Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/3130332e3134312e36322e302f32332d3234203d3e20313338383935.roa
File:                     3130332e3134312e36322e302f32332d3234203d3e20313338383935.roa (raw, json)
Hash identifier:          mysP4ZI8/mLwwdbhbNlbTtFPO7Xh4h02DbXY6WRrSSU=
Subject key identifier:   9D:4C:6E:CB:5D:4C:15:F1:BF:C1:05:40:A9:03:7B:47:05:1A:A1:C9
Certificate issuer:       /CN=E05B0DF9F0C0958B77089CB04513FD0B85D7A87A
Certificate serial:       18128B344876D50B0769734F6510A5EE1980457E
Authority key identifier: E0:5B:0D:F9:F0:C0:95:8B:77:08:9C:B0:45:13:FD:0B:85:D7:A8:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E05B0DF9F0C0958B77089CB04513FD0B85D7A87A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/3130332e3134312e36322e302f32332d3234203d3e20313338383935.roa
Signing time:             Sun 03 May 2026 03:02:00 +0000
ROA not before:           Sun 03 May 2026 02:57:00 +0000
ROA not after:            Sun 02 May 2027 03:02:00 +0000
asID:                     138895
IP address blocks:        103.141.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/E05B0DF9F0C0958B77089CB04513FD0B85D7A87A.crl
                          rsync://rpki-rsync.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/E05B0DF9F0C0958B77089CB04513FD0B85D7A87A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E05B0DF9F0C0958B77089CB04513FD0B85D7A87A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:12:8b:34:48:76:d5:0b:07:69:73:4f:65:10:a5:ee:19:80:45:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E05B0DF9F0C0958B77089CB04513FD0B85D7A87A
        Validity
            Not Before: May  3 02:57:00 2026 GMT
            Not After : May  2 03:02:00 2027 GMT
        Subject: CN=9D4C6ECB5D4C15F1BFC10540A9037B47051AA1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e7:9f:bb:3b:a6:63:ac:fe:84:95:2a:16:2b:
                    2f:ed:4a:14:b0:93:88:ce:6a:e8:d9:29:c2:60:e9:
                    c6:d5:4b:99:59:15:f8:c5:e0:2e:4c:82:b3:eb:1d:
                    d1:dd:21:3d:3a:2e:cb:70:65:52:14:14:cf:e9:35:
                    a8:72:6c:7a:ba:ee:c0:2e:12:bb:f4:a0:d0:37:64:
                    ce:83:67:69:1d:be:2c:b4:27:ad:91:3a:5e:1f:5a:
                    f3:77:3e:13:b4:2d:4c:35:14:8e:fa:7c:69:84:15:
                    3f:68:90:38:45:5e:ca:17:c1:38:f3:4f:f1:4b:fa:
                    b5:9c:be:6e:8b:85:9f:1f:19:22:61:42:84:5c:1a:
                    0c:ce:cb:c9:bb:c0:67:40:50:cf:5e:a8:b4:36:3d:
                    68:c9:79:48:f2:45:f6:4a:ae:2a:6b:07:3b:b1:62:
                    67:27:5e:3d:bf:99:30:7f:20:e0:c5:42:50:b6:64:
                    6a:6a:1b:e0:67:4f:fe:f7:8a:02:ce:8a:f0:9e:47:
                    f3:27:b8:4f:78:7e:3e:33:d0:8a:5d:d8:7e:3e:0b:
                    59:9e:1d:cc:9d:91:8f:3c:ac:24:c2:7b:3f:29:df:
                    e9:18:a7:5e:5d:87:1d:16:cc:92:db:5e:9c:fe:c1:
                    cd:4a:a8:ea:e7:90:86:8e:fc:6e:03:88:70:28:d0:
                    f0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4C:6E:CB:5D:4C:15:F1:BF:C1:05:40:A9:03:7B:47:05:1A:A1:C9
            X509v3 Authority Key Identifier:
                keyid:E0:5B:0D:F9:F0:C0:95:8B:77:08:9C:B0:45:13:FD:0B:85:D7:A8:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/E05B0DF9F0C0958B77089CB04513FD0B85D7A87A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E05B0DF9F0C0958B77089CB04513FD0B85D7A87A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/3130332e3134312e36322e302f32332d3234203d3e20313338383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:c2:63:2d:9c:0d:f6:a3:80:c9:9b:2b:76:06:df:53:b8:b0:
         99:b3:70:c5:15:4f:eb:63:ce:27:58:71:b1:4e:6f:3e:a2:55:
         b1:9b:94:69:16:7c:c6:63:11:fc:9a:e0:23:35:21:24:18:82:
         1d:ec:f8:2a:3a:0c:b2:da:08:b2:d3:63:ec:c9:1c:97:c1:8d:
         da:8d:b2:fc:74:83:6b:23:cc:93:e3:48:fb:17:63:e3:8f:45:
         c2:12:4e:8b:36:7b:a1:b8:23:4d:77:31:3d:25:a6:99:8d:0b:
         fc:f1:63:36:d2:af:c9:15:fc:a1:75:99:f6:2e:96:cf:01:18:
         32:f7:07:a1:bc:e7:70:12:ae:bc:4d:70:c4:6a:fc:34:33:0f:
         81:ae:ff:2b:40:ed:d5:a1:3e:6a:92:42:23:5c:1c:52:71:3d:
         14:77:15:6e:e6:41:0d:8b:06:ee:93:7c:ff:ab:e5:a8:45:9b:
         0a:54:d0:52:7c:90:94:95:60:35:af:8b:50:a3:8c:02:7a:ac:
         01:76:25:b9:99:de:ce:05:51:e9:39:b7:b6:34:df:ca:1b:2c:
         1e:d2:ed:d8:50:5d:ea:6e:49:93:23:75:2e:3e:ad:11:46:4d:
         72:ca:94:40:04:d5:7e:fe:14:50:61:60:bf:e7:e3:1c:c9:e6:
         38:5a:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:29 2026 by rpki-client