Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa
File:                     3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (raw, json)
Hash identifier:          WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=
Subject key identifier:   C2:B1:34:E4:C9:5B:F9:A5:8A:05:CF:F8:C9:AF:B9:82:55:D7:B7:08
Certificate issuer:       /CN=60E799376F38EB181976A659060E6D998B4DB2D3
Certificate serial:       513E5F51688F03C272F85CA673D8D50353E2430D
Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa
Signing time:             Sun 03 May 2026 03:14:54 +0000
ROA not before:           Sun 03 May 2026 03:09:54 +0000
ROA not after:            Sun 02 May 2027 03:14:54 +0000
asID:                     139433
IP address blocks:        103.144.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
                          rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3e:5f:51:68:8f:03:c2:72:f8:5c:a6:73:d8:d5:03:53:e2:43:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3
        Validity
            Not Before: May  3 03:09:54 2026 GMT
            Not After : May  2 03:14:54 2027 GMT
        Subject: CN=C2B134E4C95BF9A58A05CFF8C9AFB98255D7B708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:c6:34:16:e2:84:49:eb:6a:43:59:42:6c:
                    36:a8:87:09:66:95:90:82:32:2c:22:31:5a:26:1c:
                    1b:8c:27:01:84:27:4b:ef:7f:05:db:0c:f4:52:33:
                    fc:e8:38:62:fd:a7:19:58:83:e2:8e:5e:ae:9d:86:
                    ac:41:0a:60:bc:af:d2:8c:b1:44:7d:ed:73:a9:6c:
                    9a:86:c3:ba:65:15:cc:27:4e:27:19:9f:e3:c2:43:
                    2c:1d:c2:ac:a2:ba:74:7d:9f:47:98:d0:21:49:a6:
                    8b:41:9d:1b:cb:06:5d:c4:b6:48:c7:c6:e4:0e:76:
                    8f:5d:a9:a9:d5:a0:52:e7:ab:2d:3d:76:16:63:20:
                    d2:56:ba:d7:5a:1b:c7:ff:9e:8c:22:0e:a7:8b:b3:
                    8f:9c:fa:01:2a:76:fe:41:5e:ec:01:e8:fa:79:8f:
                    1b:09:36:73:af:4b:16:a3:cd:f8:8a:62:d6:3d:a5:
                    8c:17:dc:22:76:1e:48:bb:69:dd:a8:b2:e3:df:da:
                    12:0b:d7:fd:f3:c6:c1:05:eb:79:69:30:74:02:0b:
                    75:36:d2:30:72:8b:7a:90:13:25:ec:e7:7e:e2:ac:
                    91:f5:2a:49:9d:25:a3:27:7a:4c:d7:2d:20:04:f7:
                    c4:39:28:03:f7:b7:8b:40:0a:4b:5f:6a:7e:0d:d6:
                    f9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B1:34:E4:C9:5B:F9:A5:8A:05:CF:F8:C9:AF:B9:82:55:D7:B7:08
            X509v3 Authority Key Identifier:
                keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:88:73:d5:8a:2b:28:10:29:ac:da:c5:e5:d3:0e:51:d4:a9:
         24:38:6c:35:c7:f3:53:d3:25:6f:31:95:e7:97:a5:97:f8:94:
         d3:76:18:be:09:a3:c6:25:7a:e2:a2:7b:5b:10:9d:0c:96:2f:
         e1:6a:c5:44:8a:0a:3c:b9:33:ba:bf:49:30:38:40:8e:27:1e:
         08:4b:21:a0:01:51:13:8a:1e:f4:36:71:7e:b5:d9:a6:c1:92:
         28:e7:5d:43:ba:bd:b3:58:49:18:d5:11:10:35:3f:14:6e:6a:
         3b:ed:15:b2:19:99:06:af:42:8d:19:54:bc:ad:06:da:f4:9a:
         fb:bd:1f:c4:eb:7d:43:bc:b8:bd:8c:dd:ab:91:30:21:1e:2a:
         41:01:12:b5:c7:e3:d0:a6:79:65:1e:08:20:2e:47:d6:b7:4c:
         1d:39:72:d4:13:b8:1b:d2:1e:1c:de:04:49:b4:8f:c2:f8:76:
         34:87:2f:fd:77:46:b9:0e:7d:d1:98:6f:da:85:b3:78:ab:49:
         d5:ae:96:63:0f:81:20:42:df:33:66:b8:81:af:77:b8:b2:57:
         77:3d:9f:23:08:9b:b6:f6:54:20:ce:0c:9a:5c:43:ab:d0:fe:
         e8:02:34:97:c1:fb:0b:15:52:e5:f7:a3:b4:9a:47:34:dc:82:
         ac:f1:c1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:09 2026 by rpki-client