Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32332d3233203d3e20313530353537.roa
File:                     3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (raw, json)
Hash identifier:          aB7QEaSEcJTWbjfIxBku5UcRO6NDRrQsqaho45FCjZI=
Subject key identifier:   62:A7:89:DD:91:A1:62:07:84:7C:FE:FD:B3:55:F2:99:B7:A0:46:6A
Certificate issuer:       /CN=2FE1FA7D4DD3388355BABAD73020013D485C168C
Certificate serial:       5FC43034F12B3436D2BDBA31C53E428A6DCBADD2
Authority key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32332d3233203d3e20313530353537.roa
Signing time:             Sun 03 May 2026 03:12:16 +0000
ROA not before:           Sun 03 May 2026 03:07:16 +0000
ROA not after:            Sun 02 May 2027 03:12:16 +0000
asID:                     150557
IP address blocks:        103.95.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl
                          rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c4:30:34:f1:2b:34:36:d2:bd:ba:31:c5:3e:42:8a:6d:cb:ad:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C
        Validity
            Not Before: May  3 03:07:16 2026 GMT
            Not After : May  2 03:12:16 2027 GMT
        Subject: CN=62A789DD91A16207847CFEFDB355F299B7A0466A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:58:6b:ed:d4:b8:ae:89:3f:46:b2:44:ae:ab:
                    72:ee:56:c8:d9:d2:08:3f:a8:e3:ae:ab:b8:73:66:
                    7c:a1:8c:f3:28:cb:b2:fa:cf:80:a7:1d:fc:c1:06:
                    26:c4:e9:35:73:18:99:5b:f7:ab:b2:86:28:7f:88:
                    25:18:9e:b8:b7:9f:6e:79:22:ad:c4:02:60:02:f3:
                    5d:be:ac:73:10:9d:6f:44:9c:27:84:0b:ba:80:aa:
                    45:b7:50:ec:7e:3f:b0:d8:b4:41:3e:e9:6c:e0:22:
                    b6:b6:d3:b2:eb:5a:93:7b:48:24:43:46:4f:0d:8a:
                    c2:7b:45:c9:e7:cc:60:32:a6:9e:78:36:a6:0b:b4:
                    c4:39:ff:19:15:5c:3c:04:e1:10:04:fb:31:54:a2:
                    1a:cb:a2:b7:56:cb:5c:ca:f5:6b:e9:44:ed:b5:34:
                    66:79:1e:d8:66:51:ab:20:8b:ac:61:c1:98:33:d3:
                    8e:54:86:0a:e1:bf:bf:51:fe:70:ba:e1:cd:a7:18:
                    61:21:84:c6:f3:fd:34:c6:0e:1f:42:9c:cf:e1:7a:
                    14:5a:f4:9d:5f:ec:b6:ea:e9:b1:c8:e2:d5:fd:52:
                    44:ba:61:be:36:c6:3e:36:5e:97:49:a3:7a:d2:a0:
                    5a:91:e4:d2:68:71:ce:25:d7:c7:41:0f:90:6d:64:
                    5c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A7:89:DD:91:A1:62:07:84:7C:FE:FD:B3:55:F2:99:B7:A0:46:6A
            X509v3 Authority Key Identifier:
                keyid:2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32332d3233203d3e20313530353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:f4:49:99:92:96:cd:e3:01:ae:58:10:1b:53:69:25:d2:8d:
         d4:f6:7a:54:ec:d8:b9:0f:de:df:ea:1b:73:36:09:a2:07:c6:
         d1:16:66:29:66:61:a9:f4:49:a3:4e:ef:de:a6:48:26:aa:f8:
         8c:bd:a0:28:d2:05:c7:9b:9d:51:7a:0a:47:48:84:d1:28:fd:
         d8:57:ef:10:a9:c2:51:ff:8b:e0:d6:8f:2e:6f:8a:e8:4c:f9:
         ea:4a:0e:35:2b:e6:c5:f8:7f:08:64:f8:49:38:04:74:03:b6:
         6a:1f:60:c9:18:2f:45:7d:a3:34:56:cb:64:71:ce:b4:49:03:
         49:41:12:90:49:43:4c:b3:c6:ce:40:ff:2e:33:00:e6:71:f4:
         b9:6e:f0:07:9e:66:33:96:45:e6:63:94:07:13:33:a7:09:bd:
         68:5f:28:de:96:01:8d:e7:c0:6a:0e:9e:0c:38:ed:19:42:03:
         ed:6b:11:4a:5c:bd:24:2f:4e:ef:0e:1c:8c:6d:40:d3:48:e4:
         dc:68:5a:65:7c:1f:02:0c:9c:ef:10:6c:a0:bd:5c:c8:1d:7a:
         f8:8f:49:71:b0:10:c7:af:f1:b5:2c:fe:da:0d:55:c4:a9:bc:
         26:9a:9c:5e:a0:47:f5:65:cc:28:24:df:4e:d3:a0:46:d9:05:
         ea:a5:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:27:30 2026 by rpki-client