Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa
File:                     3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (raw, json)
Hash identifier:          wrEWuCEXvYyJtUKLCBlrSkqSpEscz1bfuLgaervIG1M=
Subject key identifier:   E9:B9:88:C1:95:40:78:6A:60:44:58:77:2C:CF:C4:37:72:6C:E9:01
Certificate issuer:       /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
Certificate serial:       2DB85517AC68815F86F6CDC0D523C6F879497F53
Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa
Signing time:             Sun 03 May 2026 03:11:14 +0000
ROA not before:           Sun 03 May 2026 03:06:14 +0000
ROA not after:            Sun 02 May 2027 03:11:14 +0000
asID:                     140464
IP address blocks:        103.153.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl
                          rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b8:55:17:ac:68:81:5f:86:f6:cd:c0:d5:23:c6:f8:79:49:7f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
        Validity
            Not Before: May  3 03:06:14 2026 GMT
            Not After : May  2 03:11:14 2027 GMT
        Subject: CN=E9B988C19540786A604458772CCFC437726CE901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:56:43:46:06:42:ea:50:27:a8:b0:e9:12:22:
                    d4:39:15:fd:ed:4f:f9:90:3a:ae:34:8b:b7:94:6d:
                    d8:c6:b4:10:02:8f:c2:0b:99:46:fe:f2:59:d5:59:
                    51:68:1c:be:96:67:6b:99:c6:d0:63:b3:91:11:bb:
                    d5:e8:79:41:01:36:9d:cd:b0:1a:5f:b4:2a:e9:81:
                    20:fa:bf:ef:50:ac:8b:97:61:e3:fc:bb:03:a4:68:
                    29:c8:94:28:4f:1e:bf:59:a8:55:b8:6d:a3:4d:26:
                    f0:42:b7:eb:c6:06:9f:94:ee:17:89:6d:ca:91:0b:
                    c6:f8:1e:0f:30:c3:bb:9b:9d:a2:86:67:3e:e0:a3:
                    61:4c:be:06:69:fb:3c:c7:ef:f4:90:e7:3a:36:e0:
                    7c:98:d7:70:0a:f4:5c:78:8b:f8:54:3f:49:d6:fa:
                    ee:20:5d:1d:32:2f:19:d4:ad:de:e1:f6:e5:3c:47:
                    1c:a3:ca:e8:fc:c4:bd:a8:4e:57:82:08:8f:e6:fe:
                    7f:d9:12:1b:2f:ff:bb:72:cb:49:30:11:09:dc:49:
                    d5:32:a8:bc:37:0b:ae:15:bd:12:f8:7c:a8:71:b5:
                    28:3c:d4:eb:89:47:8f:87:b5:e8:b8:92:57:8e:e6:
                    0d:17:8a:99:7c:c0:06:30:58:b8:97:d4:f2:8f:79:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B9:88:C1:95:40:78:6A:60:44:58:77:2C:CF:C4:37:72:6C:E9:01
            X509v3 Authority Key Identifier:
                keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:a5:b6:06:10:69:46:82:c7:26:58:3a:fa:e4:03:18:fb:c3:
         c6:2d:8f:0f:6c:64:fd:85:b4:b3:5a:45:9b:1d:57:6e:34:0f:
         84:85:8e:8a:58:2e:a0:c4:93:0c:af:b5:8f:17:ae:48:61:dc:
         6e:90:97:7b:a0:03:38:43:e0:9f:c2:c3:c1:86:d9:42:74:31:
         c5:bb:1f:8a:0d:61:59:e4:e6:0e:eb:fc:35:21:06:28:64:80:
         e7:04:09:4a:34:dc:3d:b8:69:1d:7d:e8:8a:3b:fd:40:eb:5e:
         52:79:53:91:75:08:ef:e4:6e:9c:cd:8e:36:19:33:d9:19:0e:
         34:ba:a0:c9:40:0f:88:26:47:e9:91:b2:58:82:27:2c:68:62:
         3c:1f:f0:d0:8d:88:75:fa:9d:33:d3:2d:b5:2a:a2:2b:72:1b:
         bc:17:bf:84:c2:c2:2d:b4:40:d4:93:72:2d:1e:ad:d1:8e:3e:
         cc:6f:04:78:a1:f0:6c:5e:a8:f4:ce:ad:60:44:f7:b6:e9:81:
         47:b9:dc:03:63:4d:d0:69:6d:1a:28:8b:dd:cb:ae:15:be:50:
         4e:87:8b:c9:33:90:c7:71:7d:a8:8c:61:2e:60:49:98:20:1a:
         7f:9f:d4:98:6d:b3:98:98:db:b1:55:a8:da:7d:fc:54:98:d7:
         12:5b:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:31 2026 by rpki-client