Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32332d3233203d3e20313335343435.roa
File:                     3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (raw, json)
Hash identifier:          JI1QrINQKw3fjadw40FIbP+TVzkcpzaoVCD4jvQ/h04=
Subject key identifier:   BB:35:2C:EE:61:E2:C4:C3:4C:B1:A2:82:7E:FC:65:6A:0C:32:B2:D5
Certificate issuer:       /CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB
Certificate serial:       7FE31032220DD5331B30D243AB6E663D7A395362
Authority key identifier: E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32332d3233203d3e20313335343435.roa
Signing time:             Sun 03 May 2026 03:01:46 +0000
ROA not before:           Sun 03 May 2026 02:56:46 +0000
ROA not after:            Sun 02 May 2027 03:01:46 +0000
asID:                     135445
IP address blocks:        103.223.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl
                          rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e3:10:32:22:0d:d5:33:1b:30:d2:43:ab:6e:66:3d:7a:39:53:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB
        Validity
            Not Before: May  3 02:56:46 2026 GMT
            Not After : May  2 03:01:46 2027 GMT
        Subject: CN=BB352CEE61E2C4C34CB1A2827EFC656A0C32B2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3c:57:31:e0:b3:a2:47:3a:fe:e7:3e:49:5e:
                    65:90:b8:6f:4c:41:4e:77:3e:8d:30:7c:61:0e:4f:
                    c2:55:bc:9d:3f:16:81:40:96:08:ee:d4:e9:4f:ae:
                    68:cd:78:71:cf:47:d6:d6:ff:ea:9c:20:96:37:53:
                    fb:0c:9a:60:35:66:98:c4:f3:fb:9a:a0:44:0e:f0:
                    a0:79:49:25:12:60:33:f7:a0:c0:f2:3c:7b:1f:54:
                    ad:e4:f3:4b:62:f7:e8:ce:0e:3a:b8:03:45:7a:32:
                    ca:cb:18:c5:73:5a:fa:96:69:92:80:c0:c5:97:1f:
                    49:f3:65:fa:8f:8f:5d:c3:ca:59:de:52:0a:a3:4e:
                    07:54:52:43:41:87:7c:91:e7:ea:f1:c0:91:76:24:
                    3a:90:44:13:c4:20:2a:2c:06:48:78:f8:b7:60:86:
                    68:63:54:38:9f:e6:a0:01:59:64:5b:4d:80:5f:32:
                    10:87:a9:0f:5a:4b:0c:dc:ab:19:f1:43:94:e7:a1:
                    1e:fa:4d:6e:f0:84:e9:a8:6b:7a:a8:88:34:a2:61:
                    f8:85:96:5d:f1:1d:ea:51:b3:3e:67:ae:0e:5b:f6:
                    58:5a:51:71:7a:7d:37:85:d0:6a:21:bd:ca:d1:df:
                    48:c5:98:44:e9:4b:e4:4c:2e:07:bd:c0:4d:db:c5:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:35:2C:EE:61:E2:C4:C3:4C:B1:A2:82:7E:FC:65:6A:0C:32:B2:D5
            X509v3 Authority Key Identifier:
                keyid:E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32332d3233203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.223.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:a3:dd:d2:7e:c6:31:3b:41:07:ad:67:80:bf:4a:c1:9b:
         05:81:22:d5:bd:b6:a9:75:fb:7b:d0:59:8f:f9:c7:bd:74:af:
         7a:33:8e:0d:90:2f:01:ef:ab:40:f2:9c:a7:e8:9f:74:c3:aa:
         1c:b1:56:16:79:5d:3e:94:11:d0:53:f5:90:45:5b:46:10:68:
         e6:58:35:49:2a:e0:ec:a9:17:b1:2a:49:3a:32:24:21:3f:6f:
         06:a6:d1:90:64:e7:01:1a:34:10:f9:a8:e2:41:6f:31:a3:43:
         1d:71:bc:22:ea:d4:39:02:65:f6:50:17:e5:ac:85:ad:6c:47:
         35:a4:68:9d:8a:41:70:2d:ff:06:5c:31:21:88:48:e6:d6:97:
         eb:cf:53:5e:35:da:be:29:ef:ae:6b:75:73:58:75:5c:3e:bd:
         48:46:7a:ea:40:00:74:13:c8:c6:4b:b3:3b:84:f3:ac:55:0f:
         1f:bc:6c:03:7e:4a:3c:a0:1c:63:33:f1:86:89:11:48:14:5e:
         7b:17:6f:b5:f5:03:4b:4f:ad:fd:9d:d8:e3:bb:b9:58:7f:c2:
         d4:ed:b1:cf:48:1e:a1:c3:3e:66:0d:5b:b2:a8:49:0e:62:ed:
         6d:ac:4a:f0:0e:56:2a:af:33:62:00:ed:88:6a:2b:a9:cb:4b:
         ca:6a:76:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:22 2026 by rpki-client