Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32332d3233203d3e203633383632.roa
File:                     3130332e34392e32382e302f32332d3233203d3e203633383632.roa (raw, json)
Hash identifier:          00W7ni+GkGcQM0VVSCT1HddEcXw1sIY406K+a7D7bz4=
Subject key identifier:   26:9B:83:B5:6D:91:00:CC:EF:6F:A6:CF:07:2D:81:F3:65:6D:FB:7D
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       566A55AEDE81623127DFE26CA51E3820B0A08E5B
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32332d3233203d3e203633383632.roa
Signing time:             Sun 03 May 2026 02:48:46 +0000
ROA not before:           Sun 03 May 2026 02:43:46 +0000
ROA not after:            Sun 02 May 2027 02:48:46 +0000
asID:                     63862
IP address blocks:        103.49.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6a:55:ae:de:81:62:31:27:df:e2:6c:a5:1e:38:20:b0:a0:8e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: May  3 02:43:46 2026 GMT
            Not After : May  2 02:48:46 2027 GMT
        Subject: CN=269B83B56D9100CCEF6FA6CF072D81F3656DFB7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:d0:09:b2:41:2c:ef:39:09:cd:29:f7:41:
                    eb:9d:d4:a7:37:8c:5d:0b:c0:6b:ae:15:37:31:e3:
                    3c:fb:9a:f7:3b:44:d9:ab:2e:5f:15:13:e8:6b:dc:
                    79:af:8b:7b:96:5d:06:a1:dc:3d:eb:fc:69:ee:82:
                    af:c4:a9:a7:16:a7:dc:43:38:4a:fb:bf:4d:a8:77:
                    91:c3:9e:6b:a1:06:16:38:db:d0:44:20:d0:0f:10:
                    21:d4:a5:fe:78:82:20:57:08:30:fd:db:85:35:4a:
                    ad:cc:89:36:b4:95:58:5b:54:40:6c:b0:d0:6a:eb:
                    49:fc:53:2d:e0:23:2c:84:b2:1a:e5:c4:38:e3:6a:
                    2a:4b:3d:b4:55:2e:8d:ff:8e:ae:4c:db:1f:e8:43:
                    bb:a5:46:24:a5:12:c3:21:f7:af:fb:21:ad:89:df:
                    3b:2a:39:3f:06:b8:53:82:d8:11:e0:63:66:a3:7d:
                    db:16:c5:d3:d1:4b:56:97:c0:04:73:d0:ad:bf:b1:
                    ad:02:c0:c8:e9:6a:91:b1:3f:be:ce:33:6f:3e:2f:
                    d5:5b:16:43:cf:bb:af:0b:85:7c:02:90:d1:55:1d:
                    eb:29:8e:e5:b6:43:aa:db:17:bb:41:37:04:3b:56:
                    2d:0b:3a:ee:69:0b:0a:24:7f:ef:e8:84:c8:4b:03:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:83:B5:6D:91:00:CC:EF:6F:A6:CF:07:2D:81:F3:65:6D:FB:7D
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32332d3233203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:1d:db:94:9a:d8:69:ea:98:16:a7:80:2f:19:e0:ec:a6:52:
         74:2d:ba:8a:3a:3e:ce:97:ee:d7:70:c8:2a:c6:23:3f:bd:02:
         71:5a:ee:b9:ef:f2:96:67:ed:9f:df:86:e8:43:fd:1a:72:c0:
         bd:76:76:39:8b:86:6a:2f:a6:3e:7f:e5:61:1e:ad:ec:1f:bc:
         da:80:84:71:8f:cd:4b:1d:7a:87:eb:c1:f4:92:08:49:48:43:
         2c:01:25:5a:a8:2a:fb:2e:d5:af:4c:f3:07:9f:10:36:c7:b1:
         28:d4:6a:74:d4:4d:12:e7:27:a6:fb:d4:e8:4e:9e:23:d5:04:
         fa:eb:86:f0:70:59:ad:34:98:96:75:72:64:b5:6b:cb:07:29:
         e5:36:43:67:01:52:ec:a5:6f:ca:32:7b:38:0f:ed:ef:f6:51:
         cc:86:6f:50:dc:f4:49:82:04:3e:de:75:fd:c1:76:eb:e3:80:
         68:71:21:16:77:64:09:38:49:15:f2:82:de:7f:fc:5e:4c:12:
         11:5e:f5:00:4c:f7:d3:77:62:c1:85:3d:6b:63:40:63:b6:30:
         e5:69:3b:2b:40:e9:0b:67:2c:fe:72:00:d7:35:a7:6f:9d:0d:
         ce:10:4d:c2:c9:10:a7:b0:62:ff:c5:be:27:6a:fe:f5:7b:fe:
         04:7a:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:35 2026 by rpki-client