Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa
File:                     3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa (raw, json)
Hash identifier:          ZO0PNzhZkxG8w8Ary1RN+d3Qu4+XF4Tx6+LlxY2bCbs=
Subject key identifier:   EE:31:22:8A:7F:34:69:56:2B:28:A7:D4:52:77:CE:3B:6D:37:D5:EA
Certificate issuer:       /CN=E98212FB2801E9D8F979B478187B22C73E005B8C
Certificate serial:       34DB5219253DF5D4BC918FE0E7AB6E9D771E12E3
Authority key identifier: E9:82:12:FB:28:01:E9:D8:F9:79:B4:78:18:7B:22:C7:3E:00:5B:8C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa
Signing time:             Sun 03 May 2026 02:13:44 +0000
ROA not before:           Sun 03 May 2026 02:08:44 +0000
ROA not after:            Sun 02 May 2027 02:13:44 +0000
asID:                     58404
IP address blocks:        103.102.152.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.crl
                          rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:db:52:19:25:3d:f5:d4:bc:91:8f:e0:e7:ab:6e:9d:77:1e:12:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98212FB2801E9D8F979B478187B22C73E005B8C
        Validity
            Not Before: May  3 02:08:44 2026 GMT
            Not After : May  2 02:13:44 2027 GMT
        Subject: CN=EE31228A7F3469562B28A7D45277CE3B6D37D5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:72:bc:3b:58:f6:8e:a1:14:3c:71:21:22:
                    1b:ff:b1:11:23:ef:28:75:ba:ad:5c:1f:d2:14:69:
                    73:4a:be:32:59:d8:24:8f:b7:cc:08:e6:8d:66:cd:
                    c4:c8:a2:b0:e8:d8:cc:5e:bf:6e:2d:8e:a5:0c:0b:
                    94:f2:bb:77:6c:6f:f0:a9:75:02:3e:cc:e7:c8:a5:
                    0b:cc:9a:1f:60:71:b9:f2:8c:5f:22:23:15:4b:dc:
                    5b:78:01:8e:2f:79:f9:d4:20:11:85:08:24:6f:95:
                    a7:50:bd:7d:db:a5:ec:79:c2:01:29:28:3c:3c:35:
                    06:50:9c:c1:23:68:bd:91:e1:40:d3:42:45:cc:31:
                    c8:e0:c6:43:9e:26:8d:e6:45:3c:2b:dd:72:2a:23:
                    f2:f0:6e:03:a8:b8:77:a9:4f:c0:56:f4:60:ce:68:
                    2f:86:bd:00:97:66:04:68:ee:aa:3c:f4:f1:4c:d3:
                    65:71:ec:07:a2:91:53:96:ac:2a:86:7c:a4:21:e0:
                    cb:51:6b:47:f6:27:a8:0d:c6:59:e7:c6:77:c4:9f:
                    1f:64:1a:dd:34:44:48:50:51:ee:82:55:4b:fc:2e:
                    bd:8e:97:68:b6:d0:5a:81:e2:e3:5c:4c:60:b6:54:
                    cf:34:a0:27:78:14:89:94:f7:66:12:6b:14:b9:a0:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:31:22:8A:7F:34:69:56:2B:28:A7:D4:52:77:CE:3B:6D:37:D5:EA
            X509v3 Authority Key Identifier:
                keyid:E9:82:12:FB:28:01:E9:D8:F9:79:B4:78:18:7B:22:C7:3E:00:5B:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e6:10:fa:47:dd:a4:ff:f2:dc:43:e2:cb:60:df:97:3d:9a:bb:
         d0:e9:51:e4:28:48:9a:62:2b:25:d7:a0:95:37:cd:02:6b:9d:
         3d:4c:8e:7c:0d:ba:c0:6e:89:32:75:b8:e8:51:8e:9d:2a:ff:
         18:cb:e9:29:6c:47:a0:3a:fd:b1:12:9e:44:fa:81:13:e4:7b:
         48:fc:7e:a6:61:98:7f:1b:f9:c3:ae:3d:18:22:cb:72:14:44:
         1b:c1:93:5e:17:d5:53:a4:f6:bc:41:d2:8d:c3:e6:87:e8:ec:
         7d:3d:6d:34:74:25:19:75:51:dd:9c:a1:01:74:b8:9f:f8:f0:
         f9:40:59:ed:56:87:2a:7b:0e:2a:b9:f5:df:bc:9b:d1:db:2c:
         8e:8d:ab:1a:b5:a8:94:df:1c:45:b7:29:0a:88:30:88:42:10:
         15:8e:4e:b6:f1:25:2a:c5:8a:94:96:c5:3e:f3:03:48:cb:8f:
         01:ef:3a:f3:7d:bb:65:a5:36:09:4c:b8:f4:e4:22:53:43:eb:
         70:92:3c:ae:58:f9:c4:2f:34:a7:ac:ab:a3:0b:49:df:eb:6d:
         2b:b9:3f:3d:40:f7:22:89:f8:12:5c:3f:2d:7f:42:7e:b6:19:
         da:ef:81:e3:3c:3e:38:aa:b4:97:0c:cc:14:c5:a3:66:6b:87:
         0e:9f:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 23:01:26 2026 by rpki-client