Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa
File:                     3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          9UBNZ+h1G8mek9LcljhEKysiSZO7TUe9p8xzWKxJS+I=
Subject key identifier:   81:B9:3C:5D:10:25:DE:23:57:A9:C1:FB:CF:A4:EB:82:96:7E:E5:9D
Certificate issuer:       /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Certificate serial:       496D7314AFAB92455248413612673BA321DFB843
Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa
Signing time:             Sun 03 May 2026 02:38:13 +0000
ROA not before:           Sun 03 May 2026 02:33:13 +0000
ROA not after:            Sun 02 May 2027 02:38:13 +0000
asID:                     133800
IP address blocks:        103.94.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
                          rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6d:73:14:af:ab:92:45:52:48:41:36:12:67:3b:a3:21:df:b8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
        Validity
            Not Before: May  3 02:33:13 2026 GMT
            Not After : May  2 02:38:13 2027 GMT
        Subject: CN=81B93C5D1025DE2357A9C1FBCFA4EB82967EE59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:7b:3c:65:22:4a:a6:fc:f8:45:76:b3:02:
                    fe:d6:61:7d:d0:c4:e8:b6:c2:b7:a5:90:7f:3a:2a:
                    67:c6:17:d9:b8:0f:68:f0:c2:62:4f:04:c6:6f:a8:
                    7c:b1:ff:27:6f:6b:5a:a2:fc:5f:ed:ca:58:83:89:
                    7b:5e:f5:1d:2d:08:81:d3:94:f7:30:53:23:6c:67:
                    d4:a8:e4:71:1b:92:92:62:e0:d1:9b:4e:fa:fc:bf:
                    da:f2:53:d9:da:9c:e1:29:56:34:b8:0d:c8:9c:55:
                    bb:d3:6f:3f:04:93:b0:49:f8:be:b0:cc:8b:52:0f:
                    ca:45:35:06:9f:3e:11:00:e5:47:9a:99:c0:28:34:
                    eb:05:64:e9:ab:a2:12:e2:2d:a2:14:03:18:99:bb:
                    54:5a:02:8b:42:a4:21:1b:24:e8:41:d8:75:25:68:
                    32:cc:1a:ee:cc:1f:b1:42:cf:80:4d:cd:c0:1a:00:
                    c7:e1:ee:35:38:e1:ed:28:d1:0c:3b:70:7e:fe:0b:
                    01:fd:94:ad:29:b5:a8:02:ce:ec:40:be:83:b2:dd:
                    06:fb:8e:29:fc:a4:29:3d:18:a6:34:16:29:cb:c7:
                    db:04:5a:32:a7:a1:ac:7c:dc:ab:81:ca:4b:25:33:
                    97:81:d3:79:6c:98:8f:8f:72:cd:7f:94:a6:21:c6:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:3C:5D:10:25:DE:23:57:A9:C1:FB:CF:A4:EB:82:96:7E:E5:9D
            X509v3 Authority Key Identifier:
                keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:fa:63:2a:42:88:eb:f5:0c:2b:9b:a4:15:cb:c6:c2:23:8d:
         71:14:14:46:0e:4a:f1:a3:b3:e1:dc:77:8f:16:1f:72:5c:91:
         5c:de:06:1e:b0:e9:84:4a:bc:0c:dd:54:4f:30:45:b9:75:62:
         15:4b:89:17:bd:6b:cd:c1:fc:45:cf:52:1f:dc:72:7b:99:83:
         30:b9:60:97:78:7d:a6:1a:b4:95:c3:ef:ed:7a:9a:26:6d:e5:
         39:39:90:19:b5:3e:a2:c6:d7:71:c5:6e:e0:88:91:b7:9d:12:
         25:b2:19:82:be:8a:2c:d5:92:d5:70:7f:b9:ca:0c:82:68:92:
         58:ca:20:8d:26:81:96:92:dc:89:a9:fc:f8:08:41:e0:d5:8f:
         56:74:62:ab:2f:52:71:a6:ad:70:cb:d1:43:ad:45:38:50:12:
         cb:d5:b7:c8:14:58:b4:18:5a:f3:90:11:e4:68:0f:bc:9d:0a:
         ec:48:44:ca:69:6f:72:cd:d5:41:a3:29:5d:a4:7b:d5:ad:4a:
         ef:79:ef:70:63:fc:64:10:55:ea:1a:12:f3:55:8e:15:58:26:
         85:17:2c:28:42:4a:7f:c2:93:d2:9a:65:e2:54:64:59:8a:ac:
         0b:1d:47:03:ca:8e:24:4d:a4:bb:75:b2:5c:7a:3e:c8:d6:2d:
         81:df:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:49 2026 by rpki-client