Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32332d3234203d3e203538343034.roa
File:                     3130332e32382e31322e302f32332d3234203d3e203538343034.roa (raw, json)
Hash identifier:          rtaQaHq+P5lP9auuPcmaB5K4uqxx/eB7GaUrzPNCTXU=
Subject key identifier:   EE:31:0D:CD:5A:80:14:5D:EF:F2:46:9D:DC:50:BE:FA:97:30:4F:4A
Certificate issuer:       /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
Certificate serial:       213A7B4BAA6F7B43D3A48CC252EF543AE7D5AF7F
Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32332d3234203d3e203538343034.roa
Signing time:             Sun 03 May 2026 02:41:37 +0000
ROA not before:           Sun 03 May 2026 02:36:37 +0000
ROA not after:            Sun 02 May 2027 02:41:37 +0000
asID:                     58404
IP address blocks:        103.28.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl
                          rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3a:7b:4b:aa:6f:7b:43:d3:a4:8c:c2:52:ef:54:3a:e7:d5:af:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
        Validity
            Not Before: May  3 02:36:37 2026 GMT
            Not After : May  2 02:41:37 2027 GMT
        Subject: CN=EE310DCD5A80145DEFF2469DDC50BEFA97304F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:35:2c:c1:10:99:1c:23:4d:cf:24:98:f9:
                    50:d0:a2:e2:1c:30:77:7b:f5:a6:38:13:e2:24:ca:
                    c6:4f:34:11:14:b3:08:d7:8d:23:f4:a0:b7:33:59:
                    9d:98:69:e1:84:5b:8e:e1:82:08:32:47:c0:aa:bf:
                    07:c3:4c:36:45:28:cb:2e:01:8f:98:82:e7:84:5b:
                    3e:34:18:8b:32:29:c5:17:04:ab:2d:45:ae:83:7b:
                    99:18:a9:d7:af:01:01:f9:98:aa:fd:93:fe:f3:3a:
                    a8:e1:c5:fa:1b:22:17:3f:d6:d3:98:df:b9:f0:61:
                    ee:1e:50:7a:27:6a:a7:6c:d9:30:f3:61:6f:de:a9:
                    7c:a1:8e:3c:72:b8:94:72:94:63:aa:a4:40:2e:75:
                    32:7e:ce:06:6b:58:a4:01:bd:de:28:9e:74:87:28:
                    6e:cd:e0:20:73:77:07:cd:4d:7f:9b:e3:11:96:46:
                    4b:05:fc:2a:78:48:42:23:78:ec:59:4e:6d:81:fb:
                    d0:5f:c8:3e:f7:d8:3e:90:a6:a5:70:93:59:67:c1:
                    76:07:be:ca:cd:5f:48:f0:d0:60:1d:99:37:0f:a3:
                    ea:dd:f0:35:f4:56:8f:32:3e:6a:cb:91:9c:77:4d:
                    37:fd:93:99:f9:4d:7f:2c:7b:68:1e:f9:97:27:8f:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:31:0D:CD:5A:80:14:5D:EF:F2:46:9D:DC:50:BE:FA:97:30:4F:4A
            X509v3 Authority Key Identifier:
                keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32332d3234203d3e203538343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:2a:f8:b9:b8:3c:8e:f4:54:57:9b:d0:28:83:3e:6a:4d:a8:
         d4:e0:32:d5:46:8c:1c:d2:15:6c:12:35:cf:f7:f2:02:94:03:
         30:d5:7f:dd:a3:7c:72:a3:2d:e5:13:ba:d7:b3:38:a9:be:67:
         ed:d0:dc:78:e2:ba:3f:1b:13:b6:92:f3:00:c1:2e:49:f5:ae:
         4d:f2:11:09:f8:b5:71:a8:8d:83:eb:95:d1:30:5a:bb:e7:87:
         e8:8c:48:8a:45:7d:96:f2:6f:20:10:4f:da:2f:b8:15:5c:e2:
         5c:3e:b7:16:98:90:10:2a:fa:a2:52:5a:76:91:86:74:e6:63:
         3a:4f:95:bb:d7:cc:7d:07:cf:70:87:c5:8e:09:73:f8:48:7d:
         5f:df:d6:49:14:7a:a7:b0:ca:e2:ae:d7:0b:19:1b:60:19:4a:
         f0:8d:b8:ce:3b:b3:0a:f9:e0:8d:0e:4f:a8:60:cf:6d:2f:e0:
         64:3b:51:e7:3f:fb:98:a3:e6:03:75:46:69:48:4e:22:04:3d:
         0a:ac:e2:93:1d:3b:cc:74:46:01:76:65:9c:b2:2b:ca:6a:fe:
         02:b3:b3:16:1a:2c:fd:66:b3:76:6b:43:8f:b3:4a:43:6c:a7:
         6d:62:ad:91:0b:ea:14:01:87:17:f4:ff:e8:3b:ec:c3:ac:c9:
         b8:74:26:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:01 2026 by rpki-client