Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa
File:                     3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (raw, json)
Hash identifier:          Tl47NYhV7p3ilyhNqNo+NuftHesBi3flI0jGsgT+BAM=
Subject key identifier:   C5:7D:5B:44:6F:45:06:1A:8A:5C:31:11:CE:43:61:E9:FB:95:AC:42
Certificate issuer:       /CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8
Certificate serial:       31F7D68E9141F3D610C6FB7DF07D49B410202B0F
Authority key identifier: D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa
Signing time:             Sun 03 May 2026 02:59:12 +0000
ROA not before:           Sun 03 May 2026 02:54:12 +0000
ROA not after:            Sun 02 May 2027 02:59:12 +0000
asID:                     139440
IP address blocks:        103.145.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl
                          rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f7:d6:8e:91:41:f3:d6:10:c6:fb:7d:f0:7d:49:b4:10:20:2b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8
        Validity
            Not Before: May  3 02:54:12 2026 GMT
            Not After : May  2 02:59:12 2027 GMT
        Subject: CN=C57D5B446F45061A8A5C3111CE4361E9FB95AC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:47:c4:26:5d:52:e4:a8:f5:c4:5e:59:50:
                    d6:f9:69:c6:1b:ca:31:86:2b:74:ac:df:4f:82:af:
                    fc:d0:e7:0c:8e:1c:ef:54:b1:80:1c:8f:b6:5a:b6:
                    da:d9:86:32:f4:f5:bd:6c:93:ad:69:20:0b:26:e3:
                    d7:3d:f8:bc:9e:17:36:93:0c:45:0f:24:59:9b:87:
                    88:f8:62:37:ec:7d:a5:7b:b3:8b:97:b3:ed:cf:f4:
                    4a:90:fa:37:d1:b2:9c:95:84:44:b7:f3:fd:a5:82:
                    be:ca:2b:ce:10:1f:c5:d6:af:75:bc:50:a5:fe:ad:
                    b6:7e:ad:d6:e8:cf:95:85:2a:90:3f:06:3b:d8:1a:
                    ae:24:6d:17:c3:d1:3a:6e:ae:01:4a:5d:9d:cb:4b:
                    24:93:37:a9:09:f7:11:dd:0d:32:7b:56:c4:54:8e:
                    77:c3:08:33:5e:e3:70:07:25:2f:5f:fd:ba:2f:da:
                    e5:5a:c1:91:45:45:da:68:d6:0f:21:c9:e3:92:ec:
                    a9:98:b1:0e:be:ea:d4:31:31:92:7b:b6:66:c4:be:
                    de:60:59:59:77:83:bf:8d:bf:df:d5:ea:e6:6c:68:
                    c5:38:3b:c4:99:1d:bd:83:ea:14:9e:56:23:f7:28:
                    ab:1f:7e:5e:97:56:fe:50:00:92:dd:1c:ca:3a:0f:
                    21:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7D:5B:44:6F:45:06:1A:8A:5C:31:11:CE:43:61:E9:FB:95:AC:42
            X509v3 Authority Key Identifier:
                keyid:D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:9e:05:30:7e:d6:8c:ef:de:68:f8:ef:60:f9:88:1f:22:e4:
         ec:b5:27:3c:db:a9:8e:0d:86:eb:29:4d:5e:d7:48:97:3a:b8:
         fb:b2:3d:ef:ce:95:bd:96:a1:5d:a4:1e:f7:be:08:09:3d:25:
         57:46:ae:7b:e8:7a:52:79:fa:4a:f5:7a:89:8f:bd:c3:d6:d3:
         11:a0:34:25:cc:ca:28:94:f0:1c:6d:7c:76:2a:46:80:f1:9f:
         8d:96:53:23:d8:cc:55:6c:78:33:6e:9d:07:9b:af:91:f8:29:
         81:ca:cb:38:f4:6f:34:75:86:f6:c0:c3:d3:48:ff:25:0f:1d:
         e9:32:07:46:29:84:7b:88:6e:0f:59:bf:82:ab:dc:37:34:3f:
         f3:50:e0:5b:96:34:e5:54:b3:64:ab:4e:25:59:ec:aa:7d:4a:
         4d:fb:3f:83:e1:88:bb:d6:d8:5a:f6:9d:1d:a5:95:03:79:c0:
         c9:fe:b0:90:20:84:4a:3d:eb:df:09:85:f6:d3:30:e7:a1:10:
         3d:ce:1b:1d:9c:c6:3e:47:2a:10:43:4f:e9:f4:23:2c:36:c8:
         65:21:d8:7c:9e:65:c2:9d:25:d6:7a:4e:81:f3:ac:e5:11:91:
         ac:5c:4d:20:9a:43:b5:b1:da:fe:38:fc:3c:ca:69:9e:f4:c6:
         fc:0e:41:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:31 2026 by rpki-client