Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa
File:                     3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (raw, json)
Hash identifier:          YMKfqoPSqa/Oa6FmMB4IPRgXJpzSbLrKqy8G2/8VojM=
Subject key identifier:   B3:DC:9C:DC:AB:C9:8A:9A:87:9A:C1:C2:CA:6C:BE:D6:3F:87:65:71
Certificate issuer:       /CN=797581F67816C4132050EC6348DBB15EBC5C0189
Certificate serial:       2B362FC63E94E28FA6DC6849B0ABED95A0C9526F
Authority key identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa
Signing time:             Sun 03 May 2026 02:40:44 +0000
ROA not before:           Sun 03 May 2026 02:35:44 +0000
ROA not after:            Sun 02 May 2027 02:40:44 +0000
asID:                     58482
IP address blocks:        103.28.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
                          rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:36:2f:c6:3e:94:e2:8f:a6:dc:68:49:b0:ab:ed:95:a0:c9:52:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797581F67816C4132050EC6348DBB15EBC5C0189
        Validity
            Not Before: May  3 02:35:44 2026 GMT
            Not After : May  2 02:40:44 2027 GMT
        Subject: CN=B3DC9CDCABC98A9A879AC1C2CA6CBED63F876571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:e2:da:1b:0f:65:dc:9d:c9:5a:2f:83:4f:
                    7f:88:c7:b5:fc:12:05:6e:84:fb:a7:29:44:d9:9a:
                    d4:08:65:df:e2:2c:5e:cc:86:78:c8:bd:f1:57:bd:
                    97:18:0e:7c:49:64:50:56:74:ab:ca:19:6f:af:dc:
                    eb:98:4c:66:20:65:f1:f1:e2:25:6d:d2:bf:a2:2b:
                    d7:ad:74:5f:20:84:7d:5f:b0:cf:53:ce:c8:84:eb:
                    5c:bc:b8:32:58:b5:50:c6:40:c8:bf:f3:96:8d:64:
                    23:85:cf:77:e7:92:d1:03:60:85:71:8b:ea:44:69:
                    4d:01:8c:8c:0a:39:c4:e4:d2:8a:97:95:c9:20:13:
                    27:d4:4b:35:01:72:8a:27:1c:3b:a1:ea:6a:3f:85:
                    64:75:13:13:d7:13:34:b5:6e:12:a3:51:1f:04:f5:
                    78:94:4a:94:40:4d:61:fe:2d:c7:21:3c:9e:27:6f:
                    2a:29:49:65:65:00:b4:d1:55:1f:7b:ee:c2:33:3c:
                    50:da:b1:2c:02:8a:a8:3f:ab:bb:2f:db:c9:7a:12:
                    e5:51:7e:b1:9e:19:7c:50:89:33:ea:55:da:96:c2:
                    09:22:e0:3e:ff:51:e6:89:05:fc:f6:65:30:ef:78:
                    e8:56:9f:b5:9f:04:ae:85:fb:71:16:92:9c:44:62:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DC:9C:DC:AB:C9:8A:9A:87:9A:C1:C2:CA:6C:BE:D6:3F:87:65:71
            X509v3 Authority Key Identifier:
                keyid:79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:13:7b:48:b3:1d:e7:58:89:ae:c0:6b:07:70:a3:42:30:
         d8:75:1d:4c:f2:30:a9:b9:c1:eb:8c:d1:53:d7:ac:8e:2f:0e:
         c0:41:8c:9f:c0:58:d9:39:e3:c7:da:29:8d:8e:c6:b8:0b:3c:
         16:ae:34:c1:1f:1c:3f:49:7a:7b:08:e3:2b:4e:5b:fd:84:64:
         70:93:6c:29:29:33:48:b9:72:dc:e0:be:9b:27:33:33:6f:63:
         50:c2:e9:56:42:03:cb:d6:fe:47:12:fb:1e:35:f6:73:b7:5d:
         5d:c9:47:e8:f9:19:05:95:d5:52:c2:26:6f:06:8d:7a:b3:46:
         1f:e6:02:1e:4b:84:4a:1c:41:83:55:04:14:ea:de:bd:c2:03:
         b8:50:28:82:c0:b1:e9:6f:bc:9c:43:39:36:d3:58:65:fb:ad:
         e6:a3:6c:4e:f6:1e:a4:72:94:1e:05:90:14:cc:9d:e8:23:23:
         77:5a:6c:3e:ca:9a:35:b4:b3:ca:14:74:9f:a5:2c:0b:8a:99:
         48:c6:9f:4e:8a:b5:09:43:0b:66:c5:f7:7f:2f:d4:81:b1:94:
         20:78:e0:69:64:35:5c:c8:dc:15:bf:0a:26:43:36:98:b0:22:
         9f:03:9c:d7:aa:2f:22:8c:08:f5:19:1f:b5:2b:06:c7:13:a9:
         96:59:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:17 2026 by rpki-client