Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa
File:                     3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (raw, json)
Hash identifier:          6HPQtYJFdlYFmn46WjveSZCOXYCIp+a2PMZ4d4GJwfY=
Subject key identifier:   EC:8C:AE:2D:46:87:B0:A7:28:A4:48:DD:64:DA:E5:AC:E0:26:5C:6F
Certificate issuer:       /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3
Certificate serial:       49795163ADB61F73A80DBEA83479CBCAF0092444
Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa
Signing time:             Sun 03 May 2026 02:37:52 +0000
ROA not before:           Sun 03 May 2026 02:32:52 +0000
ROA not after:            Sun 02 May 2027 02:37:52 +0000
asID:                     64029
IP address blocks:        103.214.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl
                          rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:79:51:63:ad:b6:1f:73:a8:0d:be:a8:34:79:cb:ca:f0:09:24:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3
        Validity
            Not Before: May  3 02:32:52 2026 GMT
            Not After : May  2 02:37:52 2027 GMT
        Subject: CN=EC8CAE2D4687B0A728A448DD64DAE5ACE0265C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:e7:69:3f:64:96:70:23:09:ae:52:8e:b0:
                    8f:49:47:dc:42:3f:3b:0a:e5:51:62:ef:45:2e:5b:
                    73:34:dd:10:b1:99:7f:91:cc:71:7f:ff:7b:2b:cf:
                    82:b2:7a:25:ed:d6:8d:47:f0:dc:8a:30:fe:34:10:
                    64:32:f0:76:ba:6f:c7:94:29:78:45:80:20:d8:66:
                    0e:f6:59:5e:92:74:15:11:b1:43:9b:e8:d3:23:89:
                    6d:1d:e8:04:18:ee:54:57:3a:03:77:be:62:63:92:
                    0d:32:e1:49:b9:ea:19:19:b1:ad:fd:ab:6a:94:03:
                    70:51:81:2a:1d:58:46:82:8b:ac:df:3b:39:e8:88:
                    49:33:b3:83:dd:63:15:7e:e6:8e:e4:22:05:71:c5:
                    9d:8d:1a:a9:ea:86:79:a7:c6:c7:29:af:ec:de:04:
                    9b:f1:8e:a0:55:92:8c:5f:05:4f:71:cb:81:ef:f1:
                    a0:73:39:6e:3a:9e:2e:ad:ba:13:d8:67:34:21:74:
                    58:e9:d5:ca:7d:44:23:b0:1d:65:60:41:28:0d:34:
                    a5:15:91:18:a8:c6:ef:5d:65:97:03:84:a4:08:2e:
                    3b:5a:d9:2f:50:d1:79:a2:0e:0d:d1:1b:7e:ad:76:
                    5f:fd:e0:48:21:69:79:fd:67:a3:46:9b:f9:47:6a:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8C:AE:2D:46:87:B0:A7:28:A4:48:DD:64:DA:E5:AC:E0:26:5C:6F
            X509v3 Authority Key Identifier:
                keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:8f:a7:a1:fc:8f:ab:77:f3:78:f3:08:70:39:9b:c0:f7:
         b9:f3:08:8f:1f:4a:c5:06:3a:be:49:ba:c4:27:94:06:52:89:
         c1:9a:db:07:da:4c:84:00:25:85:37:ef:27:8a:80:a3:11:e4:
         2b:32:70:76:fe:42:8d:c7:40:da:85:d1:27:57:c1:1e:b1:23:
         f5:b3:6f:b8:78:ab:7b:80:ff:7e:fd:d5:d4:5d:b3:e2:42:7b:
         3e:b4:e8:21:dd:28:db:8e:d8:75:24:10:7e:88:8b:2a:fc:5e:
         71:bb:6f:1a:5c:cd:0d:d9:66:cf:d6:75:19:e8:1a:54:20:41:
         a7:b6:82:02:9e:5a:0d:d7:57:ad:50:32:11:93:07:5d:af:d7:
         f9:23:db:c7:80:23:25:0b:72:2b:da:55:ea:4e:95:1e:d3:da:
         48:a9:bc:32:a5:b0:e0:1d:c8:81:95:4a:1c:85:38:33:a2:b5:
         30:35:55:82:3b:0e:ec:74:ec:24:71:78:3e:53:bd:7d:5a:6a:
         f6:e5:91:87:68:e3:7f:d6:88:74:f2:6d:19:ac:ec:7e:9f:b3:
         ac:dc:07:b3:48:4a:0d:5f:d5:4e:c3:09:f5:37:ee:8e:aa:5d:
         11:b4:1a:05:47:29:17:5c:46:07:b3:bb:d0:bb:da:b6:79:8b:
         08:2d:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:03 2026 by rpki-client