Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa
File:                     3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (raw, json)
Hash identifier:          8nmjbXVGRgtW15sU+Nw25IOfD9ULS+LcKdXK12LUizs=
Subject key identifier:   1F:E7:5E:B8:D0:33:BE:3B:C7:C2:6D:F6:29:53:DB:FB:7F:E0:F7:72
Certificate issuer:       /CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB
Certificate serial:       0642491AEAFBA6DE715D2DBFD8C4C4D76318AD25
Authority key identifier: DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa
Signing time:             Sun 03 May 2026 02:38:08 +0000
ROA not before:           Sun 03 May 2026 02:33:08 +0000
ROA not after:            Sun 02 May 2027 02:38:08 +0000
asID:                     24529
IP address blocks:        103.217.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl
                          rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:42:49:1a:ea:fb:a6:de:71:5d:2d:bf:d8:c4:c4:d7:63:18:ad:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEBEEE897FD8557304A2C020DB86AD2BA80B06FB
        Validity
            Not Before: May  3 02:33:08 2026 GMT
            Not After : May  2 02:38:08 2027 GMT
        Subject: CN=1FE75EB8D033BE3BC7C26DF62953DBFB7FE0F772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:38:8a:43:a2:97:51:ec:38:c8:1b:af:7d:
                    30:f8:8a:34:b7:e2:7e:75:d4:82:40:ea:76:0d:07:
                    35:9d:f3:ae:fa:d4:81:94:e6:58:db:68:a2:10:b2:
                    5c:89:93:18:48:d3:76:25:40:2e:5a:d4:ac:57:8e:
                    c4:90:1e:53:54:25:cb:43:58:d5:c9:b5:86:b5:fa:
                    13:32:ca:9b:33:c4:21:fa:61:89:cb:de:dc:4c:5b:
                    15:72:62:c4:47:28:45:97:61:2e:4c:1e:8e:ad:bc:
                    30:5f:87:89:e9:7e:f5:a8:41:5e:e4:6f:df:ce:7c:
                    3f:e0:0a:c4:f9:2d:92:e5:95:4e:75:0e:97:80:52:
                    26:3e:94:ba:c9:d9:f5:ae:83:c1:6d:ad:fa:64:ef:
                    09:d3:0f:d1:1e:c9:fd:43:da:71:ba:c0:b9:86:6c:
                    5c:d2:39:1e:38:21:ff:a7:bb:9d:0f:23:92:44:d3:
                    c0:7e:b8:6e:6c:8d:84:b0:86:71:af:4b:fe:4e:52:
                    c2:2e:fa:b5:2d:86:40:93:b0:8a:01:c0:fc:d2:c8:
                    04:9d:7c:b7:ab:aa:b6:8e:8c:4e:26:0d:5d:01:61:
                    fa:40:8b:ea:3f:0c:6a:35:9a:68:bd:c1:a7:39:01:
                    95:e3:e7:ed:73:43:04:7f:e7:6b:a1:f0:ba:29:f0:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E7:5E:B8:D0:33:BE:3B:C7:C2:6D:F6:29:53:DB:FB:7F:E0:F7:72
            X509v3 Authority Key Identifier:
                keyid:DE:BE:EE:89:7F:D8:55:73:04:A2:C0:20:DB:86:AD:2B:A8:0B:06:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEBEEE897FD8557304A2C020DB86AD2BA80B06FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:02:b0:6a:f4:36:ff:b3:45:f0:c3:77:07:eb:6d:fc:c5:af:
         78:8b:b6:fd:e3:71:23:e9:4f:07:83:70:cf:bc:8a:af:8a:96:
         5e:4b:ae:53:b5:88:eb:4e:79:ea:79:4b:18:91:16:cc:e3:af:
         71:64:bc:56:59:64:42:fd:3d:1e:4d:00:13:22:5c:1f:15:4f:
         18:73:39:a6:1e:84:03:83:4e:7c:df:5a:d3:96:01:e7:9a:6e:
         6f:ab:62:d6:37:ea:f4:0d:8d:7a:2b:dc:ad:7d:00:cd:4f:3a:
         0f:d3:6b:57:1e:46:36:f0:f9:36:b6:a0:93:da:49:e9:10:b3:
         33:20:69:33:a8:60:00:18:f2:d4:31:01:2c:90:da:26:47:5e:
         d3:65:06:e2:ce:47:01:af:3c:b1:4e:8d:aa:1d:bc:64:0c:59:
         b6:dc:3c:04:ea:7e:58:ec:55:69:e5:4e:48:6a:29:4c:2c:87:
         30:f8:aa:06:30:b8:bf:67:d3:49:89:1f:5b:1b:f0:f9:7c:6c:
         44:ae:5d:4a:8c:80:25:81:1a:59:12:22:b3:cf:e3:2d:16:8a:
         83:d6:f2:4c:de:dd:aa:64:41:01:be:94:87:fe:74:19:40:66:
         97:b9:af:8a:82:ce:94:1f:4f:85:5f:db:6c:9c:0d:35:3f:c7:
         ff:80:95:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:14 2026 by rpki-client