Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa
File:                     3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (raw, json)
Hash identifier:          D90T03o6j8g6AIOKzGOLBAM7pUvAQ3WBKqv9zbNkYu4=
Subject key identifier:   28:E8:08:6D:16:76:0C:88:EA:F9:89:E5:3E:C2:E1:6C:67:C7:3C:C8
Certificate issuer:       /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3
Certificate serial:       36E7F24EEA98D464763384C7AC137BE2F599B6CF
Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa
Signing time:             Sun 03 May 2026 02:37:53 +0000
ROA not before:           Sun 03 May 2026 02:32:53 +0000
ROA not after:            Sun 02 May 2027 02:37:53 +0000
asID:                     64029
IP address blocks:        103.214.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl
                          rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e7:f2:4e:ea:98:d4:64:76:33:84:c7:ac:13:7b:e2:f5:99:b6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3
        Validity
            Not Before: May  3 02:32:53 2026 GMT
            Not After : May  2 02:37:53 2027 GMT
        Subject: CN=28E8086D16760C88EAF989E53EC2E16C67C73CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:36:58:ff:28:ec:21:cd:61:43:f8:c9:40:
                    aa:88:26:2f:a3:af:83:f5:dd:f2:7f:cb:a6:10:63:
                    f7:6b:62:1f:e9:70:63:08:27:35:cb:ec:fd:34:9e:
                    6f:ae:a2:b0:cc:3f:c0:f7:bf:48:49:8b:0d:a7:25:
                    07:e0:8a:d7:08:af:d3:38:02:00:28:50:84:78:09:
                    0d:53:8c:2f:bd:4d:e4:a9:73:af:55:36:2f:49:69:
                    0e:b9:0e:5c:4e:97:62:0c:c6:98:46:f7:de:97:3f:
                    f3:c2:ad:a6:04:52:b3:dc:87:69:33:bc:00:b3:b4:
                    12:0d:55:1d:d6:0a:61:c7:0e:c0:48:af:69:e5:1a:
                    0d:bb:f6:fd:46:4c:89:42:98:93:3e:d0:aa:1a:ad:
                    05:7a:96:73:d9:f2:88:b5:b4:04:96:bf:9c:26:62:
                    b3:37:a1:fb:8c:7b:61:36:3a:23:87:7f:1b:66:ab:
                    55:67:43:59:9f:b2:b8:47:a2:52:f1:22:a8:8a:eb:
                    07:4d:d1:8c:24:ad:e4:a5:c5:bc:87:80:8b:51:3f:
                    8d:99:43:9e:70:67:a3:1d:e5:c2:05:fb:c4:0c:ea:
                    cb:dc:61:7d:c5:fc:34:83:a7:d7:6f:62:a7:b0:e8:
                    9d:f0:f1:92:dc:70:4a:ee:c3:d3:31:ee:38:0a:0c:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:08:6D:16:76:0C:88:EA:F9:89:E5:3E:C2:E1:6C:67:C7:3C:C8
            X509v3 Authority Key Identifier:
                keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:95:13:e9:0e:17:30:a4:e2:6d:c7:f0:91:5c:68:41:26:c5:
         7f:8c:b2:61:c9:4a:85:0c:e8:a4:01:eb:53:9e:3f:3c:ec:43:
         a8:2b:c5:19:4a:cd:b1:59:02:da:1b:ea:ce:a8:78:f7:dc:9e:
         12:24:69:4d:52:a9:b8:4d:fb:9a:70:a1:d7:6e:ab:f0:11:1c:
         73:a6:a2:10:d2:bd:2d:40:9a:78:4c:91:54:fd:ab:62:a2:7d:
         50:44:27:93:d4:a8:ad:17:d3:95:31:69:94:3e:b8:f1:d8:e8:
         e4:5a:d0:32:b3:a5:ef:b9:63:f9:bb:cc:3b:0b:19:9b:3b:66:
         3c:54:c2:9b:2b:91:17:08:8d:fd:cd:39:0f:58:e3:73:dd:3e:
         ae:8c:f0:c2:8b:85:c8:17:7e:8a:84:41:e7:2a:43:14:6a:04:
         03:64:73:16:01:e4:3e:03:f9:fe:4e:d2:d0:34:86:42:9c:0b:
         c2:d9:10:1e:eb:0c:4e:a5:d1:9b:b5:d4:9b:38:50:6d:c8:cf:
         62:e7:60:65:a7:f7:96:7e:58:3c:dd:89:cb:2e:a3:36:2c:ba:
         98:24:f9:5b:d0:b2:8f:0d:ef:81:8f:98:13:c9:6f:46:1c:5f:
         63:5a:cc:b8:da:ca:65:dd:cf:79:b1:ba:a1:9e:c4:6b:15:2f:
         74:69:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:02 2026 by rpki-client