Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa
File:                     3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (raw, json)
Hash identifier:          i6JN3toKQT5i4NNrRSH28JimRYw5XqvDzH+54AyAuPo=
Subject key identifier:   E0:5F:41:EB:B3:FA:E1:14:6C:56:7B:BF:79:B5:2D:DF:80:1A:96:E5
Certificate issuer:       /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8
Certificate serial:       2CABEC1D3B4A798A80A4B9F1297DEAC592A308D5
Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa
Signing time:             Sun 03 May 2026 03:07:22 +0000
ROA not before:           Sun 03 May 2026 03:02:22 +0000
ROA not after:            Sun 02 May 2027 03:07:22 +0000
asID:                     136820
IP address blocks:        103.98.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl
                          rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ab:ec:1d:3b:4a:79:8a:80:a4:b9:f1:29:7d:ea:c5:92:a3:08:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8
        Validity
            Not Before: May  3 03:02:22 2026 GMT
            Not After : May  2 03:07:22 2027 GMT
        Subject: CN=E05F41EBB3FAE1146C567BBF79B52DDF801A96E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:18:31:66:59:ba:a5:d8:eb:38:1c:be:fd:
                    d6:13:81:0b:f3:c8:be:21:d0:86:03:f9:d1:4c:3f:
                    9c:ce:0d:fc:3f:5a:d3:12:22:25:86:51:3b:71:72:
                    5c:3d:73:32:3b:e9:c4:c0:d4:e3:93:07:cf:83:fd:
                    07:50:61:d1:75:e4:9b:ff:9f:76:53:d2:78:87:0e:
                    84:13:0e:f2:17:e8:e4:bc:15:0f:b7:1f:e8:d9:6e:
                    d9:13:81:8f:e6:55:79:16:ba:7f:9a:8f:5b:4e:d1:
                    b4:c0:5e:1e:1c:a6:39:7f:7a:1d:82:9e:d5:90:1f:
                    5c:95:f3:cc:da:b2:03:d3:1c:96:fb:58:49:dc:88:
                    11:69:4d:75:47:a3:2e:a1:91:7f:ac:58:26:03:79:
                    db:19:4c:70:3a:b5:f9:d5:94:d3:04:0f:96:d7:0b:
                    44:1c:61:b6:56:57:42:84:41:a6:f4:2d:cd:d1:6d:
                    b1:14:2d:d6:ef:41:ee:69:9c:e1:09:be:c3:92:9b:
                    04:88:56:ca:db:00:c4:22:e2:0c:85:fe:aa:6b:91:
                    ec:6b:00:8e:d9:00:26:b3:f2:80:f2:05:f4:88:97:
                    94:68:62:f0:5e:aa:5b:e5:46:37:4e:85:46:95:34:
                    ba:7b:d2:61:b6:f2:51:01:80:35:d6:55:34:6a:07:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5F:41:EB:B3:FA:E1:14:6C:56:7B:BF:79:B5:2D:DF:80:1A:96:E5
            X509v3 Authority Key Identifier:
                keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:b9:3a:8f:dc:71:7b:1c:e5:bc:ce:fb:e8:ea:4d:53:2e:0b:
         6b:7f:42:a4:9d:8c:9d:a2:cd:e2:84:bd:c5:e0:2f:86:c8:77:
         8c:91:c7:0e:44:83:1d:85:c9:64:e6:67:7f:1d:64:6f:3e:d5:
         60:c1:4e:32:65:e0:5b:3f:05:f7:09:ef:3f:cb:3b:18:19:3f:
         62:d5:a3:80:87:5a:35:dc:1b:88:81:41:6f:48:4b:bd:0e:3b:
         26:e6:ca:4e:2b:f8:ae:97:c8:db:a7:f6:9c:bc:f9:80:06:5f:
         08:d9:4c:e5:36:db:50:ac:c1:d3:03:be:30:9a:ee:b0:c0:e6:
         1f:64:ab:9f:b8:1e:e9:02:80:75:df:23:27:41:fa:b4:3f:c3:
         a0:62:4e:81:55:ec:c0:44:9e:d3:c1:25:31:11:1b:c3:fa:d2:
         43:0d:13:17:71:b2:0a:4b:44:10:5c:b4:91:35:bd:37:1b:6d:
         6c:50:a0:ae:f6:30:ce:40:6d:48:1f:3f:15:bf:08:66:0b:e1:
         92:79:ea:86:e6:d7:55:be:62:c1:e9:df:00:95:12:15:70:ed:
         49:b3:c4:7b:04:e6:39:1e:5b:93:6f:74:5a:5d:b3:a4:90:46:
         a5:bd:2a:44:b2:18:d8:b8:08:7d:dd:ca:f0:02:6b:f1:0e:0e:
         5f:c6:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:17 2026 by rpki-client