Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa
File:                     3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (raw, json)
Hash identifier:          lNGCOSIBuAHlgUExePnnpcuCF0p2D0MmHxxD31gMyhA=
Subject key identifier:   08:CF:0A:96:72:D0:93:65:E4:4D:26:5F:C2:1B:C4:10:7C:0D:C8:1B
Certificate issuer:       /CN=F26C4BD5CBD720EC58B924F31F948F8D29D836C0
Certificate serial:       55D2B681CEE4F8A2C805060CC201102DCF1CCEEC
Authority key identifier: F2:6C:4B:D5:CB:D7:20:EC:58:B9:24:F3:1F:94:8F:8D:29:D8:36:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa
Signing time:             Sun 03 May 2026 03:02:22 +0000
ROA not before:           Sun 03 May 2026 02:57:22 +0000
ROA not after:            Sun 02 May 2027 03:02:22 +0000
asID:                     150468
IP address blocks:        103.101.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.crl
                          rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d2:b6:81:ce:e4:f8:a2:c8:05:06:0c:c2:01:10:2d:cf:1c:ce:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F26C4BD5CBD720EC58B924F31F948F8D29D836C0
        Validity
            Not Before: May  3 02:57:22 2026 GMT
            Not After : May  2 03:02:22 2027 GMT
        Subject: CN=08CF0A9672D09365E44D265FC21BC4107C0DC81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:50:19:32:fd:27:d2:7f:27:5e:6a:bc:1b:46:
                    9a:50:83:4f:91:79:a4:8c:bf:c2:25:01:30:b1:ef:
                    48:d3:08:36:9b:0f:bb:61:e8:c5:48:8a:b1:94:4d:
                    4f:92:bf:a5:d3:38:f4:19:46:3e:47:a5:82:0d:88:
                    8a:32:5a:fb:7f:57:c0:dc:a1:4c:57:f6:bf:05:57:
                    a3:be:c5:31:89:22:56:14:76:36:69:13:30:c6:04:
                    35:aa:3a:25:b3:3f:31:ca:78:b9:fd:00:bd:9d:b9:
                    72:01:4d:e0:ec:66:fc:87:fb:eb:6c:5b:94:42:35:
                    47:f9:51:06:72:dd:5d:52:68:64:eb:48:28:b3:4f:
                    a3:b8:99:07:e9:35:0a:2e:3c:f9:2f:c6:f7:66:f1:
                    a7:84:fb:6e:97:d3:cc:43:10:42:6b:3d:b5:d6:f2:
                    0c:bf:3f:f3:4f:b4:e6:09:fd:d8:d4:8a:3c:45:b1:
                    da:b8:65:ac:ec:85:77:5e:1e:9d:f2:cd:20:17:81:
                    25:db:e4:e5:d9:c9:f2:7d:46:60:e9:ab:95:d6:1c:
                    18:5c:4a:3e:52:e2:7f:08:dc:20:3e:ab:38:1e:8c:
                    9e:2f:01:7a:7e:11:77:b9:dd:86:7d:e6:c9:be:35:
                    62:cb:94:b4:21:d7:7f:16:74:32:b6:2f:43:c5:d7:
                    b8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CF:0A:96:72:D0:93:65:E4:4D:26:5F:C2:1B:C4:10:7C:0D:C8:1B
            X509v3 Authority Key Identifier:
                keyid:F2:6C:4B:D5:CB:D7:20:EC:58:B9:24:F3:1F:94:8F:8D:29:D8:36:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:84:4f:bb:29:a9:13:bf:41:c0:76:dd:d6:a2:4d:76:a7:ae:
         1d:26:3b:da:b8:c2:2f:74:8c:12:cc:97:de:5b:fa:30:e8:8b:
         e1:12:fc:90:84:e9:ad:ab:86:ec:f4:53:14:88:2b:a8:54:a4:
         a8:86:ff:5f:e1:da:37:d3:36:91:73:94:53:d1:cb:76:04:99:
         e5:5e:82:0e:66:f1:f1:e6:64:8f:dc:43:59:7f:0e:77:5b:5e:
         80:6a:a4:30:fa:41:e6:ca:a6:7a:a8:3d:b0:5e:d8:f2:2a:18:
         8f:60:61:82:65:1f:ee:c8:f8:b2:fd:ec:d3:56:bf:73:f9:da:
         51:e9:e3:f8:d4:ca:5d:c4:fa:f3:5e:5f:d5:7d:9f:c1:5a:f6:
         f6:ab:ef:22:47:68:b5:92:7c:c4:0b:8b:7a:6b:22:51:dc:00:
         a4:6d:58:33:a3:61:05:6b:31:2a:99:79:81:c8:f2:0d:bb:1d:
         c0:fc:55:ff:fa:19:11:12:df:9c:09:b7:fd:53:3a:3a:85:e0:
         5b:3a:5b:8d:1f:7f:0d:bc:4b:09:78:76:8e:8c:cd:43:de:7d:
         18:1b:25:6d:42:56:44:46:d6:8a:5a:de:93:b6:41:dc:8c:3f:
         ab:cf:42:a5:f3:f1:6e:15:83:d3:00:af:aa:f1:8e:a2:29:d9:
         2e:e9:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:02 2026 by rpki-client