Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa
File:                     3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (raw, json)
Hash identifier:          5N/+NKK+QKHMpVx1kO3hDw5i9CbZNo+IX8Ypb8V9rXI=
Subject key identifier:   40:85:72:C6:3A:6E:4F:33:71:F2:29:95:AA:08:4D:7B:95:E9:E4:ED
Certificate issuer:       /CN=04464393DEE86F9C4534E90FA657647430EE82F1
Certificate serial:       4D65425183C1965AB2FFC7326B591D2BB0A1E7CF
Authority key identifier: 04:46:43:93:DE:E8:6F:9C:45:34:E9:0F:A6:57:64:74:30:EE:82:F1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa
Signing time:             Sun 03 May 2026 03:18:57 +0000
ROA not before:           Sun 03 May 2026 03:13:57 +0000
ROA not after:            Sun 02 May 2027 03:18:57 +0000
asID:                     23954
IP address blocks:        103.191.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.crl
                          rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:65:42:51:83:c1:96:5a:b2:ff:c7:32:6b:59:1d:2b:b0:a1:e7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04464393DEE86F9C4534E90FA657647430EE82F1
        Validity
            Not Before: May  3 03:13:57 2026 GMT
            Not After : May  2 03:18:57 2027 GMT
        Subject: CN=408572C63A6E4F3371F22995AA084D7B95E9E4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:5b:e6:2a:99:42:a0:c4:3a:54:27:48:8f:
                    d9:c2:35:5f:4e:3a:2f:d3:01:3b:11:c6:a4:4d:6f:
                    97:95:70:42:14:65:da:f5:3a:f0:66:a7:c3:62:b2:
                    36:cc:4c:05:80:02:ee:d7:68:52:18:4c:8c:9d:ba:
                    12:2d:e3:cd:30:a7:f2:23:38:a8:7c:97:2a:71:23:
                    b5:70:a9:6d:fd:c8:54:a3:07:f2:13:12:a1:7c:7a:
                    16:7b:65:f8:a4:b1:aa:6d:e3:f3:7c:9a:0c:cf:38:
                    ae:21:a3:29:8c:20:8e:f8:39:25:dd:2c:d3:79:4a:
                    11:4c:aa:05:18:22:12:f8:da:1e:7d:6b:bc:5e:90:
                    aa:01:b5:3a:82:e7:c7:14:91:5e:08:b5:71:62:be:
                    a5:65:d9:f3:b3:ba:96:f5:54:c2:d6:ee:07:6c:88:
                    ed:16:8d:c7:c9:94:4b:44:77:1b:6d:a7:e0:e7:80:
                    a9:c2:2d:5e:37:49:cd:2c:f4:60:30:f5:d7:13:58:
                    7d:5d:f5:0d:b5:07:06:3c:86:90:63:ff:cb:a8:39:
                    e2:a0:a5:01:5d:c4:e5:0e:9f:07:00:10:81:ce:46:
                    d3:4f:a5:15:3f:75:ea:00:ce:ce:51:31:12:7c:ce:
                    c7:ff:fb:ef:11:8c:6c:c3:11:0f:f2:fb:6e:2b:fb:
                    d2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:85:72:C6:3A:6E:4F:33:71:F2:29:95:AA:08:4D:7B:95:E9:E4:ED
            X509v3 Authority Key Identifier:
                keyid:04:46:43:93:DE:E8:6F:9C:45:34:E9:0F:A6:57:64:74:30:EE:82:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:54:96:c4:de:3b:90:31:a1:98:8d:9b:54:4e:ad:41:21:47:
         cc:0b:c4:91:c7:6e:5f:6f:51:64:9a:87:9d:74:bd:9e:93:de:
         34:bf:1f:2b:ed:9e:76:f7:b8:cb:10:25:21:17:c4:80:0b:59:
         a9:26:bc:a6:2e:8b:d4:bb:d1:f2:53:0d:83:00:0d:46:ef:86:
         a6:4a:b9:e8:b8:c8:af:b1:35:44:e3:8a:b8:13:95:ed:a1:94:
         18:97:07:56:c8:3c:ba:0a:6f:1d:e9:a6:7f:35:1c:9c:d4:ce:
         5b:f5:1d:4d:ac:7c:3f:26:cf:aa:85:e9:22:61:e1:e2:87:15:
         56:80:b5:3f:44:94:ee:05:7e:9a:51:f3:e7:87:c0:ee:11:33:
         4e:c3:67:6f:b6:0a:63:4a:e3:a9:02:fa:c4:ef:1c:18:60:00:
         34:98:ad:a1:4d:4a:e3:8b:63:86:f2:b5:4e:9a:2f:3a:3d:a8:
         15:74:e8:c1:f8:c3:5f:a6:3f:a5:6b:94:64:a7:aa:70:d3:59:
         65:1a:44:d1:5c:42:52:30:88:04:73:68:4e:a9:7b:eb:fb:1f:
         c4:2d:9f:ad:2d:e9:c1:b8:50:52:3b:17:65:4e:40:33:37:86:
         aa:11:15:0d:75:79:57:f5:f9:3c:2d:d5:76:d4:84:ad:cd:95:
         f2:7e:b5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:03 2026 by rpki-client