Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa
File:                     3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (raw, json)
Hash identifier:          E4KMhggOb7nlhIiO3VBqj+3GAnMNf5AMaTtZTYutCpg=
Subject key identifier:   F7:76:3A:46:DC:29:8E:0F:94:A1:E5:EB:92:CB:F8:6E:B7:B3:AE:17
Certificate issuer:       /CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C
Certificate serial:       251770DD19A0290D201B5EEA86DB4DAA83775CB9
Authority key identifier: 0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa
Signing time:             Sun 03 May 2026 03:10:47 +0000
ROA not before:           Sun 03 May 2026 03:05:47 +0000
ROA not after:            Sun 02 May 2027 03:10:47 +0000
asID:                     138118
IP address blocks:        103.229.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl
                          rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:17:70:dd:19:a0:29:0d:20:1b:5e:ea:86:db:4d:aa:83:77:5c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C
        Validity
            Not Before: May  3 03:05:47 2026 GMT
            Not After : May  2 03:10:47 2027 GMT
        Subject: CN=F7763A46DC298E0F94A1E5EB92CBF86EB7B3AE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:2f:95:23:93:f7:c7:08:10:9e:c4:9a:09:
                    7c:24:c6:a7:45:66:5d:6c:66:66:c0:5e:07:cf:46:
                    9d:fc:fd:ad:77:22:ec:33:8d:41:a5:1a:8b:2c:b8:
                    ba:a2:68:8f:ef:07:c3:f4:2c:1a:cc:85:af:46:2a:
                    d9:ae:67:ad:10:dd:10:ac:d4:cb:28:68:20:ac:cd:
                    ce:4f:b4:ab:f5:71:7b:07:3a:93:6e:10:34:32:bc:
                    83:42:1f:98:fd:25:a9:5b:ae:73:ac:d5:46:a9:da:
                    be:82:47:02:5c:5b:7f:52:b5:74:eb:80:16:d6:98:
                    a2:78:be:e7:59:71:a4:9d:16:35:21:6b:fa:eb:fe:
                    10:d7:f0:f1:9e:e1:b7:e6:c7:f7:d7:11:1c:ea:bd:
                    ca:13:09:b9:0b:a7:e3:00:43:27:d2:63:75:8d:30:
                    ca:51:da:ba:5e:78:7f:7a:39:31:ec:ec:b7:4f:5c:
                    c9:cc:57:2b:9d:f6:2c:14:00:7f:28:8d:9c:15:23:
                    30:a9:54:04:7e:11:9e:b6:6c:10:eb:ae:0a:4e:b4:
                    c4:55:31:91:48:e6:7e:23:4e:de:18:14:aa:0d:f6:
                    29:2c:06:76:40:ba:77:4f:90:b5:fd:26:d8:67:ce:
                    b4:53:32:5a:15:f9:97:03:54:d1:f6:a5:4c:97:c1:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:76:3A:46:DC:29:8E:0F:94:A1:E5:EB:92:CB:F8:6E:B7:B3:AE:17
            X509v3 Authority Key Identifier:
                keyid:0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:75:b8:e0:20:22:c2:85:50:eb:e0:3b:ad:bb:07:94:af:d0:
         8a:78:fe:19:e6:28:65:b8:71:b4:f8:a9:79:70:64:ea:78:eb:
         64:45:f1:4b:8a:16:4f:ec:82:1e:f5:ac:08:2e:81:9c:3d:40:
         eb:1d:59:ce:11:09:c1:4a:e7:6f:86:23:e7:07:54:65:1d:14:
         3a:15:db:25:be:85:1c:bd:a8:ca:5c:ac:95:44:fe:80:12:e7:
         76:11:de:45:5b:96:bf:1f:12:f1:0e:5c:23:58:99:a7:88:ac:
         17:39:7a:27:fe:54:92:f0:66:96:9d:05:da:3a:40:46:0b:8c:
         29:3e:0f:3e:89:9f:e1:ef:18:af:10:83:cb:31:85:ac:c2:79:
         a4:fb:f8:de:02:76:9f:3b:90:a8:da:f2:21:5d:c1:0a:ac:f3:
         c6:52:64:b9:49:d7:ad:6d:7e:93:fc:fd:52:e7:43:89:ad:a6:
         40:48:38:9b:e5:69:b7:f8:07:0b:b3:59:37:67:1d:29:1d:f0:
         8a:4f:5b:1f:d4:ce:2b:72:1d:02:c8:22:cc:cb:80:c1:d6:b1:
         a9:ef:be:64:32:e0:b5:86:37:33:1a:06:66:8b:3f:c2:f6:16:
         c0:d5:26:2a:87:7d:e8:ae:a6:8c:95:9b:a7:6a:80:a6:ca:f5:
         b3:b3:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:23 2026 by rpki-client