Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa
File:                     3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (raw, json)
Hash identifier:          t4tJtjdDpsJpFR/xtJD4ECgHePAHDWhC6e/Cj+1efek=
Subject key identifier:   30:BD:D4:CC:59:2D:D1:0D:20:63:CF:1E:FC:42:02:01:D1:D6:25:22
Certificate issuer:       /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
Certificate serial:       79DCC3D858220CD958CBD37648177732286203C6
Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa
Signing time:             Sun 03 May 2026 03:07:32 +0000
ROA not before:           Sun 03 May 2026 03:02:32 +0000
ROA not after:            Sun 02 May 2027 03:07:32 +0000
asID:                     135439
IP address blocks:        103.214.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl
                          rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dc:c3:d8:58:22:0c:d9:58:cb:d3:76:48:17:77:32:28:62:03:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
        Validity
            Not Before: May  3 03:02:32 2026 GMT
            Not After : May  2 03:07:32 2027 GMT
        Subject: CN=30BDD4CC592DD10D2063CF1EFC420201D1D62522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:2c:fa:4f:c9:db:7b:86:83:90:95:56:29:
                    f3:bd:25:ee:42:4b:d2:09:fc:59:ba:0a:1a:13:7d:
                    3e:27:7b:64:1b:0f:2a:50:25:df:a7:bc:d8:05:29:
                    43:51:91:5c:8f:ea:b4:7b:72:4f:f5:75:d0:58:f1:
                    6c:a7:e4:fe:40:b2:cb:71:c5:33:1d:45:ac:dc:8f:
                    7e:3c:5a:5a:2d:18:9d:6d:16:26:2e:a8:08:4c:f8:
                    28:f5:85:ed:8e:6c:60:00:e3:c1:aa:9d:b5:78:ed:
                    6d:84:ce:43:d2:48:b8:dc:f7:63:d9:0b:61:93:1e:
                    d5:e6:be:87:d2:19:a8:81:c0:a2:ff:84:c6:77:ff:
                    5a:97:6d:c1:87:80:39:3f:7d:44:f0:c7:85:db:01:
                    aa:51:a3:10:c3:cc:be:39:e5:a4:a7:63:70:5e:06:
                    d5:0c:75:1c:df:13:55:13:87:45:34:8b:4b:10:20:
                    55:43:d7:63:6f:fd:13:09:65:8b:ae:ae:96:fd:95:
                    ac:40:59:fb:85:69:47:ef:9f:18:9c:a6:1f:8c:77:
                    a8:24:37:f2:d6:eb:02:4b:d1:f5:e8:c9:dd:ee:6d:
                    36:d3:94:b4:27:b6:c7:33:0c:b2:03:4a:a6:c8:71:
                    a5:6e:c1:d4:7b:07:da:e3:7e:b3:79:43:68:0a:6c:
                    f7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BD:D4:CC:59:2D:D1:0D:20:63:CF:1E:FC:42:02:01:D1:D6:25:22
            X509v3 Authority Key Identifier:
                keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:90:a3:5b:50:70:5c:b1:18:95:af:62:e5:f7:71:ff:52:4a:
         4d:aa:70:c9:14:a4:79:73:ba:87:8c:ad:fe:c8:54:b9:bd:ec:
         2b:84:28:75:2a:f3:47:6c:43:19:e2:9b:25:8b:90:7a:32:c0:
         fc:b3:53:4a:1f:6a:06:97:62:33:d2:e5:78:9d:08:d0:83:8a:
         6f:42:ba:c0:ef:fe:10:e0:2d:3b:08:34:89:a4:34:10:64:1e:
         4c:bd:b1:54:f3:bd:bf:3c:44:83:64:9a:e9:40:d4:28:64:e7:
         e5:21:cf:d1:b3:f5:66:35:03:a2:67:45:e0:b6:0c:bd:32:92:
         28:78:0e:d6:8b:9c:32:9f:b6:59:c9:79:a0:4f:fc:be:83:68:
         0d:82:2a:b6:35:f3:f3:c0:8e:d8:a2:05:08:0d:fa:f6:aa:b0:
         1f:fb:09:74:28:bf:b4:54:9b:41:82:48:28:ac:66:ea:45:23:
         03:25:48:53:b3:03:06:92:2a:54:31:65:0a:b3:43:4f:6e:c7:
         29:cd:08:a7:76:26:bb:1a:e1:39:c2:18:9e:2f:3d:d7:b7:37:
         5a:ca:2f:13:8e:67:84:2b:84:3b:d8:85:e1:b5:c9:69:3f:48:
         7e:a2:cd:be:f0:5c:39:2f:e3:bd:b9:60:88:00:83:70:8d:de:
         a4:73:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:16 2026 by rpki-client