Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e332e302f32342d3234203d3e20313335343435.roa
File:                     3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier:          QnST8vjK8bFCBoNsPJhM5VHBI9hMH1UeN2aqQjcNdSs=
Subject key identifier:   E7:A3:AC:3D:6C:84:A1:83:3A:89:85:95:62:14:9A:5A:41:91:61:DD
Certificate issuer:       /CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB
Certificate serial:       16A6A3D3306F13A24780DA838E49122B7DA479D7
Authority key identifier: E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e332e302f32342d3234203d3e20313335343435.roa
Signing time:             Sun 03 May 2026 03:01:47 +0000
ROA not before:           Sun 03 May 2026 02:56:47 +0000
ROA not after:            Sun 02 May 2027 03:01:47 +0000
asID:                     135445
IP address blocks:        103.223.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl
                          rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a6:a3:d3:30:6f:13:a2:47:80:da:83:8e:49:12:2b:7d:a4:79:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB
        Validity
            Not Before: May  3 02:56:47 2026 GMT
            Not After : May  2 03:01:47 2027 GMT
        Subject: CN=E7A3AC3D6C84A1833A89859562149A5A419161DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:58:20:7a:f5:21:70:27:a0:b2:d3:58:fc:
                    29:78:2b:49:35:04:17:dd:c1:20:70:e5:9b:43:dc:
                    59:3d:0a:1c:c6:ea:7c:85:00:ed:b6:99:2b:05:0f:
                    78:33:88:c8:e0:6a:04:95:d8:c1:1b:06:db:98:a6:
                    13:90:09:2d:ef:26:90:e2:dc:dd:e6:e6:4c:a3:67:
                    bf:f9:61:c5:67:d8:1e:fe:0f:44:20:76:6e:d2:e0:
                    9f:a4:6c:89:3f:92:f0:83:2e:e2:df:e6:89:2d:94:
                    71:be:4a:48:3d:b6:11:1f:d3:31:f4:e8:8d:e8:b7:
                    71:e0:90:a8:10:4c:4d:42:71:c3:b9:56:87:c6:3f:
                    cc:ff:3b:f8:03:fa:39:c5:4e:a4:c8:b6:68:6e:4e:
                    46:f3:2f:cd:a0:4c:cd:68:58:03:c3:99:f4:46:11:
                    55:b3:f5:0f:fc:a9:dd:dd:2c:35:40:d0:fd:de:e2:
                    f9:02:4e:ce:20:8a:22:a0:a6:ef:cf:54:74:4d:9f:
                    f1:87:4b:48:b9:95:80:76:f0:b1:bc:41:a4:99:6a:
                    d8:a1:d1:db:8f:5e:68:cf:ea:e1:02:e9:ea:ad:7b:
                    40:83:80:45:49:cf:5c:f4:9d:39:41:36:d5:35:3d:
                    09:a6:45:2e:31:4f:9d:4b:a9:79:6f:36:1e:ea:43:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A3:AC:3D:6C:84:A1:83:3A:89:85:95:62:14:9A:5A:41:91:61:DD
            X509v3 Authority Key Identifier:
                keyid:E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e332e302f32342d3234203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.223.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:58:70:03:a2:e3:cd:15:61:4d:ac:57:88:49:8a:9c:86:41:
         bc:42:18:a2:6b:ca:12:64:ea:26:8b:b6:bc:87:63:70:c2:7f:
         17:75:a4:27:51:66:9a:12:7d:a3:7f:8a:10:76:4f:ff:a0:de:
         c2:9e:52:08:c6:11:22:fb:9e:c9:69:c2:13:9c:05:9a:54:fe:
         1f:ca:74:49:74:50:82:37:38:a0:8c:9b:69:23:79:64:07:9b:
         13:66:39:79:d0:1e:d9:c9:83:9a:53:eb:1f:15:84:47:bc:37:
         d0:17:26:8e:5a:27:ea:e8:16:bf:35:10:64:57:91:14:41:81:
         43:98:a8:05:97:98:43:d9:0e:a8:dc:a6:56:e5:c2:5e:8b:cb:
         85:f9:e5:98:d7:2b:c0:e4:eb:7b:38:5a:1c:bf:6b:84:67:83:
         ec:43:e5:53:ca:d1:99:79:e6:ca:47:8d:7f:7e:20:43:5f:5b:
         96:df:d9:77:cb:a3:9b:bc:75:75:6e:51:6b:65:59:81:bd:24:
         55:bd:44:c4:0b:69:7b:2f:8d:f0:b5:1b:e8:ee:11:0e:b8:4d:
         c7:d4:17:e7:99:46:9c:50:d6:73:7f:da:c5:a1:81:c9:7c:f6:
         e9:aa:d6:ce:aa:52:e5:d2:f1:4c:90:28:e6:9c:db:79:c5:88:
         cd:60:f4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:13 2026 by rpki-client