Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa
File:                     3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (raw, json)
Hash identifier:          8hArOQkZgNmI16L0WGc7RzZ5Ruf+DKiwdMQ56yopHsU=
Subject key identifier:   5E:E2:43:B2:02:8E:76:7F:C1:43:29:29:4C:60:74:C4:A8:13:A9:75
Certificate issuer:       /CN=7E5852640ACB27CE4AC466E5338B30E206711DDD
Certificate serial:       7DEA83912232FAB99D6C88C9766E2AEEA73A11A1
Authority key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa
Signing time:             Sun 03 May 2026 02:39:25 +0000
ROA not before:           Sun 03 May 2026 02:34:25 +0000
ROA not after:            Sun 02 May 2027 02:39:25 +0000
asID:                     150261
IP address blocks:        103.22.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl
                          rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ea:83:91:22:32:fa:b9:9d:6c:88:c9:76:6e:2a:ee:a7:3a:11:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD
        Validity
            Not Before: May  3 02:34:25 2026 GMT
            Not After : May  2 02:39:25 2027 GMT
        Subject: CN=5EE243B2028E767FC14329294C6074C4A813A975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:3e:ae:96:51:6e:48:c5:cf:e3:7e:18:cc:
                    7f:ee:48:7e:e3:22:3a:22:98:dc:9b:bc:d1:b8:b7:
                    34:9c:f0:1e:91:10:3f:ca:72:66:48:33:50:9e:57:
                    be:73:08:d8:2f:19:4c:6c:02:2d:f7:9d:a9:aa:15:
                    32:30:12:2b:0f:6e:38:35:94:a3:31:b4:ca:99:92:
                    d4:41:dd:4c:48:49:9c:b6:99:5e:31:8e:23:c6:4a:
                    ed:fe:0a:b4:54:4f:2b:b1:82:06:ac:f0:1d:cc:8e:
                    30:1f:d9:a3:98:85:d7:b2:97:66:a6:ef:2f:7d:fc:
                    af:e9:d1:73:f9:b2:54:fe:68:bb:da:32:fa:7b:4b:
                    8a:d5:f2:70:05:a1:95:5a:55:81:93:87:c1:42:78:
                    d8:93:6c:f0:e9:34:ab:54:58:e2:77:aa:13:fe:0a:
                    8d:a0:4c:a3:fe:a3:08:cf:5c:6b:59:eb:78:39:42:
                    07:76:cb:a1:7f:62:2f:e4:57:5d:9a:dd:26:48:a4:
                    4d:e5:de:cd:5a:7a:a2:0e:f8:9c:74:48:83:15:ff:
                    18:25:a7:28:04:df:6e:92:8e:7b:57:8a:a1:3a:fe:
                    75:cd:28:f3:96:d3:f4:7e:e3:8e:83:13:91:cc:c7:
                    54:26:e1:f1:1e:1f:07:62:94:b9:4f:51:ec:c0:82:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E2:43:B2:02:8E:76:7F:C1:43:29:29:4C:60:74:C4:A8:13:A9:75
            X509v3 Authority Key Identifier:
                keyid:7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:8c:2d:e9:10:2f:47:d3:36:73:7c:f8:1b:10:e3:e8:c4:4a:
         33:f9:4f:35:33:e4:a2:80:62:f2:29:45:f8:2c:7f:a0:79:96:
         ee:b9:17:3c:8a:aa:4d:21:e9:8a:42:0e:aa:7b:9e:55:9c:66:
         94:85:db:70:11:70:0a:05:04:44:bf:0e:ba:47:fb:d3:a1:02:
         9e:39:95:56:36:4f:85:a1:2f:58:d0:2e:de:0a:6e:05:ce:25:
         e8:e7:5b:c9:22:15:60:c0:3a:49:8f:aa:3f:22:fc:be:b6:1c:
         c6:6a:ef:fc:78:ee:25:0f:23:a1:44:37:9d:7c:58:73:a0:38:
         98:aa:76:e9:39:be:46:01:e7:ae:7e:e2:59:ee:14:d4:9b:3f:
         b7:6b:ea:b0:bf:5b:fd:35:14:89:ee:91:3b:09:4b:68:eb:1b:
         1a:3e:5f:ae:bd:88:de:90:15:09:c5:2b:39:92:d3:9c:57:41:
         16:16:05:61:67:c0:0f:48:94:d4:1f:ad:7b:8f:65:c4:29:fd:
         34:ad:de:28:9d:2f:7a:64:0f:a4:fe:1e:e0:69:1f:87:5b:a9:
         95:29:1c:81:ae:9f:6c:7d:b8:69:9d:c6:49:52:47:1a:a4:f2:
         6e:45:be:41:69:ef:72:33:5f:d4:29:27:76:72:a7:9f:1d:21:
         02:e3:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:34 2026 by rpki-client