Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa
File:                     3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (raw, json)
Hash identifier:          33Yh92al19b28Gnrtu4qIdUOBoZECAqIchLAQkEaJ/I=
Subject key identifier:   81:D8:C1:D4:28:4C:03:AF:AE:4B:C9:6B:08:3D:CF:3E:2E:AD:76:E6
Certificate issuer:       /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
Certificate serial:       52D46A6F59575731C89EB3B3EE5D83F8003FA224
Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa
Signing time:             Sun 03 May 2026 02:49:16 +0000
ROA not before:           Sun 03 May 2026 02:44:16 +0000
ROA not after:            Sun 02 May 2027 02:49:16 +0000
asID:                     138113
IP address blocks:        103.126.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl
                          rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d4:6a:6f:59:57:57:31:c8:9e:b3:b3:ee:5d:83:f8:00:3f:a2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
        Validity
            Not Before: May  3 02:44:16 2026 GMT
            Not After : May  2 02:49:16 2027 GMT
        Subject: CN=81D8C1D4284C03AFAE4BC96B083DCF3E2EAD76E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:70:37:03:38:e9:03:23:75:db:b8:c1:50:
                    60:e0:d8:eb:fd:87:cd:5a:a1:55:be:05:4e:f4:df:
                    0f:21:17:67:42:d2:15:3a:f4:5f:df:c5:e8:5c:0e:
                    77:2a:4d:0d:23:50:90:67:d8:3c:92:8e:a7:83:fa:
                    df:95:44:c7:a8:f1:11:40:61:eb:72:3b:c2:96:2e:
                    eb:38:40:5b:ea:3a:a8:c6:10:9f:49:21:fc:dd:48:
                    2d:b1:c7:a7:27:50:2d:89:56:6e:58:b4:3a:ad:87:
                    75:ab:66:5d:2b:70:06:f4:e6:19:cd:40:21:fe:db:
                    f1:d7:f7:13:04:28:bb:1f:98:5f:92:c8:ab:f8:86:
                    28:3e:01:b2:fd:81:f7:56:2d:9d:34:9c:35:9f:ca:
                    14:a2:a4:68:61:83:fb:b8:a2:01:b7:f9:03:d4:a8:
                    f8:6a:a2:0e:a2:f8:c2:53:2d:15:ce:ec:3a:f9:2d:
                    17:73:25:70:ab:40:1e:7f:0a:2d:18:31:66:ea:15:
                    83:64:38:d1:73:f2:05:bb:51:32:6f:3f:4e:e3:f4:
                    39:5c:ec:62:1e:ab:5f:63:81:a8:97:44:12:de:aa:
                    87:b8:b7:62:5e:92:7c:f8:73:e3:a2:c6:e5:4a:bf:
                    85:07:63:a0:bd:4e:9f:99:1d:ed:a2:82:ab:f2:e7:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D8:C1:D4:28:4C:03:AF:AE:4B:C9:6B:08:3D:CF:3E:2E:AD:76:E6
            X509v3 Authority Key Identifier:
                keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:e6:8f:92:f9:b6:dd:98:1c:37:7d:a9:2b:5d:29:82:33:7f:
         42:50:f9:bd:0f:d2:68:57:90:aa:18:2c:78:50:30:1a:2c:89:
         be:c9:1c:36:02:90:d6:c1:c1:d5:50:06:b3:68:ea:ca:b3:7c:
         50:26:e8:79:4b:fe:f8:ad:e8:9d:c7:eb:55:0d:da:ca:ea:9d:
         c7:8e:a5:6e:f1:df:58:4c:c8:41:7d:35:d7:48:9d:fb:74:54:
         2c:b9:56:ad:43:f3:f4:81:a7:cd:c6:f7:14:85:e9:46:fa:9e:
         d5:1d:d2:5f:37:fb:ec:80:41:0a:dd:8a:e4:d4:40:24:85:12:
         34:60:47:5b:37:5b:2e:59:65:0b:10:e6:13:fe:65:3f:90:d1:
         15:f4:e1:61:f9:25:f6:a6:57:50:49:66:11:41:3c:d4:24:ab:
         36:55:1c:7a:4a:af:02:c1:35:da:6c:51:e7:33:83:33:d1:45:
         ac:9b:79:c7:29:5b:2e:0d:0f:26:8f:be:16:88:62:e3:88:b3:
         90:e1:c4:cc:7a:88:d8:d7:41:32:1f:9d:11:18:ee:7b:61:0d:
         14:26:d6:6d:2c:d5:f6:0a:a8:57:cb:0a:70:6c:6e:a0:8e:4d:
         39:af:f8:b5:69:f6:7d:42:7b:79:4f:e7:35:5b:cb:1e:18:53:
         49:64:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:45 2026 by rpki-client