Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa
File:                     3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (raw, json)
Hash identifier:          0qSPCAZrOfi5Y9XILy5crgt/ktdpcPhlsL8t7vKQnzI=
Subject key identifier:   C4:58:51:23:D0:50:C5:6D:DD:88:4B:6D:5F:B8:7E:D7:DA:9E:4C:FB
Certificate issuer:       /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Certificate serial:       6E301F7AAF5A3E9191C283E2F0B3E4A442939A46
Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa
Signing time:             Sun 03 May 2026 03:00:28 +0000
ROA not before:           Sun 03 May 2026 02:55:28 +0000
ROA not after:            Sun 02 May 2027 03:00:28 +0000
asID:                     138884
IP address blocks:        103.138.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
                          rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:30:1f:7a:af:5a:3e:91:91:c2:83:e2:f0:b3:e4:a4:42:93:9a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
        Validity
            Not Before: May  3 02:55:28 2026 GMT
            Not After : May  2 03:00:28 2027 GMT
        Subject: CN=C4585123D050C56DDD884B6D5FB87ED7DA9E4CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:e0:a9:21:92:9a:db:e0:ec:57:13:8e:79:
                    09:8a:9b:fb:c7:9d:ee:08:32:3d:11:5c:5b:93:3b:
                    c4:05:c8:75:87:13:67:04:0c:69:73:36:a5:ef:64:
                    d7:73:52:8b:a2:cc:3f:98:d5:04:a4:70:52:05:ee:
                    01:3c:74:1c:0c:0c:08:85:2a:49:a3:7d:46:80:7f:
                    f1:a5:2c:ae:d6:d0:44:1f:03:39:b8:6d:ca:8d:f3:
                    c2:6b:a6:52:ba:9d:e5:b7:9e:d4:c7:ea:20:15:f9:
                    ec:cc:4a:5e:d5:73:85:eb:42:9e:56:d7:72:7a:e8:
                    cd:72:c4:4d:77:dc:7f:1e:9b:31:f2:0b:27:a8:d9:
                    92:77:f8:d0:0b:2f:f7:7c:c2:b8:05:92:22:f6:3b:
                    be:8c:7e:cf:e3:db:30:7d:1c:d7:6c:d5:87:fa:3c:
                    a5:1a:f1:23:d2:cb:3c:68:79:d2:3f:94:6b:9b:9e:
                    51:60:18:d5:c2:de:c5:c9:37:d3:86:c2:0a:93:db:
                    8d:d4:14:cb:1b:f0:f6:c6:44:bc:1a:33:7a:f8:13:
                    ff:62:f5:9e:49:50:e9:77:e4:d8:89:a5:91:8e:22:
                    5f:b2:e4:65:a0:09:80:75:1c:12:b5:e3:4b:fb:5b:
                    a4:43:c3:87:e4:fa:1b:36:0b:59:d2:2e:88:e8:8d:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:51:23:D0:50:C5:6D:DD:88:4B:6D:5F:B8:7E:D7:DA:9E:4C:FB
            X509v3 Authority Key Identifier:
                keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:11:de:99:fe:fb:3a:42:12:28:8e:7d:80:dd:61:99:60:bd:
         e5:5f:73:9e:3e:87:98:d2:f1:f4:ad:a9:49:f0:ca:2e:e7:41:
         b5:e3:c7:00:6b:ae:34:a8:0a:b5:2d:b2:f9:3f:ea:11:35:27:
         d7:59:3d:77:84:8d:42:7c:c8:48:cc:89:09:c2:ff:93:e7:27:
         a1:12:9d:c8:12:66:7d:ea:0f:51:c6:4f:f5:d0:8e:f6:6c:2b:
         05:4a:28:f8:1d:70:f3:9f:d1:8f:5e:60:7b:ae:75:6d:6d:db:
         3f:d3:b1:c8:0f:5f:b5:ae:74:1e:7b:1b:7d:87:5f:4a:75:64:
         d4:ab:7e:73:cd:4b:b8:48:09:9d:9c:c5:17:cc:59:5b:43:53:
         23:2e:ed:29:4d:a9:ac:c2:49:fe:c6:27:25:80:8f:76:70:e0:
         3a:bc:4c:ba:4c:31:8c:07:58:17:45:c3:29:ef:e9:57:5d:ee:
         95:9e:e4:79:fc:0a:65:41:ba:5f:57:a3:83:11:7d:85:a8:ec:
         f6:ef:dd:6c:e2:05:08:5d:15:bb:ec:a2:07:ab:40:d7:b6:d4:
         c1:99:e4:f9:7c:ba:ac:8e:04:e5:e3:40:09:65:44:2b:52:cb:
         34:02:1d:97:5f:71:bb:d4:03:cc:61:e2:d8:f8:29:bc:6e:ee:
         95:ff:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:02 2026 by rpki-client