7b:94:41:91:7c:f2:71:0a:31:4d:
                    f4:d2:a4:d2:f9:ae:c9:e1:81:7b:ed:cb:39:d7:a9:
                    8a:ce:ed:d1:2f:f2:8a:c5:59:97:7f:92:78:cf:83:
                    82:92:f4:aa:fa:ae:d1:b9:cf:97:19:09:d2:ff:5f:
                    11:7a:1a:a2:4e:3f:01:85:cf:a6:bc:b5:79:7e:84:
                    cf:4f:ac:22:a0:5f:78:17:0b:b0:f5:79:a5:11:5b:
                    00:e3:20:c2:f2:a5:98:81:13:f6:69:c1:dd:ec:db:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CE:FD:43:3A:57:5F:BF:5F:56:E5:C6:0B:C2:1A:CD:FC:7F:62:8F
            X509v3 Authority Key Identifier:
                keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:7f:eb:6e:81:1c:84:5f:93:6f:58:ec:a8:e8:d8:ac:e7:cc:
         a5:5b:e6:1e:cf:a2:90:2d:6a:4f:64:e6:a0:8e:27:80:f4:49:
         d7:d1:5d:b9:6b:42:c7:56:e6:15:2a:6a:f9:86:4c:ad:27:30:
         22:47:5d:c7:ee:78:a5:44:5d:dc:6b:c9:5e:c8:80:85:93:99:
         34:bb:2b:70:ab:1e:e5:0a:1e:2c:4c:4d:fe:61:2b:22:95:1e:
         3d:de:36:74:53:dc:6c:53:ac:7a:53:3d:1c:34:6f:0f:47:cd:
         c1:7a:1f:8f:53:a4:0f:53:86:31:9a:c2:6e:95:d1:2f:29:61:
         b2:56:c7:06:57:30:47:22:ed:fb:04:b0:88:54:a7:80:6b:f0:
         9c:13:f8:18:13:7f:7a:ab:ee:b9:03:e5:08:26:4a:86:a8:49:
         34:c3:fd:ba:d7:df:9b:ec:8b:37:a9:5a:b6:a0:d1:ee:d5:cd:
         5f:cf:f9:98:a6:1a:89:02:a5:91:c2:50:62:29:38:e3:4d:ae:
         55:24:7f:76:80:b4:96:6b:0c:ab:f7:4d:18:56:2b:38:5a:60:
         3a:1d:18:15:56:7f:07:11:3e:76:2a:53:a2:da:d9:8e:93:54:
         5f:3a:ca:d7:30:c4:74:0b:19:96:6c:4c:c8:43:cf:66:b7:a4:
         2d:a5:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:57 2026 by rpki-client