Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa
File:                     3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (raw, json)
Hash identifier:          mPVDpClyc+EXYxrQu2c3VY1E3eKpZXve7tc3ve723GM=
Subject key identifier:   09:AE:9B:1C:1F:9F:9A:0B:78:E7:E6:31:4D:E4:40:B6:B1:A6:04:AB
Certificate issuer:       /CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912
Certificate serial:       654F4E885BD3BAF2C546F7122F05401060E77016
Authority key identifier: 01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa
Signing time:             Sun 03 May 2026 03:04:36 +0000
ROA not before:           Sun 03 May 2026 02:59:36 +0000
ROA not after:            Sun 02 May 2027 03:04:36 +0000
asID:                     134639
IP address blocks:        103.205.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl
                          rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4f:4e:88:5b:d3:ba:f2:c5:46:f7:12:2f:05:40:10:60:e7:70:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912
        Validity
            Not Before: May  3 02:59:36 2026 GMT
            Not After : May  2 03:04:36 2027 GMT
        Subject: CN=09AE9B1C1F9F9A0B78E7E6314DE440B6B1A604AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:51:e1:ef:49:69:5b:5f:60:5e:ea:e3:66:
                    61:80:6d:b6:a1:05:ee:b3:fa:d6:e6:9f:98:51:c7:
                    ef:44:90:81:56:fc:cb:df:c0:29:f5:99:d4:5f:e2:
                    ef:47:4d:d3:8e:c6:ae:ed:21:5c:7a:e3:15:52:5d:
                    f3:44:a3:42:2a:68:71:17:29:5b:50:65:90:18:a6:
                    9e:1d:bc:7a:ef:a5:85:e4:4f:ae:dc:a7:79:4d:f0:
                    c3:8d:af:19:ba:99:5d:f9:95:3a:18:4a:93:18:be:
                    a2:88:0d:d3:f3:98:1b:18:bb:62:6f:fb:58:b4:1b:
                    f2:5e:17:6f:4b:32:65:93:a7:c4:b6:c1:0a:5d:a1:
                    39:cd:28:e2:aa:5c:cd:34:0a:f7:45:b9:b7:cd:dc:
                    43:de:37:be:f7:1b:4c:68:b5:eb:a6:e9:a2:02:fa:
                    43:90:1d:6b:25:35:86:c2:a7:ee:3b:2a:6c:41:c1:
                    5b:a1:99:f0:74:19:1e:ee:bf:6c:a5:97:00:bd:22:
                    26:2c:c1:ad:1b:17:cc:11:c3:8c:08:18:62:e1:3b:
                    05:3d:3e:3e:19:13:8b:c9:e6:72:dc:ee:1e:0f:41:
                    d8:68:0e:dd:6a:11:97:f0:a4:00:e6:ea:24:b5:ab:
                    1e:c7:ca:2a:04:50:0e:8a:dd:91:c6:9f:a8:cb:b0:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AE:9B:1C:1F:9F:9A:0B:78:E7:E6:31:4D:E4:40:B6:B1:A6:04:AB
            X509v3 Authority Key Identifier:
                keyid:01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:f6:c1:85:a1:2e:42:a2:65:4c:41:ec:8c:f3:86:74:c7:35:
         e6:ff:fe:7c:58:4f:91:34:4f:fa:b2:5b:d0:5d:7b:fb:00:55:
         eb:d4:4a:0e:78:14:3b:bb:36:59:a3:cd:33:9d:94:fd:49:e5:
         2c:37:96:84:5a:23:27:6e:ad:8a:26:c0:9f:1c:02:eb:b3:bc:
         55:e3:3e:f4:e7:3c:50:b1:e7:06:7e:ed:0e:23:e8:49:af:59:
         ba:ec:08:ea:2f:a9:f9:83:5b:4e:93:69:99:78:74:e5:6d:12:
         6f:8b:02:af:7e:b1:70:48:c4:b4:ae:04:16:e1:17:27:71:34:
         82:ae:41:0b:fa:a1:28:b0:b2:19:a1:76:e6:c0:87:bd:ee:cd:
         f0:c3:84:c9:76:5d:a0:98:d5:e9:64:f8:13:a4:9a:87:e3:6a:
         0d:72:59:1d:7a:51:8c:1b:f7:8b:38:dc:fd:94:c1:97:17:b8:
         20:8b:f5:fc:dc:fc:09:33:24:29:5b:0b:83:c6:2c:ae:9b:4c:
         31:44:e9:92:ee:36:be:69:c8:c0:17:fb:ea:b1:db:b5:17:1e:
         78:00:bd:38:82:ea:65:6c:7a:1a:13:e3:34:d4:70:c6:4d:e4:
         5c:1e:7a:3c:e9:02:b9:c1:09:83:9d:8a:92:2a:ad:2a:0f:cb:
         ac:6d:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:35 2026 by rpki-client