Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa
File:                     3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (raw, json)
Hash identifier:          Lfhcsuq0sTwRRhPKyKhPGs2CL51mhkSyNfRDvbtgTl8=
Subject key identifier:   80:23:88:20:33:92:1C:03:04:B5:A2:1C:12:B6:3C:EC:F2:D1:F2:8C
Certificate issuer:       /CN=202AE8066C06A8D8247209E512833DDA85B77BB8
Certificate serial:       65F00FF1E6F702990D9008BD667F6626EF0F3CCB
Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa
Signing time:             Sun 03 May 2026 03:09:17 +0000
ROA not before:           Sun 03 May 2026 03:04:17 +0000
ROA not after:            Sun 02 May 2027 03:09:17 +0000
asID:                     132668
IP address blocks:        103.19.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl
                          rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f0:0f:f1:e6:f7:02:99:0d:90:08:bd:66:7f:66:26:ef:0f:3c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8
        Validity
            Not Before: May  3 03:04:17 2026 GMT
            Not After : May  2 03:09:17 2027 GMT
        Subject: CN=8023882033921C0304B5A21C12B63CECF2D1F28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:03:c1:b8:6f:b9:78:da:f8:8b:93:0d:c9:
                    b0:14:f1:8f:17:94:99:f2:4b:c0:9b:ac:44:55:85:
                    78:21:0b:e0:6b:73:04:9b:26:4e:2f:fe:8b:0d:b9:
                    28:03:a2:d5:92:30:ae:44:ec:a7:b4:7a:27:5f:b1:
                    d1:4c:a4:83:96:a8:a3:32:32:98:ee:73:20:da:0a:
                    ad:07:6d:8a:98:e9:33:82:59:2c:c4:1b:01:e1:53:
                    9e:a6:69:dc:63:dd:b8:7f:7e:68:76:6b:01:b4:00:
                    03:34:64:da:82:73:42:bb:a8:3d:d8:d0:53:30:a2:
                    1e:fb:ce:8a:e7:f6:e4:01:b8:1e:f0:44:1d:71:a1:
                    1a:60:50:00:7d:da:e6:ea:1a:41:72:1b:f6:5c:cb:
                    a9:b0:17:87:16:2d:87:d5:90:1a:a1:4a:18:c5:e1:
                    67:cc:bf:f3:e0:fb:7e:f8:10:2c:d1:3c:a6:a3:9b:
                    4d:a7:f6:23:90:ea:e2:31:f9:5d:b2:cd:86:85:32:
                    71:7b:38:ad:d2:fa:2d:f8:ff:c5:1e:3a:35:db:d6:
                    93:ea:c4:fe:18:8b:25:1a:1a:8d:9e:a5:83:84:cf:
                    31:11:c4:4f:1e:52:42:ea:ef:94:ec:7a:dc:e9:df:
                    1b:63:71:4c:04:f1:c4:54:4d:14:d0:79:2c:ec:49:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:23:88:20:33:92:1C:03:04:B5:A2:1C:12:B6:3C:EC:F2:D1:F2:8C
            X509v3 Authority Key Identifier:
                keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:82:e7:aa:8d:02:0c:f9:8b:2d:ff:53:e4:4f:73:d8:82:6f:
         78:00:4b:6f:22:31:75:b5:1d:c5:65:dd:22:c1:fb:0b:8e:89:
         27:65:61:6a:51:20:ae:74:5b:dd:8e:06:d4:c4:d7:c1:8b:cc:
         77:c3:2b:d8:0f:36:00:24:4f:78:85:0d:e3:af:b5:91:27:cf:
         13:4e:17:31:eb:0b:77:d4:1f:ff:2d:a8:2c:09:f4:3a:04:0e:
         b3:2b:02:3c:6e:7f:95:7b:8a:12:2a:3d:1d:0e:6a:2c:4c:4c:
         09:90:74:7a:f0:45:0a:c4:d8:e9:68:0f:3e:0a:d2:52:d9:ed:
         73:1b:43:a8:29:7f:62:a0:82:bc:d6:45:80:08:9d:92:93:8f:
         9b:b4:b9:e9:df:de:0b:58:27:89:f8:57:94:33:9f:f5:7f:f5:
         6b:1c:54:cf:e8:8e:99:f2:df:d4:df:f5:4b:37:e5:5b:88:36:
         76:eb:ab:1d:b3:b7:79:6a:6d:70:66:85:28:ae:0f:28:1c:ae:
         51:dc:79:c2:de:bd:70:6f:71:dd:36:e0:cf:14:0d:3a:e8:35:
         84:96:2f:6b:d9:db:c7:72:00:fa:77:b5:fd:e8:58:ba:66:85:
         a8:66:90:80:14:5a:51:e9:41:bb:69:7c:2b:60:b4:97:24:9f:
         bd:f3:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:56 2026 by rpki-client