Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa
File:                     3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (raw, json)
Hash identifier:          k8ZBZmDfwahDdiPq/8ia7mwFYTF8XR9bC0fS3/OJdMM=
Subject key identifier:   1C:A8:51:0C:6A:6E:B3:CD:FC:34:89:86:1F:AB:42:7E:0A:71:AA:D4
Certificate issuer:       /CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Certificate serial:       499BBE1ECC6FC98BBAEE9D72C4061011229968AB
Authority key identifier: EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa
Signing time:             Sun 03 May 2026 03:06:49 +0000
ROA not before:           Sun 03 May 2026 03:01:49 +0000
ROA not after:            Sun 02 May 2027 03:06:49 +0000
asID:                     139433
IP address blocks:        103.144.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
                          rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9b:be:1e:cc:6f:c9:8b:ba:ee:9d:72:c4:06:10:11:22:99:68:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
        Validity
            Not Before: May  3 03:01:49 2026 GMT
            Not After : May  2 03:06:49 2027 GMT
        Subject: CN=1CA8510C6A6EB3CDFC3489861FAB427E0A71AAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:e4:2b:01:f4:2a:52:8d:bd:b2:4f:04:d3:
                    47:09:74:cb:25:e7:eb:ed:32:86:48:bd:2a:7f:d5:
                    12:fd:b5:3f:7e:b6:1d:bf:fc:b9:63:7b:cb:bd:96:
                    e6:b2:3c:55:a6:fb:37:0d:1d:1a:30:49:16:85:36:
                    3f:b2:2c:70:8d:8d:c8:29:dd:67:d7:c1:df:5c:f1:
                    cd:38:1b:cc:64:be:5f:79:dd:ac:8c:10:7f:c9:73:
                    04:d6:36:d9:d0:76:80:6c:e8:16:e9:23:e6:5b:dc:
                    15:f9:19:88:f2:1a:4d:79:4b:db:d9:64:98:62:58:
                    62:cd:fe:33:9f:1a:34:6b:fe:01:c8:fa:a9:56:bd:
                    3b:32:bb:29:6a:37:9b:48:6d:d0:78:2d:f7:f0:6e:
                    69:92:22:c1:16:eb:4f:2f:40:cd:05:9d:fb:1b:2e:
                    6b:60:e1:ae:22:4e:5c:67:57:64:a0:c4:1e:ce:75:
                    ea:91:e0:2c:24:bd:ae:45:1f:b7:85:2e:cc:78:98:
                    f8:05:5b:c6:75:49:7e:de:89:e5:63:7c:29:cf:92:
                    a3:1d:4b:aa:8b:cd:7b:4c:b3:88:19:94:cd:34:42:
                    04:db:b7:0f:7f:72:6a:bb:87:74:31:b3:95:8b:fb:
                    bb:32:2f:31:fe:c2:e3:f1:f5:6a:39:97:66:99:25:
                    ff:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A8:51:0C:6A:6E:B3:CD:FC:34:89:86:1F:AB:42:7E:0A:71:AA:D4
            X509v3 Authority Key Identifier:
                keyid:EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:13:ff:8e:e0:ce:30:c5:ad:8f:f8:f9:8d:92:84:6c:0c:00:
         fb:49:6d:be:b7:bc:ba:f9:13:83:c3:1b:c6:a7:d2:09:4a:0b:
         0f:87:bf:eb:6a:c0:1e:31:0c:9d:8e:f7:30:0c:9f:09:5f:a4:
         cb:c3:e2:ca:8b:c4:9f:40:10:ac:1f:c2:62:be:6d:f5:b5:f9:
         d0:54:87:c4:c9:3f:22:51:fe:09:46:9e:ac:6c:8d:56:28:bb:
         02:f9:2e:a7:91:7a:b0:d3:05:e3:87:3c:92:96:a2:d0:58:42:
         24:74:28:5b:91:27:45:28:ab:9d:51:65:5a:9a:40:47:fa:a8:
         ac:31:7a:56:55:7c:c3:78:2c:c0:82:42:97:2a:1a:50:39:1d:
         2f:39:20:48:81:81:f3:d8:f1:41:cc:bf:a1:36:1d:ac:d9:be:
         51:8f:21:3a:04:e1:a6:97:85:91:23:e5:4d:37:42:3d:5b:02:
         49:f5:56:2e:3a:bb:37:c0:d7:7f:56:08:a2:07:56:6f:b4:c7:
         03:25:ed:7d:e0:e7:17:f3:bb:fd:28:e6:31:1a:d4:43:8a:fc:
         ae:77:a2:61:b1:66:90:9e:9b:6a:33:96:48:25:e6:71:d1:e0:
         6c:66:8a:86:bb:98:22:d9:67:28:5a:9c:13:b5:21:33:83:ec:
         eb:30:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:37 2026 by rpki-client