Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa
File:                     3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (raw, json)
Hash identifier:          VuUTV6DF0NO0ScLbFc6eylw+nle2kUmBZXnxVkFv7U0=
Subject key identifier:   67:EA:01:C3:FF:17:6A:8B:9A:75:2B:B1:F9:F8:CE:4F:C6:8F:60:92
Certificate issuer:       /CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81
Certificate serial:       23B876541613D102F59F31B7A0A5B076C08EE841
Authority key identifier: A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa
Signing time:             Sun 03 May 2026 02:58:17 +0000
ROA not before:           Sun 03 May 2026 02:53:17 +0000
ROA not after:            Sun 02 May 2027 02:58:17 +0000
asID:                     139427
IP address blocks:        103.144.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl
                          rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b8:76:54:16:13:d1:02:f5:9f:31:b7:a0:a5:b0:76:c0:8e:e8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81
        Validity
            Not Before: May  3 02:53:17 2026 GMT
            Not After : May  2 02:58:17 2027 GMT
        Subject: CN=67EA01C3FF176A8B9A752BB1F9F8CE4FC68F6092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2f:22:9e:b4:2f:ff:5e:30:ce:a6:9a:7e:db:
                    a8:43:98:5d:aa:a4:d6:24:9b:4f:5b:ab:0d:0d:52:
                    dd:26:e8:fb:5b:9b:81:b7:e5:05:dd:a2:78:34:64:
                    51:f1:44:d8:4a:db:fc:3c:47:2a:46:9a:08:30:23:
                    ed:50:13:94:0b:81:5f:5f:07:36:87:84:3c:48:e4:
                    78:22:40:45:1e:79:7f:2e:70:0e:1a:93:f4:68:02:
                    a6:77:9d:67:55:ab:f5:f3:ef:2a:ce:5f:69:2c:ea:
                    e0:b1:ae:36:2f:31:7f:d0:cb:b6:84:f4:db:5f:d3:
                    f8:10:58:b3:bd:1a:8d:31:2e:ea:31:58:96:7a:83:
                    43:6d:2f:16:5a:6e:e8:1a:1c:8f:b0:c6:4e:b6:df:
                    f5:71:91:46:ce:2d:a7:4b:b1:a8:20:60:36:af:59:
                    e4:0e:46:41:e7:95:42:3c:37:3c:94:4c:05:a1:21:
                    cd:d6:e0:54:06:db:94:60:b2:fa:43:3d:1a:f3:02:
                    ae:48:48:97:eb:14:1c:e1:92:85:bb:c4:e3:48:3d:
                    a6:c7:ee:90:0c:69:35:2a:bb:e4:5f:2f:03:61:6a:
                    91:de:68:21:32:e6:3d:0b:c8:59:6f:e7:7a:11:4b:
                    7d:67:2d:a7:eb:f0:a2:ec:27:05:3e:e0:ab:15:37:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EA:01:C3:FF:17:6A:8B:9A:75:2B:B1:F9:F8:CE:4F:C6:8F:60:92
            X509v3 Authority Key Identifier:
                keyid:A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:8d:6b:59:39:35:42:39:bd:b2:4f:d0:9a:4a:3c:e8:fb:94:
         2b:bf:ea:3c:0c:02:be:84:b6:61:3c:0b:2c:f6:84:5c:82:96:
         6e:79:50:99:f7:00:bc:3e:cf:ec:1d:5e:31:3c:5c:37:75:ce:
         9e:44:67:59:ed:b9:95:f0:91:21:da:37:62:bd:1c:85:19:ea:
         3f:3f:64:77:d0:71:15:8b:cc:f3:2e:27:23:77:9f:a5:19:2c:
         d1:4b:e0:08:f4:53:76:92:5e:c9:7b:59:a6:5b:d0:51:09:c3:
         ee:a1:3c:28:1a:96:0a:bc:f0:01:9e:8c:80:3f:c4:60:0a:dd:
         b0:a8:50:78:d3:0b:00:00:51:dd:25:ee:c3:fe:48:20:b6:1e:
         a1:88:ff:b4:78:86:cd:d5:ee:5f:be:f2:6f:45:76:04:36:b7:
         27:a3:2a:f6:03:82:2e:99:4f:2a:73:aa:62:f8:93:f5:69:73:
         96:bf:61:23:42:5c:7a:d1:ca:d4:36:e3:1e:8a:1e:25:1c:05:
         9c:db:91:1d:ec:8e:37:d8:74:25:a0:59:3e:57:36:88:aa:d7:
         53:51:e7:e4:95:3e:69:df:46:3a:eb:ca:24:52:56:99:29:59:
         1a:44:4a:5c:50:1e:de:3a:3b:69:4e:80:6b:0a:fd:a2:54:96:
         54:31:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:47 2026 by rpki-client