Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa
File:                     3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          7wx8IAofLqMlKmXE45n8YAYtVPHwwQlQVJ0MMEECbVI=
Subject key identifier:   61:13:B3:1E:4B:4E:33:20:9E:48:F0:DF:8B:3B:22:57:22:89:B5:4F
Certificate issuer:       /CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4
Certificate serial:       428BC66BF772D232551CDC0F6EFC3B56A435EAAE
Authority key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 03:19:23 +0000
ROA not before:           Sun 03 May 2026 03:14:23 +0000
ROA not after:            Sun 02 May 2027 03:19:23 +0000
asID:                     154410
IP address blocks:        103.20.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl
                          rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8b:c6:6b:f7:72:d2:32:55:1c:dc:0f:6e:fc:3b:56:a4:35:ea:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4
        Validity
            Not Before: May  3 03:14:23 2026 GMT
            Not After : May  2 03:19:23 2027 GMT
        Subject: CN=6113B31E4B4E33209E48F0DF8B3B22572289B54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:91:2d:ae:48:43:3d:ec:31:ed:4f:a3:c2:
                    b6:d5:eb:da:6e:a8:56:c6:2e:93:53:c8:fb:e9:4e:
                    3a:7c:2d:02:19:51:a3:49:0e:21:80:4c:e8:6f:10:
                    17:ac:e4:4a:76:51:84:5f:26:0e:34:ff:32:0c:38:
                    96:04:59:dd:91:48:5f:33:94:ac:e6:da:ec:6e:ea:
                    f5:ae:ec:5d:1b:1c:e7:80:6a:e5:04:6f:cd:79:86:
                    c8:d5:b4:92:01:14:fa:e7:0d:bc:4e:33:1f:dc:da:
                    4d:c8:aa:9f:ef:a2:2d:25:c4:37:d0:b1:ba:62:10:
                    d8:8a:58:e7:78:8a:67:72:62:a3:31:3b:c3:3f:5d:
                    8c:46:00:9c:e6:33:9e:00:1a:18:ed:1c:77:b2:5e:
                    06:f9:8b:5a:3a:94:58:9d:45:1d:c4:9b:d6:89:cf:
                    02:b4:0c:bf:5a:11:03:57:82:53:fe:69:a6:c8:24:
                    d4:75:77:b1:70:3d:fd:96:1e:7c:98:a0:cc:01:19:
                    7d:4a:11:58:14:bc:28:b4:c6:00:48:ec:c4:55:75:
                    85:4f:01:0c:e2:ff:51:ca:e1:65:d2:4e:ec:21:a5:
                    1b:61:4d:94:c4:92:43:95:b2:67:d4:fd:55:2f:a7:
                    c1:91:fb:13:d9:b5:cd:62:65:73:40:6b:57:93:54:
                    db:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:B3:1E:4B:4E:33:20:9E:48:F0:DF:8B:3B:22:57:22:89:B5:4F
            X509v3 Authority Key Identifier:
                keyid:FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:8c:12:63:f9:38:97:d2:1a:bd:4f:71:71:4f:f3:27:d1:fb:
         da:6f:69:04:f8:3f:c0:67:47:b3:50:ca:d6:04:98:d4:24:86:
         cf:8f:18:de:8b:d2:35:26:f7:e6:e5:b3:0e:66:bb:b0:03:f6:
         f6:63:76:55:20:8c:36:43:5e:40:a5:57:a0:8b:d1:0e:81:f8:
         74:dd:98:87:a7:7b:6a:e0:84:65:ce:09:df:2c:ee:30:64:6d:
         3b:80:80:05:39:43:68:29:61:66:14:86:c7:81:82:38:9c:c8:
         da:51:7d:92:b2:55:c2:23:c9:07:5a:95:7b:1e:af:92:41:ba:
         e9:10:90:26:28:86:eb:4b:c3:bf:96:7f:43:ed:04:31:c9:90:
         35:12:d5:03:7b:97:35:0f:6b:be:94:e0:66:60:05:df:70:c0:
         64:bc:c6:36:38:a1:4f:aa:58:c7:60:30:e8:71:dd:75:33:c1:
         5b:50:b3:35:c5:e7:ec:29:6e:78:9a:9e:4a:16:e1:90:4f:e9:
         ee:c0:73:a5:9d:dc:97:48:8a:be:6f:06:3e:88:b9:ee:22:78:
         e0:b7:89:c1:8a:40:3d:14:cc:18:54:9f:ce:a8:8f:bf:d0:02:
         61:7f:0e:14:c1:a5:0d:c9:7c:69:5f:c6:bc:54:ea:cb:68:68:
         0a:f7:c1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:10 2026 by rpki-client