Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa
File:                     3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (raw, json)
Hash identifier:          whFYG+jTb2gWlU4tXTKDvr8VOmh33B5+fTwOyqIk0yw=
Subject key identifier:   0F:21:19:22:2E:C7:74:87:2D:2A:1E:8F:0B:7B:CD:0C:7B:2A:C3:AC
Certificate issuer:       /CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17
Certificate serial:       67A4D341D22F76CAF4CEFFB30C42F4681AAB4C56
Authority key identifier: D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa
Signing time:             Sun 03 May 2026 03:00:43 +0000
ROA not before:           Sun 03 May 2026 02:55:43 +0000
ROA not after:            Sun 02 May 2027 03:00:43 +0000
asID:                     149930
IP address blocks:        103.191.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl
                          rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a4:d3:41:d2:2f:76:ca:f4:ce:ff:b3:0c:42:f4:68:1a:ab:4c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17
        Validity
            Not Before: May  3 02:55:43 2026 GMT
            Not After : May  2 03:00:43 2027 GMT
        Subject: CN=0F2119222EC774872D2A1E8F0B7BCD0C7B2AC3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:41:96:16:76:1f:68:95:44:b8:fe:15:1d:
                    c8:ad:f8:3e:50:a4:1e:40:75:83:47:3e:b4:fe:80:
                    00:fe:79:ee:d5:65:30:f2:7f:9f:1c:e5:5f:36:bf:
                    ad:f7:cf:15:76:c7:6a:48:39:01:fb:aa:1b:b2:96:
                    7d:cb:41:7b:a9:57:36:1e:7f:82:1b:c4:d2:ea:f7:
                    4c:3b:f5:e0:b1:62:46:4c:d7:1c:14:ac:16:97:7a:
                    aa:97:89:21:52:48:62:a4:d8:d6:7c:bc:a4:1e:cf:
                    cd:02:e6:4b:4d:55:51:a0:32:06:f0:0b:bf:5b:d4:
                    e7:a9:7f:3c:1b:13:2d:a5:eb:11:54:c5:29:af:c2:
                    d2:0e:f5:52:9a:7e:92:11:77:4e:06:00:47:36:fb:
                    6e:31:c0:84:2c:87:60:c1:52:e5:67:06:3a:0e:90:
                    ef:98:cd:24:84:fc:b7:79:ec:49:a7:84:b5:c7:c5:
                    35:6e:4f:59:7d:19:d2:6b:18:f4:4b:fa:68:ba:63:
                    59:c9:e7:b3:a9:97:00:98:07:b6:60:a7:3b:bf:2b:
                    48:54:54:df:94:65:02:c2:ac:f1:30:b6:fe:bd:a4:
                    0c:3a:00:33:34:0f:1f:ec:48:dd:90:e2:ba:33:1c:
                    fa:43:f4:f9:a4:4b:7e:a0:c1:73:7a:5f:7c:a3:8f:
                    f6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:21:19:22:2E:C7:74:87:2D:2A:1E:8F:0B:7B:CD:0C:7B:2A:C3:AC
            X509v3 Authority Key Identifier:
                keyid:D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:b5:a2:76:8f:8a:f3:32:b5:39:dd:7b:f9:a3:f5:36:e5:65:
         1c:2e:06:93:9e:01:1d:72:6d:90:3d:e3:5b:ad:1f:87:b0:af:
         b7:ed:5e:cb:92:e1:b1:da:b9:7c:84:34:2e:ed:a1:49:b0:41:
         7b:9f:ce:23:8b:7a:9a:65:c4:bd:dd:21:48:c6:88:87:fa:ba:
         15:84:de:67:1e:c5:54:74:a8:50:51:05:c5:2a:8f:5b:52:52:
         dd:d3:45:08:7e:43:6c:a8:7a:c6:e0:70:e5:fa:83:33:9c:2e:
         08:cb:23:26:d2:96:29:01:8c:04:9e:27:aa:dd:6e:a0:73:3d:
         72:ed:42:aa:78:dd:5c:4c:37:2d:6d:86:e8:07:3a:c4:69:59:
         7b:b2:87:b2:66:d3:4d:90:2d:85:56:84:7d:eb:16:40:49:50:
         e8:b9:d0:b3:ee:f6:52:bc:b5:a8:60:4b:7a:7d:90:f8:fe:f7:
         05:63:d6:6f:b5:a2:bd:84:c5:22:40:0a:c2:09:2f:2b:41:6a:
         a8:25:48:1a:79:fb:aa:12:75:1b:3d:7d:14:b3:b3:78:cd:c3:
         78:87:93:50:34:66:dd:6f:6a:94:57:de:d0:5c:79:c2:50:75:
         c5:5e:03:b6:76:71:61:c6:9a:f9:ca:17:da:9c:23:39:66:2d:
         21:3d:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:49 2026 by rpki-client