Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa
File:                     3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (raw, json)
Hash identifier:          GBcRuzH/ztafVHYfLj8zgAdxKdzjxCNZd7fnXHiG9vg=
Subject key identifier:   1D:8F:C9:22:59:E5:66:A6:FB:C9:9A:DC:DF:A1:6F:D8:E9:C8:D4:6D
Certificate issuer:       /CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Certificate serial:       A4278AD419C4D0893930D3D05153039293A9DC
Authority key identifier: EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa
Signing time:             Sun 03 May 2026 03:06:49 +0000
ROA not before:           Sun 03 May 2026 03:01:49 +0000
ROA not after:            Sun 02 May 2027 03:06:49 +0000
asID:                     139433
IP address blocks:        103.144.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
                          rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a4:27:8a:d4:19:c4:d0:89:39:30:d3:d0:51:53:03:92:93:a9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
        Validity
            Not Before: May  3 03:01:49 2026 GMT
            Not After : May  2 03:06:49 2027 GMT
        Subject: CN=1D8FC92259E566A6FBC99ADCDFA16FD8E9C8D46D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2c:20:be:a1:5f:cd:c8:b2:f4:42:bc:2c:1f:
                    25:46:78:3b:10:31:e0:14:1d:2a:da:df:3d:8e:54:
                    c0:a0:29:24:1b:c0:c8:08:eb:42:77:0c:1f:46:a5:
                    d9:94:1a:7b:4b:62:43:ac:d6:64:c9:40:90:ab:4d:
                    dc:6a:46:b5:a6:ee:df:e5:70:ed:7c:3e:b2:d1:45:
                    20:bb:70:46:4a:0a:34:67:c8:30:8c:49:cd:61:33:
                    03:6a:c6:e8:53:84:cc:7c:da:fb:bb:33:60:98:d6:
                    f6:36:15:c5:08:3c:a6:1a:2b:ce:2d:77:46:49:80:
                    b6:72:b6:a0:78:d4:8f:b1:f9:eb:68:ff:ea:5b:ec:
                    bc:d4:73:9f:ce:46:14:97:43:0a:3b:a4:cf:c8:ef:
                    48:82:16:fc:54:21:10:39:32:bc:10:e9:1d:63:60:
                    34:99:cb:bc:d9:84:45:3f:98:42:20:c4:bd:fb:24:
                    c8:20:a2:c2:ad:08:85:3b:34:32:e5:a9:f8:ca:59:
                    e3:42:29:96:b2:d8:b7:40:32:a0:d0:b6:93:8c:66:
                    82:0c:3a:c3:16:92:09:14:fc:b6:1d:79:8e:00:f8:
                    2c:62:48:eb:d6:e5:76:ba:95:ab:8d:1d:d2:c7:a6:
                    3d:c3:85:84:34:e5:ec:9c:cc:36:6a:b0:1c:7d:bd:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8F:C9:22:59:E5:66:A6:FB:C9:9A:DC:DF:A1:6F:D8:E9:C8:D4:6D
            X509v3 Authority Key Identifier:
                keyid:EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:80:00:4f:64:82:7e:23:18:4c:64:1e:5b:a7:cf:20:9c:45:
         a3:4f:dc:80:83:b9:a1:70:c0:8e:e6:cd:c0:44:3e:a6:0e:0f:
         ae:58:c8:d9:80:c9:cd:a0:92:a2:5f:16:c4:31:a8:d1:b7:df:
         53:58:b1:c5:64:12:de:29:c8:36:6f:7e:c8:3f:57:5a:b2:bc:
         9a:18:33:9e:14:04:92:b5:87:0b:56:d5:61:c5:88:06:28:2f:
         65:cb:25:7f:2b:ab:9b:64:cc:43:2b:bc:16:0e:00:2b:98:0f:
         77:c0:23:3e:e5:1d:b0:2d:6e:6c:57:d3:8b:65:f3:44:32:ad:
         81:4c:c7:05:38:17:89:20:e4:d1:25:2f:0b:87:18:2b:a3:62:
         41:78:fd:73:eb:fd:0d:e0:41:84:5e:f2:b2:27:e1:14:89:18:
         1e:87:88:77:66:eb:f7:d4:34:2e:b7:11:27:c1:ec:42:06:af:
         65:d7:9e:09:d0:93:37:6c:42:fd:54:0d:76:2a:bf:30:c2:d7:
         6b:5a:0b:c7:b3:af:c2:64:93:2d:c6:19:25:b1:fe:1e:2d:66:
         26:00:bc:b7:ab:65:af:f0:e1:0c:02:e4:ba:a0:d0:1d:9a:ca:
         6b:81:4c:3f:6f:59:d1:4a:b8:82:c1:a2:fc:97:ac:fc:6c:15:
         47:f1:02:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:04 2026 by rpki-client