Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa
File:                     3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (raw, json)
Hash identifier:          qiIo+SN3MC7vwCLrsPjubqqbgVImtRMedDlPEjqNz+c=
Subject key identifier:   DA:83:9B:5E:A8:CA:F5:FA:FE:CF:04:BD:03:C7:4C:7B:0E:BE:CB:AE
Certificate issuer:       /CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
Certificate serial:       76989A4EE05B19819A01F878FEB75FDFDF953683
Authority key identifier: 5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa
Signing time:             Sun 03 May 2026 03:06:45 +0000
ROA not before:           Sun 03 May 2026 03:01:45 +0000
ROA not after:            Sun 02 May 2027 03:06:45 +0000
asID:                     133803
IP address blocks:        103.44.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl
                          rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:98:9a:4e:e0:5b:19:81:9a:01:f8:78:fe:b7:5f:df:df:95:36:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
        Validity
            Not Before: May  3 03:01:45 2026 GMT
            Not After : May  2 03:06:45 2027 GMT
        Subject: CN=DA839B5EA8CAF5FAFECF04BD03C74C7B0EBECBAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:98:f3:98:b9:6a:91:ca:44:8e:07:1d:cd:
                    10:f6:e4:b2:8c:2b:57:67:69:78:69:f4:8d:42:dc:
                    f5:51:12:bf:a2:6b:1c:43:3a:cf:6f:95:e4:eb:cf:
                    a2:d6:ec:0c:82:03:21:81:a7:1a:b4:c9:14:07:f8:
                    57:35:24:a2:77:57:38:12:14:e5:be:77:c1:8a:94:
                    c5:7c:5f:46:19:b9:71:b4:4f:92:b9:be:0c:1f:49:
                    00:ed:e9:c1:08:75:23:30:39:e4:63:92:58:1f:4e:
                    0a:b5:34:1f:ff:07:0c:b2:61:74:14:06:f6:fc:4f:
                    c7:7a:08:96:6a:b6:7c:51:26:9d:97:51:b4:19:5d:
                    cc:71:7e:54:71:82:e0:c6:9a:98:58:b5:69:48:35:
                    31:2e:94:5c:95:3c:04:d8:c3:6b:4a:8a:1e:3c:3a:
                    9b:c8:5a:48:2d:ce:b8:16:7a:54:fe:98:c7:c7:05:
                    57:46:f3:4e:6e:c5:01:b7:29:c7:6b:de:72:7d:56:
                    f8:f3:3a:9f:3b:6b:dd:9a:f6:f2:85:07:29:41:d6:
                    09:9c:05:9e:cd:6c:5e:f8:a4:73:f1:d9:36:5c:52:
                    c0:11:f8:33:80:cf:3b:21:4f:9f:fb:39:c7:ae:67:
                    f9:d3:9d:a6:e8:e2:c3:bf:be:6f:36:1c:c0:08:8f:
                    9f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:83:9B:5E:A8:CA:F5:FA:FE:CF:04:BD:03:C7:4C:7B:0E:BE:CB:AE
            X509v3 Authority Key Identifier:
                keyid:5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:30:c9:bc:f7:0e:f5:eb:6e:09:a2:5d:f9:ac:68:17:4f:7e:
         1a:7f:ef:d8:b3:de:41:87:f3:91:8e:b8:65:07:cb:8d:b4:6c:
         23:20:22:88:a3:d7:ff:a2:b7:38:0b:49:b7:69:26:66:d6:33:
         28:c2:56:b8:79:0c:8e:5c:f4:c9:ee:b4:bb:07:d0:df:3d:12:
         a5:d1:f5:dd:4d:5c:23:93:3d:c1:e5:86:5a:a0:38:31:b7:91:
         cf:66:a7:e2:1b:3e:e6:aa:51:3d:07:40:e2:0c:72:8a:49:9b:
         47:3b:4a:32:46:b7:98:ad:7a:2b:1e:d5:13:95:62:c1:87:1d:
         a1:30:8c:86:da:6b:55:23:be:db:cb:3f:1d:c4:ef:87:04:37:
         0c:f4:b4:ec:b7:93:58:6d:2c:37:50:5b:dd:9b:5d:90:ce:7a:
         78:82:9d:70:0c:28:4a:06:42:7d:d2:16:19:6b:e5:e6:e0:31:
         a2:34:c4:89:a6:e3:55:f7:50:67:11:f4:26:a3:c9:ec:8a:44:
         cc:f4:92:47:23:02:44:4a:e1:d3:05:81:a3:89:20:3c:c5:93:
         1d:29:fa:d4:f0:56:57:2d:34:37:62:a9:63:b3:61:b8:3e:07:
         9d:0b:38:48:e0:21:8a:2f:34:3e:4b:b9:c0:a2:7d:00:a3:fe:
         e1:70:1c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:12 2026 by rpki-client