Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa
File:                     3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (raw, json)
Hash identifier:          5uk1HERYDmQXBZLbJ/kJf/ZrrSlNSnryrEUcrC7gRb0=
Subject key identifier:   26:42:F3:60:36:9B:2F:2F:88:9F:20:EE:E3:BD:15:9B:46:A1:6E:23
Certificate issuer:       /CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A
Certificate serial:       15915832545141878559BE332F3E6FE60DAD8FCE
Authority key identifier: F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa
Signing time:             Sun 03 May 2026 03:10:05 +0000
ROA not before:           Sun 03 May 2026 03:05:05 +0000
ROA not after:            Sun 02 May 2027 03:10:05 +0000
asID:                     139454
IP address blocks:        103.145.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl
                          rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:91:58:32:54:51:41:87:85:59:be:33:2f:3e:6f:e6:0d:ad:8f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A
        Validity
            Not Before: May  3 03:05:05 2026 GMT
            Not After : May  2 03:10:05 2027 GMT
        Subject: CN=2642F360369B2F2F889F20EEE3BD159B46A16E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:5b:c5:71:c8:bc:c4:8d:cd:f3:c0:99:a6:
                    ac:1d:fb:9e:ac:23:4b:39:6d:cd:6b:27:0a:20:f9:
                    82:4f:f6:43:89:ea:40:92:05:a4:70:d6:72:b6:82:
                    38:86:f0:6b:b4:64:3e:e2:fb:6b:40:66:fa:7c:fb:
                    3c:ca:af:0d:30:89:ee:95:32:4e:da:dd:9f:d0:f3:
                    68:da:42:1b:13:d0:68:b1:44:72:48:e1:bd:cc:ae:
                    6f:35:df:c2:f9:d1:f7:88:0a:f0:d8:5e:70:5e:0a:
                    c3:56:f7:da:27:ab:8b:32:91:37:ad:66:0d:68:f0:
                    27:00:a6:d4:59:f4:11:23:dd:87:a2:62:19:06:31:
                    e2:80:24:a5:0d:4e:af:9d:41:f4:46:fd:8f:39:41:
                    f5:8c:6d:f2:a4:a4:c0:9e:02:d8:f9:df:9f:72:62:
                    46:0d:7e:43:9c:79:70:e6:37:0d:b2:c7:eb:fd:dd:
                    12:e2:d9:57:e0:04:53:46:c2:3f:d8:f6:d1:94:bb:
                    74:75:48:b9:6b:14:30:6a:f6:dc:b9:7b:ea:3d:88:
                    05:9f:9b:ee:2d:16:80:f3:fc:fe:f8:a0:21:b5:fe:
                    d5:a6:2f:4d:fc:97:18:d1:38:55:72:1b:dd:25:ed:
                    01:bc:ed:b5:e1:7d:36:f3:aa:bd:c9:c6:a2:2c:1c:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:42:F3:60:36:9B:2F:2F:88:9F:20:EE:E3:BD:15:9B:46:A1:6E:23
            X509v3 Authority Key Identifier:
                keyid:F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:d6:18:3d:d7:10:50:09:d1:aa:9e:93:f6:37:3a:55:3d:1c:
         c7:ba:1b:e5:4d:66:5b:8d:cd:a2:1a:8c:e3:c0:be:7f:21:b4:
         65:c1:01:fe:a8:32:3d:fd:d5:c6:76:10:fd:21:88:b0:79:c0:
         85:8a:fa:04:47:74:84:26:a3:41:e3:a9:3a:a5:9e:69:95:cb:
         5c:1c:43:47:d3:2e:d8:05:1a:4a:9f:6c:12:03:46:19:aa:4f:
         29:45:3d:d8:d4:9b:31:b3:de:5e:96:64:b6:75:14:45:65:d1:
         88:28:95:07:e1:ed:3d:26:82:ee:8d:b3:69:f8:09:94:6f:c4:
         79:65:e3:43:27:53:15:77:65:3e:57:76:8b:20:05:20:cc:cd:
         90:c5:25:63:a0:61:5d:d0:62:a3:64:ca:bc:26:e0:2d:d5:4d:
         6d:18:03:32:df:6c:54:f5:23:e2:4d:c8:72:7b:58:43:b8:4d:
         98:3f:5c:3f:a2:9d:38:ae:e3:8a:b8:bc:6b:dd:6b:23:e6:2c:
         4e:f0:e8:80:2f:20:a8:72:c5:69:e7:95:a7:9e:5c:ce:e2:27:
         29:93:1e:4f:19:2d:22:1e:52:b4:28:e2:24:f1:f7:f3:c5:9e:
         e7:dd:8a:b5:84:7b:43:a1:b0:83:84:a7:1a:6a:1c:0f:24:3f:
         56:bf:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:15 2026 by rpki-client