Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa
File:                     3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (raw, json)
Hash identifier:          7tCfrY+RtB6+WkTyes1RDW6n/IACRq2QGZK0+NvNBQg=
Subject key identifier:   97:57:1E:32:C0:EE:94:0F:6B:78:91:93:A0:96:0B:01:AA:B4:BD:45
Certificate issuer:       /CN=202AE8066C06A8D8247209E512833DDA85B77BB8
Certificate serial:       3C65891C6C564120A3ED195BD513DF283B302188
Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa
Signing time:             Sun 03 May 2026 03:09:17 +0000
ROA not before:           Sun 03 May 2026 03:04:17 +0000
ROA not after:            Sun 02 May 2027 03:09:17 +0000
asID:                     132668
IP address blocks:        103.19.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl
                          rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:65:89:1c:6c:56:41:20:a3:ed:19:5b:d5:13:df:28:3b:30:21:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8
        Validity
            Not Before: May  3 03:04:17 2026 GMT
            Not After : May  2 03:09:17 2027 GMT
        Subject: CN=97571E32C0EE940F6B789193A0960B01AAB4BD45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:4f:bc:83:30:f0:ce:4f:f6:96:81:b6:52:
                    78:f8:d0:9d:95:42:da:1c:f7:d8:d2:bc:86:dd:e4:
                    a0:6f:dc:72:c7:09:68:69:d1:20:ed:16:e9:ab:22:
                    48:50:ec:c0:7e:b8:d1:e7:43:a7:ef:ed:c1:9f:3b:
                    7d:7a:5c:7b:fb:e7:9c:b5:d0:7c:9a:90:dc:ce:9f:
                    59:42:41:9f:6a:83:87:a7:2a:65:46:71:10:c5:e8:
                    82:1a:6a:39:0a:fe:f2:09:67:58:47:84:ca:6b:e1:
                    6b:68:65:74:1e:06:c4:cb:b5:cc:b1:c4:65:96:96:
                    f4:d8:a3:25:eb:02:b3:47:14:40:12:8b:bb:4b:d7:
                    8b:da:7d:0c:8c:73:26:a5:57:13:6d:c8:14:5a:08:
                    09:9d:f4:0c:d0:ea:87:d2:25:7a:ca:31:e0:14:3a:
                    e1:ea:e4:01:38:83:f1:69:bb:9c:d4:70:4a:6c:49:
                    89:c2:b5:09:2d:96:35:84:c6:e5:ed:d2:8a:fd:9c:
                    7e:30:dd:dd:ba:80:2a:16:58:5f:6e:d4:35:7f:9d:
                    8e:6b:9a:af:93:4a:f6:b2:dd:20:1e:9e:a3:3e:d9:
                    d5:d6:41:b9:fd:e9:81:92:54:20:54:4c:b3:cd:8f:
                    54:3a:15:d4:a3:d0:cb:4f:e1:62:09:08:c0:89:c0:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:57:1E:32:C0:EE:94:0F:6B:78:91:93:A0:96:0B:01:AA:B4:BD:45
            X509v3 Authority Key Identifier:
                keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:61:5c:35:9c:64:38:4e:e6:23:2a:a6:4d:d8:42:76:58:
         d9:ed:54:84:70:46:b3:f8:b0:fb:ac:17:a1:64:d3:5a:af:ce:
         6b:5d:39:c7:ee:28:57:f3:fa:c2:4b:f6:ac:b7:69:af:05:b4:
         c6:a9:21:c9:db:40:f9:3e:36:cb:2f:e0:c9:27:c2:fd:e6:af:
         b9:32:e2:8e:90:a1:b8:4b:a2:0f:99:06:0a:41:69:d3:26:24:
         c8:d4:a8:c1:a8:63:6f:37:b1:2f:45:d5:52:b8:5b:fe:41:da:
         5e:34:14:75:39:83:30:f9:19:47:17:53:ac:67:2e:cc:7d:87:
         5d:1b:db:27:ea:ef:09:ac:1e:19:e4:e4:b1:68:16:45:64:ca:
         9e:e2:42:b8:12:89:90:df:c9:80:6e:75:9b:9c:0f:6b:ab:d7:
         06:f1:ca:ac:01:a4:15:45:8a:f3:f1:c6:11:3d:27:d7:d7:2b:
         4c:c8:bb:f9:bd:4d:91:d9:0a:14:7f:52:0d:7c:dc:08:fc:d1:
         ca:bf:bd:9c:4c:80:75:32:88:dd:32:b5:00:b6:2d:a4:2d:26:
         f5:b7:ad:f2:3b:ac:72:c8:43:78:4c:e3:9b:2f:4c:f8:30:82:
         e8:3f:84:98:31:54:99:94:7d:36:59:c1:ec:5d:fc:60:c0:8a:
         55:7b:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:14 2026 by rpki-client