Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e32332e3230302e302f32322d3234203d3e203435323837.roa
File:                     3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (raw, json)
Hash identifier:          8HqeGnG6uWiDbhlaJ6tLdsHXeZ7XmeYJjtOP51aVtq4=
Subject key identifier:   E6:4F:F9:B3:54:2B:81:9A:35:BE:B7:57:58:E5:D4:D4:4F:5A:5A:61
Certificate issuer:       /CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
Certificate serial:       3FF7D6D8075F9DD4ADEE9B7CA38FC7769A490CA3
Authority key identifier: 19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e32332e3230302e302f32322d3234203d3e203435323837.roa
Signing time:             Sun 03 May 2026 02:53:27 +0000
ROA not before:           Sun 03 May 2026 02:48:27 +0000
ROA not after:            Sun 02 May 2027 02:53:27 +0000
asID:                     45287
IP address blocks:        103.23.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl
                          rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f7:d6:d8:07:5f:9d:d4:ad:ee:9b:7c:a3:8f:c7:76:9a:49:0c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
        Validity
            Not Before: May  3 02:48:27 2026 GMT
            Not After : May  2 02:53:27 2027 GMT
        Subject: CN=E64FF9B3542B819A35BEB75758E5D4D44F5A5A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:11:73:18:b3:d4:6e:de:d0:8f:af:77:07:
                    fe:89:2b:b2:24:a3:f8:ea:3b:31:37:34:76:ac:ba:
                    fa:ff:fa:4d:51:30:b1:25:23:55:70:a4:a4:8a:18:
                    01:92:a7:07:7a:69:4c:ca:fd:02:77:03:23:43:48:
                    c0:25:a1:56:e9:dd:26:4b:ff:c9:16:42:29:86:d7:
                    a0:e4:3b:bf:2c:44:68:7d:fa:5f:f4:37:30:8f:c8:
                    b4:e1:e2:9e:db:3f:4c:f6:ee:b1:b1:f5:05:9e:35:
                    7a:44:e5:84:6a:4b:a6:45:cb:a4:23:9c:bd:31:50:
                    04:fc:a8:70:ff:ed:41:6e:ab:9e:5c:8f:ba:75:87:
                    7a:64:6a:2e:02:2a:ee:5c:ba:0a:eb:e0:ab:29:de:
                    ac:16:b3:05:95:7e:f3:a6:5a:e4:75:cc:d7:c1:dd:
                    64:2a:80:c3:10:00:e4:d3:69:28:3c:39:36:95:0c:
                    1a:c8:e2:96:00:b3:6a:76:07:7f:a9:2b:87:07:98:
                    ba:7d:ad:8e:07:5b:c2:23:23:28:8d:cc:ef:cc:3b:
                    67:52:e0:f8:08:9b:b9:fc:48:51:6e:25:aa:b6:1c:
                    1a:ef:13:d7:6e:80:b5:9a:dc:f4:6c:a1:d2:34:f3:
                    0d:6c:89:43:03:91:ab:9f:18:0f:7d:84:96:39:38:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4F:F9:B3:54:2B:81:9A:35:BE:B7:57:58:E5:D4:D4:4F:5A:5A:61
            X509v3 Authority Key Identifier:
                keyid:19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e32332e3230302e302f32322d3234203d3e203435323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:41:f6:db:3e:d4:17:19:ce:c7:7d:01:04:cd:69:c5:1e:7a:
         56:de:25:ce:5b:b3:cd:00:91:f7:4d:60:5f:55:71:12:9f:dd:
         ca:c9:9c:80:ef:55:9e:92:79:53:e7:aa:1e:5b:d5:f3:79:e8:
         df:9c:b9:5a:47:49:4a:27:e1:e5:4b:58:95:8b:e7:dd:71:1a:
         5e:a3:52:e8:a9:5e:2c:e0:5c:40:7e:f9:4b:49:ae:e9:2f:54:
         33:21:13:51:8a:df:a8:d9:52:82:c2:73:0b:f5:8e:d0:7f:0f:
         31:f7:ec:fb:fc:7c:ff:49:d8:04:fc:27:4b:ef:59:fb:07:97:
         84:b8:18:24:13:ed:19:16:38:db:19:a4:02:c4:4c:5f:1a:37:
         64:d6:27:83:4b:d0:ad:fd:6a:6e:a3:f3:3e:06:d4:3a:8e:01:
         cb:33:05:91:2e:86:99:40:be:6e:d5:3a:72:97:54:b8:aa:c7:
         d4:1e:bc:db:e2:98:d7:f0:24:8b:95:ab:13:fc:e2:70:4c:0f:
         43:88:65:ca:3e:46:6e:6f:a8:19:d6:9d:db:67:e6:ce:8c:3d:
         65:05:c8:68:5a:40:f5:c3:5c:a2:de:e8:82:8a:65:1d:12:76:
         80:3c:87:2d:a1:88:66:7d:a7:5e:47:fd:ba:07:be:0a:0e:b5:
         b3:b2:92:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:20 2026 by rpki-client