Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa
File:                     3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (raw, json)
Hash identifier:          7Po7ALrAR6J4a8bNfBNoSUzyyO7xwSetD9n1ziA4ooo=
Subject key identifier:   95:D0:2A:81:13:46:87:59:FC:6E:66:58:9A:8C:7D:09:2B:E0:6E:2E
Certificate issuer:       /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3
Certificate serial:       01F44B149D41D543D714A4CF1B715AD046603337
Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa
Signing time:             Sun 03 May 2026 02:37:53 +0000
ROA not before:           Sun 03 May 2026 02:32:53 +0000
ROA not after:            Sun 02 May 2027 02:37:53 +0000
asID:                     64029
IP address blocks:        103.214.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl
                          rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f4:4b:14:9d:41:d5:43:d7:14:a4:cf:1b:71:5a:d0:46:60:33:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3
        Validity
            Not Before: May  3 02:32:53 2026 GMT
            Not After : May  2 02:37:53 2027 GMT
        Subject: CN=95D02A8113468759FC6E66589A8C7D092BE06E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:85:fd:db:31:de:70:2e:fa:c2:44:7a:63:
                    52:4b:74:0b:d7:4f:d2:87:ee:0f:38:02:f9:30:c8:
                    5c:af:53:14:78:a7:d9:3b:53:63:23:7c:bc:44:e2:
                    77:ed:6f:93:11:f3:15:88:6e:3e:ff:59:d6:86:32:
                    4b:ba:6b:df:91:23:d3:b1:64:69:5d:07:04:59:39:
                    eb:cd:80:31:9b:58:99:0e:48:b8:d5:e2:38:f8:16:
                    43:a3:28:93:b3:f3:79:d5:7f:3e:35:5b:8e:60:26:
                    fd:dd:f7:ae:f2:74:ea:b4:f6:6e:29:d8:37:93:40:
                    2f:d8:dd:1b:9a:62:2d:6c:d2:cb:16:8e:0d:96:5a:
                    0e:9a:a6:4a:07:94:43:5d:72:63:bd:a2:41:be:e2:
                    16:fa:a6:8f:ef:dc:43:a4:cb:a6:fa:bb:f4:3f:cc:
                    66:fa:62:d0:5b:5f:bd:b5:d6:c2:54:4f:15:0e:f1:
                    f0:83:1c:96:de:40:c5:0c:45:a4:b0:17:04:6e:fd:
                    b7:95:8a:de:b8:6c:5f:3d:f1:e3:14:3d:47:c0:e8:
                    66:58:1b:33:7e:97:f3:d9:a5:1e:81:64:ee:10:40:
                    fa:a1:3e:22:79:b1:c7:af:35:8e:d8:75:a0:86:8b:
                    70:3f:1d:f8:9e:a5:1f:a4:66:07:95:9f:ac:78:0f:
                    60:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D0:2A:81:13:46:87:59:FC:6E:66:58:9A:8C:7D:09:2B:E0:6E:2E
            X509v3 Authority Key Identifier:
                keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:b8:c2:86:0a:b6:b7:b3:bd:db:f0:a3:17:db:0c:a5:ac:
         9e:33:11:73:fe:7e:f5:ec:86:01:1f:74:21:bd:d0:43:d8:62:
         2d:94:cd:b5:20:1d:2d:5e:91:01:b2:5e:b9:9a:92:e0:a3:31:
         83:86:9f:8e:cd:5c:12:83:80:49:dd:33:3b:04:a1:c4:70:07:
         b0:24:b0:27:73:94:4b:c1:77:83:09:26:4c:40:9e:00:d5:35:
         3f:66:1a:02:08:eb:b6:f7:f4:60:ac:6c:e4:d7:ef:83:97:15:
         74:dd:b3:c4:9b:d7:9f:2f:54:e1:e8:d7:3e:6c:b3:b0:61:e9:
         c5:58:80:13:e6:b2:26:65:62:a5:b7:0e:e5:ae:57:8e:9a:48:
         26:17:22:79:a5:70:05:2a:77:f8:10:9b:ae:aa:2f:18:fe:f0:
         e8:c4:aa:9d:fb:28:cf:dd:c4:c8:46:61:30:f7:2e:18:e3:69:
         6f:22:4c:6e:2e:9d:05:50:71:1b:d0:8c:37:8e:29:47:13:98:
         ad:d9:aa:3d:22:0d:11:00:54:f8:ec:fe:6b:e8:2e:a8:67:69:
         4e:06:a6:8a:e4:93:cd:b0:34:dc:b3:80:8e:9b:1e:e7:d8:fc:
         eb:aa:17:5f:4c:88:f4:60:97:b2:14:09:6b:8a:e0:80:d8:71:
         3f:3e:39:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:03 2026 by rpki-client