Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa
File:                     3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (raw, json)
Hash identifier:          noFGhrWS2shsN12iREyShnTzBgPrE7wgh7GcY82aKhc=
Subject key identifier:   C6:EC:D3:B8:6B:DB:10:7B:60:7C:0A:D7:1B:87:71:D0:BE:77:90:5B
Certificate issuer:       /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
Certificate serial:       68299B546B51A8B0E8257F851152EC12E053B2A6
Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa
Signing time:             Sun 03 May 2026 03:17:36 +0000
ROA not before:           Sun 03 May 2026 03:12:36 +0000
ROA not after:            Sun 02 May 2027 03:17:36 +0000
asID:                     133354
IP address blocks:        103.217.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl
                          rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:29:9b:54:6b:51:a8:b0:e8:25:7f:85:11:52:ec:12:e0:53:b2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
        Validity
            Not Before: May  3 03:12:36 2026 GMT
            Not After : May  2 03:17:36 2027 GMT
        Subject: CN=C6ECD3B86BDB107B607C0AD71B8771D0BE77905B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:58:a7:9c:e5:74:fe:95:37:d2:62:fb:c4:
                    63:b5:cd:53:5b:f5:a9:36:b9:9d:5e:11:78:4d:c5:
                    84:68:8b:18:04:7e:9f:84:d4:00:09:f4:20:60:b7:
                    7b:d8:76:d2:2d:85:94:f9:3e:0e:a8:1b:78:8e:f5:
                    cb:6f:e6:98:01:a7:69:be:bd:4a:ec:a0:36:f3:32:
                    19:ee:03:c7:1d:32:ff:19:63:39:39:2f:0d:06:ef:
                    f0:22:45:23:0e:83:38:d6:b2:d2:34:f7:3e:a4:69:
                    cf:c5:5b:fc:50:20:f7:20:d5:8c:26:be:10:1e:be:
                    6e:f7:0f:17:9d:61:b1:3a:16:f6:da:7e:84:6e:19:
                    db:a5:77:57:6d:f0:2a:c6:7e:cf:0d:fa:f8:ca:b7:
                    45:83:79:78:6e:48:dc:15:47:8e:a8:af:fe:ee:5a:
                    3e:73:c9:c6:47:46:3b:78:9e:4d:99:ba:92:c9:32:
                    4d:bc:03:63:86:a4:88:5c:0d:1d:e0:71:a2:a2:b9:
                    b0:84:f8:69:18:2b:6a:79:17:9d:b3:b7:29:95:60:
                    ae:17:91:70:77:44:55:da:c1:dc:db:a0:6a:67:4c:
                    14:39:bd:e4:13:36:3d:18:87:7a:3e:fa:00:2e:2f:
                    81:0f:12:a5:ec:3a:ca:2f:9f:a7:28:78:b5:10:7e:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EC:D3:B8:6B:DB:10:7B:60:7C:0A:D7:1B:87:71:D0:BE:77:90:5B
            X509v3 Authority Key Identifier:
                keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:97:a1:62:ac:ba:1e:76:0e:61:36:04:21:be:1f:dd:ab:
         9e:16:d0:10:19:11:ce:aa:de:8d:bb:dc:b0:90:f9:f0:6c:65:
         ed:10:9c:ca:e1:6f:df:76:ff:ec:9d:de:1f:59:c0:1e:da:75:
         a2:d7:d1:7d:81:24:0d:da:ce:fe:90:f2:85:b0:f6:1b:43:fe:
         12:1f:00:5d:bf:09:a1:de:e6:4c:5e:68:68:4b:8d:fd:b7:80:
         6f:bd:18:d7:df:06:64:e1:5e:fe:c3:ed:86:e4:9f:54:60:4e:
         f1:d3:3e:73:33:68:52:96:bd:ec:7f:01:7f:f6:f9:9a:c9:d1:
         00:26:00:20:06:3c:3a:84:92:6c:35:bf:6a:d5:d6:60:cd:06:
         4e:88:b1:05:fa:0f:43:d6:47:56:93:c7:b9:91:2b:8e:a2:de:
         cd:48:6e:2b:b1:3a:8e:88:99:e0:95:5c:1c:e0:07:c1:2e:c6:
         87:b6:9b:2b:16:0b:26:7a:d5:36:6f:f5:77:85:89:25:13:43:
         4a:2a:e6:98:82:95:e3:ba:17:7a:74:1a:eb:83:61:9f:0d:e0:
         14:15:e8:39:1f:18:b1:71:19:58:c3:7a:e5:2f:71:ac:db:16:
         05:b3:4b:5f:66:de:5a:a6:73:ae:9c:ee:f6:39:ac:70:15:a8:
         10:6e:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:08 2026 by rpki-client