Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa
File:                     3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (raw, json)
Hash identifier:          5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=
Subject key identifier:   28:7C:06:8B:39:6F:99:84:2C:DA:83:57:A2:B1:A9:98:28:FE:F6:AE
Certificate issuer:       /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF
Certificate serial:       1B1E3F9DB618AD83F755A4347B5091CA9A23FDC2
Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa
Signing time:             Sun 03 May 2026 03:19:14 +0000
ROA not before:           Sun 03 May 2026 03:14:14 +0000
ROA not after:            Sun 02 May 2027 03:19:14 +0000
asID:                     140469
IP address blocks:        103.153.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl
                          rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1e:3f:9d:b6:18:ad:83:f7:55:a4:34:7b:50:91:ca:9a:23:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF
        Validity
            Not Before: May  3 03:14:14 2026 GMT
            Not After : May  2 03:19:14 2027 GMT
        Subject: CN=287C068B396F99842CDA8357A2B1A99828FEF6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:9b:df:78:dc:6b:4f:40:f8:c4:0c:3c:89:
                    ce:a6:df:38:02:f9:b6:8a:01:e9:4e:0a:98:2e:29:
                    ce:62:cb:8a:bb:73:df:f8:63:e2:4a:ad:02:48:3b:
                    cd:13:31:53:a8:8a:90:3c:f3:d3:48:51:a2:78:e9:
                    1b:52:7b:d8:af:d2:cb:06:28:43:b7:a6:77:9c:21:
                    80:e1:c3:e8:c3:f8:eb:f0:5e:35:8b:bc:ee:c5:e0:
                    f8:86:a1:0d:01:e9:ea:64:57:de:eb:c1:29:00:37:
                    34:03:e2:fd:92:a1:80:21:0d:9e:bb:2e:3b:5e:4f:
                    a0:13:f9:3d:7f:76:f6:ee:5f:c3:18:67:03:1b:32:
                    a9:d2:8a:bf:16:25:6d:78:82:31:22:eb:58:e2:3b:
                    b2:4d:6e:45:c1:0e:f8:2d:00:9f:33:c4:58:84:65:
                    fc:c0:64:a0:d4:cd:22:d1:eb:4f:a9:40:a7:41:84:
                    e0:3e:d4:36:23:7b:dc:bc:75:99:11:e1:1c:73:7e:
                    da:23:1e:f8:a8:d5:72:34:47:21:34:4e:a0:57:7d:
                    64:25:89:a4:68:e2:36:e7:6b:1f:a3:fc:48:87:e2:
                    43:32:39:c9:fa:89:b3:8d:5d:41:f2:46:02:d2:e3:
                    6b:25:21:02:83:af:01:79:94:44:b6:9e:04:6e:98:
                    a0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7C:06:8B:39:6F:99:84:2C:DA:83:57:A2:B1:A9:98:28:FE:F6:AE
            X509v3 Authority Key Identifier:
                keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:97:42:22:9e:ae:fa:39:c5:d4:2b:d6:c1:a2:d7:7e:08:88:
         91:bc:a5:9c:77:c8:a4:f3:07:69:62:e7:92:ab:f1:b8:4e:11:
         66:23:00:7d:e9:41:cb:da:fd:e3:79:a9:3e:3e:eb:80:f6:99:
         b9:21:bc:c5:7a:42:35:90:7a:db:be:62:37:a5:0c:68:f8:49:
         80:33:86:c1:13:20:ff:35:99:65:6c:f9:cb:2d:21:ec:70:5d:
         03:3d:a1:bb:17:84:ad:32:bb:a6:81:6d:20:fb:1e:0d:98:7a:
         41:b3:f4:4f:f2:e8:f5:a5:fc:31:7c:45:ee:7c:9e:6f:86:9b:
         00:b1:b3:ed:d8:7a:be:a1:80:c7:1b:70:a1:d0:7d:98:e8:bc:
         1f:42:8f:04:af:60:bb:5e:63:d3:b1:6c:bf:ad:d2:7a:82:71:
         ed:6a:f3:ce:e4:1d:19:8d:8c:e8:6e:ca:eb:c4:7d:09:19:e0:
         57:68:09:20:05:5d:9c:dc:89:54:3a:fb:39:c9:6d:db:aa:da:
         63:7f:b5:1e:38:7b:b6:26:6d:f0:3c:9d:94:b1:af:f1:d1:7c:
         4e:ee:f9:d3:02:d4:39:fc:26:2b:ad:30:e0:fa:f9:38:ba:5b:
         4d:d0:3c:e5:83:73:93:64:eb:ad:62:53:13:33:07:23:9b:0b:
         a8:40:e5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:32 2026 by rpki-client