Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa
File:                     3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (raw, json)
Hash identifier:          CaMXRMHtTH2oaHCEUbRaStzEXt0odxZTYz16ElrcZ6M=
Subject key identifier:   DC:70:3C:25:C4:76:CD:B0:59:8E:99:1C:F5:DA:BD:8F:9D:4E:1B:D6
Certificate issuer:       /CN=9541F7A7495AA8918A6FE15016CB396EF2733922
Certificate serial:       1409700D45BA09AACFB838EA1FF3D4BA9E1143C8
Authority key identifier: 95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa
Signing time:             Sun 03 May 2026 02:49:52 +0000
ROA not before:           Sun 03 May 2026 02:44:52 +0000
ROA not after:            Sun 02 May 2027 02:49:52 +0000
asID:                     24523
IP address blocks:        103.22.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl
                          rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:09:70:0d:45:ba:09:aa:cf:b8:38:ea:1f:f3:d4:ba:9e:11:43:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9541F7A7495AA8918A6FE15016CB396EF2733922
        Validity
            Not Before: May  3 02:44:52 2026 GMT
            Not After : May  2 02:49:52 2027 GMT
        Subject: CN=DC703C25C476CDB0598E991CF5DABD8F9D4E1BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:36:06:30:a8:08:41:e0:8c:23:85:c5:0e:
                    03:26:09:c2:0d:4e:f7:b0:21:95:93:42:a6:be:6e:
                    77:09:21:be:bc:69:e5:0c:90:e2:43:3e:ba:0e:4a:
                    bd:78:99:16:87:a3:2c:3e:d5:4d:3e:8d:20:fe:ef:
                    4b:25:8d:fa:a0:e5:83:d8:2a:49:01:a9:19:f0:7b:
                    1b:e6:89:fb:7c:ea:1e:86:2f:24:b2:ec:fc:3d:d1:
                    d8:65:f7:87:4f:36:f7:87:ff:2e:e9:07:86:8e:e1:
                    a6:7d:42:c2:0a:0f:7a:70:59:0f:1d:63:04:fe:ce:
                    47:ce:0b:59:ae:65:ab:43:c5:7c:34:fe:a9:6e:cb:
                    8f:4a:22:ec:9c:fe:cf:8f:7e:9d:31:6f:70:c7:3e:
                    3f:02:04:50:20:23:ef:c5:61:bc:5f:59:d8:35:fa:
                    23:1b:2f:e1:7c:cd:46:31:ee:66:03:39:75:fe:ef:
                    b6:5b:95:29:8a:62:61:b8:eb:e3:e0:74:a5:bf:17:
                    cf:1a:e3:bc:e1:aa:c4:d2:a3:de:f5:5b:f5:31:f7:
                    07:c4:66:9f:9b:35:10:b8:b2:a0:c2:e5:e7:d9:10:
                    c8:b2:e6:f9:a4:8d:89:9b:35:5c:4f:60:ff:0c:b7:
                    2d:fa:4a:23:12:87:14:93:9e:45:2c:40:50:f4:af:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:70:3C:25:C4:76:CD:B0:59:8E:99:1C:F5:DA:BD:8F:9D:4E:1B:D6
            X509v3 Authority Key Identifier:
                keyid:95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:69:4c:80:5c:8e:3f:63:ff:5d:f3:2c:b9:20:ce:60:19:18:
         01:ab:1d:7b:4f:cf:29:ee:cd:74:3f:bb:ac:98:81:8a:6f:c6:
         a2:9b:61:5a:86:e5:21:b9:1b:b5:dd:39:92:48:30:23:e8:1d:
         66:7e:00:3d:01:bc:a9:13:01:04:48:a6:2c:fa:ca:0e:f5:2c:
         5b:1c:f4:02:05:04:14:20:a3:c4:aa:3d:60:bb:f3:da:b1:ef:
         2e:5b:80:69:1d:a0:58:d1:cc:b7:08:58:fe:ea:da:1c:09:e7:
         65:2e:ee:d5:1f:8d:cd:21:20:14:61:91:16:14:07:2d:fe:24:
         7b:17:18:5a:3d:9b:26:f7:96:92:bf:de:1b:8e:5a:9c:d5:ff:
         37:55:89:da:76:5c:b0:fd:6f:59:d3:6f:73:39:e0:8b:56:31:
         55:1e:02:cc:69:af:8a:27:e0:3e:11:5c:4d:52:bd:39:c4:80:
         a8:80:d5:1c:67:0b:17:d8:17:74:a2:40:7f:6f:b6:9b:7f:fb:
         88:b2:4f:ac:5d:36:8a:50:3b:35:da:bd:44:94:b9:65:65:82:
         85:1d:3c:86:5c:1f:bb:a6:de:71:88:d0:9d:6a:32:c5:b7:e0:
         be:57:12:45:53:da:8e:76:4c:f5:b2:06:b2:13:2f:90:38:05:
         fe:18:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:28 2026 by rpki-client