Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa
File:                     3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (raw, json)
Hash identifier:          LSsyk3LQXyf/xjsLYb7f1ejhi/raliKL2ndVhfqssnE=
Subject key identifier:   DE:F2:F4:42:92:A1:01:36:30:08:50:5F:20:59:33:86:E0:F3:68:F3
Certificate issuer:       /CN=832F3BA2D4A4666720A04785F7440BA744E9066D
Certificate serial:       55E9497F114BF4D2645B71FD08EADB65E2CB3B9E
Authority key identifier: 83:2F:3B:A2:D4:A4:66:67:20:A0:47:85:F7:44:0B:A7:44:E9:06:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa
Signing time:             Sun 03 May 2026 03:16:35 +0000
ROA not before:           Sun 03 May 2026 03:11:35 +0000
ROA not after:            Sun 02 May 2027 03:16:35 +0000
asID:                     18351
IP address blocks:        103.115.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.crl
                          rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e9:49:7f:11:4b:f4:d2:64:5b:71:fd:08:ea:db:65:e2:cb:3b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832F3BA2D4A4666720A04785F7440BA744E9066D
        Validity
            Not Before: May  3 03:11:35 2026 GMT
            Not After : May  2 03:16:35 2027 GMT
        Subject: CN=DEF2F44292A101363008505F20593386E0F368F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3c:4e:17:8c:29:a0:5a:8e:85:fb:0e:9f:68:
                    cc:79:e4:5f:c2:10:34:cc:fd:cd:fe:8f:1f:9f:4c:
                    f9:d6:d3:97:69:b6:8f:42:43:ef:cd:db:30:6b:3c:
                    2d:65:37:b6:11:26:09:bd:50:50:5d:e7:40:12:73:
                    0d:de:69:95:7c:e2:e3:42:32:7a:f6:b9:db:db:6e:
                    de:d1:60:2a:7f:6b:7a:80:fc:8c:8b:a7:2e:80:d5:
                    30:a0:9b:d8:06:fb:b1:2d:78:57:d9:35:a0:3c:2b:
                    ee:c7:76:05:ea:ff:b8:f7:8c:ab:35:c4:75:64:94:
                    fd:40:9a:ba:b2:83:35:75:d6:ee:3e:98:dd:5e:52:
                    0a:6f:12:56:a4:1c:35:1a:9d:56:a9:59:9b:96:36:
                    56:d9:3d:4b:c8:58:a6:04:c9:c6:53:b2:0b:73:b6:
                    ae:1f:56:73:59:34:76:a1:29:ed:1c:e2:62:dd:73:
                    8a:c6:5c:b8:44:69:e9:94:3a:b0:10:d7:0a:0c:81:
                    26:f2:36:52:ac:5d:f3:13:82:05:0e:62:d1:d2:a0:
                    a1:76:40:28:c0:71:d1:70:96:8c:14:d8:4a:6a:73:
                    1c:84:b0:11:df:f0:ac:ac:a8:ac:41:9e:58:5f:72:
                    d9:25:86:08:ce:47:11:49:b6:68:25:5d:49:fd:bf:
                    4e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F2:F4:42:92:A1:01:36:30:08:50:5F:20:59:33:86:E0:F3:68:F3
            X509v3 Authority Key Identifier:
                keyid:83:2F:3B:A2:D4:A4:66:67:20:A0:47:85:F7:44:0B:A7:44:E9:06:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:c6:e1:65:ae:56:f6:72:7b:45:ef:cb:07:78:6d:17:2a:fe:
         e1:cf:6b:d5:29:b0:e5:74:0d:9b:0b:f0:44:72:26:5d:5f:50:
         e8:9a:80:63:c9:d5:56:0c:27:0e:15:98:3d:48:96:ce:9c:f2:
         2c:29:db:90:e1:16:f0:d7:a1:6a:52:0a:e5:2d:0b:08:fe:cc:
         18:72:f2:08:c3:cc:4f:75:75:7a:43:07:b0:86:61:dd:42:b7:
         76:23:59:43:ce:bc:da:51:76:ab:90:67:4a:a7:bc:16:08:42:
         b3:50:47:70:28:47:53:b1:60:a1:d0:2a:06:6a:cc:7a:eb:57:
         2e:4c:1b:74:3e:1c:bf:47:ad:68:fe:a2:98:3b:ff:ce:f3:9e:
         de:0b:a6:ec:65:e7:16:96:9d:8b:95:3d:92:97:3e:e0:96:4e:
         d6:cc:cc:e4:ed:60:f9:c2:58:65:0a:7f:61:53:1b:02:d0:39:
         b2:f4:e9:de:3c:ae:25:99:8e:78:d1:74:6c:96:ad:c3:c6:26:
         56:8d:ee:24:21:e7:55:ef:04:14:44:7f:fa:85:9a:79:51:1f:
         c8:8f:e5:d8:cb:d5:d9:fe:a6:75:3c:5a:b4:08:f0:b0:85:5e:
         34:e4:14:d5:de:b8:fa:2d:49:55:99:30:61:5e:86:a9:87:38:
         b6:3e:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:55 2026 by rpki-client