Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32342d3234203d3e20313335343435.roa
File:                     3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier:          3GTJ9ASFLrepqsCMecKCsjwg26cUhjn00ThNjhDZtps=
Subject key identifier:   D2:14:90:4A:4F:9E:30:3F:FD:FA:95:52:E6:0C:E0:79:3A:CC:1A:70
Certificate issuer:       /CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB
Certificate serial:       508C1AD8CDAB31C4691A6EDD021AF38110038F95
Authority key identifier: E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32342d3234203d3e20313335343435.roa
Signing time:             Sun 03 May 2026 03:01:48 +0000
ROA not before:           Sun 03 May 2026 02:56:48 +0000
ROA not after:            Sun 02 May 2027 03:01:48 +0000
asID:                     135445
IP address blocks:        103.223.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl
                          rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8c:1a:d8:cd:ab:31:c4:69:1a:6e:dd:02:1a:f3:81:10:03:8f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB
        Validity
            Not Before: May  3 02:56:48 2026 GMT
            Not After : May  2 03:01:48 2027 GMT
        Subject: CN=D214904A4F9E303FFDFA9552E60CE0793ACC1A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:07:f2:d9:9b:4e:3e:26:a7:df:cf:16:8d:
                    77:c4:d3:e3:6f:aa:8d:7d:26:2c:55:f9:94:a7:e3:
                    f4:86:cf:be:06:8f:cf:5c:2c:b0:8d:d4:04:97:85:
                    eb:71:5d:6b:bd:3a:76:b5:a4:3e:df:cf:99:e2:4e:
                    5b:76:cd:5c:43:ac:2f:72:c5:d9:02:bc:e7:9b:0e:
                    e5:89:b2:b6:de:ed:2b:e4:44:eb:0a:c0:a6:cf:3b:
                    36:05:ca:59:ce:d9:4c:32:6a:f8:8e:8d:9a:b7:aa:
                    81:eb:75:b4:c8:21:12:5b:85:7a:4e:cb:12:38:42:
                    c0:a4:75:ad:b4:9d:f1:c4:31:9d:3e:19:d6:3b:42:
                    5e:de:39:8a:59:b3:3b:97:f4:cc:c6:57:83:99:c4:
                    ac:ed:52:41:75:49:14:c9:ac:e8:87:eb:81:ba:5b:
                    9e:0a:3e:8b:fb:ad:8b:df:fa:b0:ff:95:0c:1f:60:
                    ea:43:e7:c8:b3:17:67:c1:3e:70:33:b3:a3:38:2c:
                    9a:f8:08:5e:08:f4:19:68:74:ab:b2:d2:17:f5:9c:
                    71:42:4d:4c:94:8d:56:fb:ed:9c:a8:db:23:53:7b:
                    9f:f4:47:1b:2c:7f:ec:7f:d7:87:c9:32:0b:36:e3:
                    46:79:2d:fa:f8:66:fa:17:ab:4e:91:35:b0:a4:e7:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:14:90:4A:4F:9E:30:3F:FD:FA:95:52:E6:0C:E0:79:3A:CC:1A:70
            X509v3 Authority Key Identifier:
                keyid:E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32342d3234203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.223.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:01:df:68:76:02:06:98:49:f9:ce:71:db:79:2f:c0:4f:
         90:eb:dd:0f:92:74:e2:32:ba:d3:d1:d9:ab:63:e4:ed:e6:03:
         93:df:16:7c:af:3e:dd:7b:b7:6c:a4:0a:47:d5:9a:fe:4a:b7:
         5f:76:fa:8b:25:d7:66:e2:26:fa:77:89:66:f3:4f:82:f5:a8:
         5f:62:5d:99:b3:47:ca:c9:38:c4:1b:16:e9:2e:09:eb:39:8b:
         9e:1a:94:e7:8f:7d:db:62:51:29:bb:5b:85:3c:ec:25:45:be:
         41:78:85:ed:a6:31:ef:19:d1:d6:54:30:e6:4b:d8:48:35:d3:
         c1:cb:2b:c3:32:15:f8:09:22:a0:f0:31:23:0b:7a:bb:aa:82:
         5c:78:46:aa:12:05:80:2c:09:d0:78:da:e4:5c:a9:64:a0:23:
         c2:66:50:27:59:25:1a:2b:d8:ed:ca:dc:53:08:a8:f8:f2:ea:
         38:56:13:e3:f7:ec:de:f9:8a:1a:08:00:f2:23:ef:29:07:a4:
         51:c8:b6:3a:c5:b8:6a:99:da:a9:db:4d:9e:78:63:74:ce:97:
         4c:26:c7:55:2b:a1:00:91:16:b4:04:f7:b6:2d:55:cb:45:57:
         6e:c1:8e:4b:f4:fd:8c:0d:14:ac:80:6e:a1:c8:74:e7:b6:46:
         7f:4b:0b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:08 2026 by rpki-client