Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa
File:                     3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (raw, json)
Hash identifier:          WcB0PgJyyinAEoffJz7GUrERTjEBi7z+T4dwRpZHAHk=
Subject key identifier:   28:F0:FC:79:87:F2:CA:95:68:40:0F:05:42:4B:40:82:82:A7:FA:B1
Certificate issuer:       /CN=00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC
Certificate serial:       5BFA48093663B41EF0DF5C10BB6C841B4862D557
Authority key identifier: 00:FC:B0:85:8F:55:5F:1D:9C:D4:26:A3:D5:26:EF:F1:AA:FC:C7:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa
Signing time:             Sun 03 May 2026 03:14:17 +0000
ROA not before:           Sun 03 May 2026 03:09:17 +0000
ROA not after:            Sun 02 May 2027 03:14:17 +0000
asID:                     151585
IP address blocks:        103.204.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.crl
                          rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fa:48:09:36:63:b4:1e:f0:df:5c:10:bb:6c:84:1b:48:62:d5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC
        Validity
            Not Before: May  3 03:09:17 2026 GMT
            Not After : May  2 03:14:17 2027 GMT
        Subject: CN=28F0FC7987F2CA9568400F05424B408282A7FAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ed:bd:03:80:9b:1c:54:63:8f:92:e9:60:7c:
                    42:ea:b0:4e:9e:63:30:8d:0c:dd:18:fb:47:81:26:
                    f0:1e:8b:6a:ab:8f:bf:11:86:75:18:05:2d:45:a2:
                    e5:d6:3f:82:49:03:09:f8:9b:91:0e:6d:ce:d3:f2:
                    df:bb:0d:9a:ca:90:51:7b:b6:8a:72:91:80:ba:8e:
                    31:42:11:b9:7d:31:36:80:11:66:93:f3:28:2c:1f:
                    5b:89:4e:d3:e5:d3:88:0b:95:11:35:b4:aa:13:56:
                    cc:54:33:ae:a1:b2:0d:79:be:2c:1d:c2:74:d5:e2:
                    a4:99:31:d7:df:8e:57:c4:d5:f1:e5:bd:f6:2a:9f:
                    33:f7:c2:b7:17:d2:77:e1:e3:21:d8:ff:56:d0:22:
                    3a:da:46:69:79:85:71:6d:5e:bb:b1:96:28:e4:0e:
                    73:be:49:09:73:b9:29:59:cf:18:3a:92:b7:dc:aa:
                    ba:31:55:e4:48:94:6d:38:6a:a7:e8:15:55:f3:f4:
                    bf:bd:a4:7a:b6:91:6a:5e:fe:51:d7:bf:6d:43:af:
                    3e:5f:8c:bc:ac:4a:85:d2:ad:d0:c6:c9:98:96:94:
                    8d:81:15:62:a6:1e:5f:36:ae:60:9f:23:d0:b7:9e:
                    7d:3e:ba:ed:47:1a:94:f3:32:0c:83:5e:59:cc:27:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F0:FC:79:87:F2:CA:95:68:40:0F:05:42:4B:40:82:82:A7:FA:B1
            X509v3 Authority Key Identifier:
                keyid:00:FC:B0:85:8F:55:5F:1D:9C:D4:26:A3:D5:26:EF:F1:AA:FC:C7:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:90:a9:1f:dd:ea:69:1a:49:15:1c:18:c9:4b:f0:bc:a6:
         a0:95:07:07:8c:96:04:54:63:d5:6f:cb:46:86:2e:a7:08:49:
         c5:db:d6:07:5c:08:a5:7b:44:2d:78:4d:62:41:0d:fe:f9:11:
         cb:10:9f:2c:de:91:ae:c4:bd:63:1a:5d:0a:d0:15:7a:ec:06:
         f2:d3:40:44:9a:8d:0e:f4:2f:6e:5f:4f:cf:5d:73:70:c1:23:
         0a:3b:7a:22:5f:fb:28:1a:24:52:97:09:bc:de:b8:b0:e7:49:
         17:68:0a:86:b7:17:34:5f:07:3b:f1:ae:60:da:48:48:f9:75:
         96:f6:6a:5c:75:37:0f:55:bb:f1:7d:0d:e5:0c:2c:0b:ee:6d:
         02:0d:61:04:66:97:98:8d:01:fc:78:27:bc:d6:df:bc:da:19:
         33:21:95:ae:e6:63:0c:44:e2:5f:fb:1f:81:85:dd:50:33:83:
         a4:a4:02:9e:ce:03:6e:5b:85:a4:05:a5:63:d1:b4:26:fc:db:
         6f:44:8e:8a:82:fd:2a:24:1d:30:2b:58:1f:04:d1:a5:8b:d7:
         48:05:19:0d:98:34:42:d2:3f:46:6c:07:a4:b3:b7:0c:7d:fe:
         64:06:78:ed:10:97:40:aa:f3:d0:8d:25:b2:41:e0:90:08:24:
         68:45:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:27 2026 by rpki-client