Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa
File:                     3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (raw, json)
Hash identifier:          MIfS/eHMskBKSqBbwRfOeUTCESkdJmMT09TJQUGAcLg=
Subject key identifier:   2E:15:DA:C1:4D:1B:E5:29:34:51:95:65:7F:1B:20:F1:A8:9F:57:AD
Certificate issuer:       /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
Certificate serial:       0F8342E6D82E6B81C8B60E31C9EF8075C6DDFD25
Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa
Signing time:             Sun 03 May 2026 03:07:32 +0000
ROA not before:           Sun 03 May 2026 03:02:32 +0000
ROA not after:            Sun 02 May 2027 03:07:32 +0000
asID:                     135439
IP address blocks:        103.214.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl
                          rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:83:42:e6:d8:2e:6b:81:c8:b6:0e:31:c9:ef:80:75:c6:dd:fd:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
        Validity
            Not Before: May  3 03:02:32 2026 GMT
            Not After : May  2 03:07:32 2027 GMT
        Subject: CN=2E15DAC14D1BE529345195657F1B20F1A89F57AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:23:5c:ee:b0:1e:e4:71:2d:9b:68:aa:43:
                    f4:7c:43:b9:1d:f3:bd:e9:3f:bf:2a:ac:d0:4c:9e:
                    52:7f:7a:00:72:3a:9b:ce:a2:7d:ae:fe:c3:31:3d:
                    96:36:c2:e6:ee:e8:f2:52:02:ef:73:07:b9:99:ce:
                    4e:ca:46:55:cb:6c:31:db:65:98:24:72:b0:3c:9b:
                    fb:06:f4:12:38:14:c8:54:d5:27:97:f4:7c:94:f1:
                    b9:66:38:b5:ee:0d:e8:3f:44:7f:08:90:b2:d6:4e:
                    76:e5:d0:f7:ce:0f:e7:2d:31:75:c3:b8:c2:9a:fa:
                    42:5d:f1:53:54:aa:fc:c0:e9:6d:31:40:45:2b:1a:
                    5f:2f:e5:08:57:04:3d:a2:4e:c9:56:22:53:2d:83:
                    5c:7c:28:ba:59:15:90:1f:4f:7d:c6:ce:75:0e:7e:
                    2f:ba:91:e8:45:b9:ad:0e:f3:b5:d4:0e:02:24:7a:
                    5d:7b:ba:6e:27:ab:65:e6:1f:94:bd:91:a7:8b:4b:
                    d1:c7:32:42:8b:88:60:da:59:ba:85:fa:b4:f0:a6:
                    49:1b:c7:1a:8b:6c:5c:05:40:4c:70:93:a7:6f:6e:
                    be:bf:94:4f:a5:0c:a9:ec:00:16:c7:85:20:5a:0b:
                    15:dc:a0:4b:9b:ee:87:9c:b8:21:c5:26:e1:ad:d3:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:15:DA:C1:4D:1B:E5:29:34:51:95:65:7F:1B:20:F1:A8:9F:57:AD
            X509v3 Authority Key Identifier:
                keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:0c:a7:71:6c:fd:42:38:de:d3:ad:06:3b:3f:40:d4:ab:8a:
         78:7b:1a:01:e3:0e:a8:08:c9:3a:40:01:96:29:f2:35:e2:8d:
         f3:11:ee:78:e6:25:ca:30:66:f6:38:9c:10:00:61:4e:20:16:
         8d:cf:28:e7:40:a9:47:56:1a:a7:04:15:6b:2b:e3:30:e7:33:
         de:7c:56:78:8a:33:6b:b1:96:a2:4c:cb:96:5b:d9:c4:8d:83:
         22:5c:ea:66:3f:6e:c9:92:db:6f:47:cf:42:06:86:f4:84:5d:
         19:13:e5:72:68:ed:f0:5a:8e:ca:55:1c:e6:38:87:32:fa:6a:
         8a:e5:6e:03:7f:0d:97:c7:5c:cb:f8:e6:29:fd:e5:ca:e4:17:
         67:8d:96:39:b9:8b:da:19:4d:e4:74:f5:e6:33:00:1e:40:19:
         dd:bc:16:69:de:6d:72:fe:99:e2:e2:c7:0e:dd:8e:4e:53:b7:
         62:39:d2:4f:3e:4b:ca:9b:dd:d4:bd:99:14:cc:c3:6f:b1:5a:
         54:17:65:bf:17:ff:09:b4:71:fb:44:93:3d:2c:e9:06:c3:89:
         bf:83:67:82:de:db:8d:98:98:02:1d:07:4e:e9:54:f9:6a:4c:
         a8:fe:93:24:1f:28:1a:63:d9:82:0b:4b:58:43:5a:8e:a5:92:
         e1:58:4a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:32 2026 by rpki-client