Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa
File:                     3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (raw, json)
Hash identifier:          EdEGFXLSGBP0MFU7fBfQCb+Ije/hW5JPZPkjvdhCXtQ=
Subject key identifier:   85:00:E5:8E:4C:A9:02:D5:30:27:9F:D9:3D:2C:C9:FA:C4:4A:06:6E
Certificate issuer:       /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6
Certificate serial:       51C9140A51E71BD11E62B4C1409146EAF0BD9736
Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa
Signing time:             Sun 03 May 2026 02:49:18 +0000
ROA not before:           Sun 03 May 2026 02:44:18 +0000
ROA not after:            Sun 02 May 2027 02:49:18 +0000
asID:                     131735
IP address blocks:        103.231.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl
                          rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c9:14:0a:51:e7:1b:d1:1e:62:b4:c1:40:91:46:ea:f0:bd:97:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6
        Validity
            Not Before: May  3 02:44:18 2026 GMT
            Not After : May  2 02:49:18 2027 GMT
        Subject: CN=8500E58E4CA902D530279FD93D2CC9FAC44A066E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:56:05:2c:28:63:06:72:1d:dd:97:76:df:
                    6f:98:4a:60:4f:77:3a:c0:88:09:b0:41:35:c2:bc:
                    d1:95:3c:8f:97:2d:4e:89:1e:e7:a3:3c:6a:b7:9c:
                    24:08:27:1f:46:02:c9:5f:b8:1b:a3:33:89:b9:96:
                    17:ca:37:e4:d2:b2:09:7a:f4:fd:82:24:1b:ed:3f:
                    82:15:c0:e4:31:b4:91:43:60:bf:36:c0:5e:a2:c8:
                    94:c5:18:6b:7a:22:8e:f2:61:5e:66:47:93:54:03:
                    07:f3:93:36:d5:88:26:88:5f:4c:7b:8b:5a:93:f3:
                    f6:f0:c3:0a:fe:08:d4:1a:8f:9c:88:ef:90:15:f8:
                    15:88:88:a2:5c:19:15:7a:fa:cb:10:fa:36:8c:64:
                    ce:bd:44:45:2b:0e:fb:6c:05:38:eb:bf:e9:6b:7c:
                    20:31:56:b0:5b:6d:ed:09:be:99:3a:1b:57:f5:d9:
                    92:b0:fc:63:76:9b:40:0c:21:d9:db:88:7b:ab:9a:
                    57:6f:a7:d8:24:cb:ce:6d:f2:49:b0:35:94:a9:19:
                    f8:e7:07:74:f8:f1:71:e6:b0:92:65:52:48:84:6c:
                    e6:44:07:f7:f2:10:82:0f:0a:aa:b8:c6:58:a5:3e:
                    ca:11:58:c0:78:3e:59:a1:76:b4:f4:5e:a9:96:3f:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:00:E5:8E:4C:A9:02:D5:30:27:9F:D9:3D:2C:C9:FA:C4:4A:06:6E
            X509v3 Authority Key Identifier:
                keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:e2:f6:47:b3:0c:c4:f6:b7:ca:20:52:dc:7e:f7:5a:72:5c:
         89:4e:6f:d5:45:03:cd:f6:70:5f:8a:95:5f:9a:af:96:a2:90:
         d5:52:ad:fa:20:80:70:c8:77:14:ce:96:88:37:77:19:52:fc:
         9b:8a:c4:11:77:38:5d:0d:77:10:38:06:c9:a8:ba:29:40:82:
         a2:07:9d:f1:a9:6e:1f:ec:bf:a2:d7:71:96:92:b0:71:1e:46:
         de:bf:05:c9:d3:c2:21:a4:4f:76:01:b6:56:5f:2a:02:41:ba:
         f3:18:2e:f9:c8:0b:8e:11:d0:2c:e4:5b:73:fd:08:13:68:61:
         c1:55:15:6c:35:df:e8:06:7e:2d:73:57:f5:f3:d7:50:59:9f:
         40:f0:0a:11:09:8c:7a:12:11:43:dd:49:0a:4a:88:97:94:3e:
         5e:b5:b4:13:cf:d4:e8:c8:f8:2d:10:fb:a2:e7:77:84:84:a1:
         c5:7d:42:f0:04:00:c8:25:d1:71:1f:8a:85:9c:84:d5:74:cc:
         73:bc:8d:21:d5:2a:42:0e:91:5f:35:6d:dd:1c:c0:e7:b2:a3:
         79:a7:97:0f:1c:4c:e4:3c:40:b3:ec:93:8b:5e:47:3f:c0:4d:
         21:a4:69:53:7f:c3:d7:23:d1:ec:d1:63:1a:08:55:ec:62:f0:
         f0:60:a8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:56 2026 by rpki-client