Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa
File:                     3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (raw, json)
Hash identifier:          dmGHcD14vklK6CHGP2dwt3SoTbZEUdzxsUS+JroI8zo=
Subject key identifier:   88:60:52:23:A9:41:FD:DF:28:2E:52:16:08:AC:61:03:52:C5:0C:99
Certificate issuer:       /CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC
Certificate serial:       74EF513BFDB30311CA02E1EF9F704EC709A1D51B
Authority key identifier: 45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa
Signing time:             Sun 03 May 2026 03:19:12 +0000
ROA not before:           Sun 03 May 2026 03:14:12 +0000
ROA not after:            Sun 02 May 2027 03:19:12 +0000
asID:                     140429
IP address blocks:        103.151.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl
                          rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ef:51:3b:fd:b3:03:11:ca:02:e1:ef:9f:70:4e:c7:09:a1:d5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC
        Validity
            Not Before: May  3 03:14:12 2026 GMT
            Not After : May  2 03:19:12 2027 GMT
        Subject: CN=88605223A941FDDF282E521608AC610352C50C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:5c:cc:6b:a5:e4:d8:f5:a6:db:7b:f0:8a:
                    b5:4c:36:81:33:70:99:0f:91:9e:1f:3a:f4:2c:e9:
                    83:f9:86:c2:12:7d:c3:bd:1f:0c:ed:ad:60:df:d1:
                    bf:ff:c9:b0:1e:e3:87:ee:02:3e:bf:b2:4d:cb:70:
                    c7:a7:c1:3e:7d:5a:a3:f1:c4:7b:ad:19:b5:bd:2a:
                    87:1f:cc:e3:4a:3f:74:23:08:82:d9:5b:43:5a:ad:
                    27:b9:8f:b0:b0:3b:7a:78:37:17:bd:94:e7:d2:ad:
                    09:e4:a9:98:8d:34:bb:3c:76:e4:64:43:90:08:2a:
                    15:54:30:47:dc:7c:61:a8:08:29:dd:e4:ad:86:3f:
                    70:4a:3a:4e:66:56:20:b6:02:ce:16:b7:92:55:55:
                    d1:ea:40:65:69:6c:2d:3a:b7:fb:01:06:b7:8b:72:
                    02:96:5b:dd:2a:32:52:05:2b:14:2b:c5:e2:ac:56:
                    9c:3e:7a:24:b8:c2:32:5c:56:39:6c:a2:9c:84:f5:
                    e6:cf:90:e6:af:37:55:58:7b:71:a8:cb:a3:1a:a6:
                    65:fd:96:e1:8c:b1:35:39:d6:25:ad:5b:12:5d:fc:
                    f5:1e:ec:7b:7d:65:59:7e:51:15:b3:de:6d:df:95:
                    c0:b6:4c:f4:16:34:b9:bd:32:f9:7d:e7:2c:19:cf:
                    9a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:60:52:23:A9:41:FD:DF:28:2E:52:16:08:AC:61:03:52:C5:0C:99
            X509v3 Authority Key Identifier:
                keyid:45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:d9:40:6b:3e:e8:4c:c1:24:ae:30:e9:2c:54:31:86:be:5e:
         e7:5d:6c:24:0c:cc:ed:a8:98:d5:d6:a7:35:3f:27:a5:64:03:
         45:0b:1a:48:ca:a7:28:62:40:d7:e1:92:28:72:23:29:81:c5:
         22:0a:9f:31:b4:58:27:72:40:d0:bb:d4:f1:c0:60:51:6a:3b:
         67:1b:cd:0b:47:95:d2:08:04:98:fe:db:f7:d9:f3:1d:c0:6f:
         76:13:b1:33:43:0c:73:ab:96:58:9d:cb:6c:02:65:a4:5c:e1:
         23:c2:08:90:43:62:50:67:56:f7:10:30:48:3b:ce:cf:a5:5f:
         1d:52:11:81:8c:85:3b:32:16:26:7d:59:bd:24:bb:db:e4:37:
         bb:64:b4:39:a0:4d:49:54:58:7f:a5:50:08:73:33:da:ce:1a:
         98:ef:af:be:1d:be:6f:14:18:36:73:02:8e:d5:83:28:8c:be:
         e3:6d:f9:94:b5:4c:46:85:bf:e4:98:f0:57:5f:37:40:22:7f:
         42:7c:8b:dd:83:53:30:36:7c:6c:7b:28:b3:af:54:8a:3d:4d:
         af:7b:98:f0:36:6b:e9:81:29:2b:de:e5:1b:90:d7:16:81:9c:
         00:f5:81:cb:b8:e0:64:a6:73:65:7a:d6:ce:c6:38:8f:e8:8d:
         21:4a:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:09 2026 by rpki-client