Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa
File:                     3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (raw, json)
Hash identifier:          u+tKwHgjMKGgdgEnZPp2mwsftX+fJPIHxzdML3oWuA4=
Subject key identifier:   57:C9:72:9C:87:F6:CA:7D:E2:32:86:BC:FC:60:7A:C9:6F:DF:3F:97
Certificate issuer:       /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
Certificate serial:       35FAA70E0E90E145523158FB2D2D54B5382AB2C6
Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa
Signing time:             Sun 03 May 2026 02:37:15 +0000
ROA not before:           Sun 03 May 2026 02:32:15 +0000
ROA not after:            Sun 02 May 2027 02:37:15 +0000
asID:                     136865
IP address blocks:        103.102.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl
                          rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 11:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fa:a7:0e:0e:90:e1:45:52:31:58:fb:2d:2d:54:b5:38:2a:b2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
        Validity
            Not Before: May  3 02:32:15 2026 GMT
            Not After : May  2 02:37:15 2027 GMT
        Subject: CN=57C9729C87F6CA7DE23286BCFC607AC96FDF3F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6a:93:c1:5f:34:de:e9:6f:5c:6f:d1:f3:6b:
                    af:9b:4d:b7:06:eb:bf:ef:f1:1d:0d:b4:4d:5b:a7:
                    8b:5f:f9:6e:09:2a:23:6b:63:30:70:45:d2:8f:27:
                    f8:36:19:f4:2a:8e:79:c2:bf:cd:9b:9e:a9:4b:be:
                    27:4e:fc:c2:5d:dd:7b:73:70:94:46:11:a0:c1:f2:
                    f4:b4:15:97:91:5f:4e:2b:6a:d7:7b:e7:df:a1:63:
                    32:ac:ce:09:0b:c1:7a:8d:50:e6:d6:63:01:36:c0:
                    68:e6:4b:cd:f7:18:c6:69:87:1c:19:5c:7a:14:fb:
                    6d:15:03:a0:43:6c:4c:b0:ae:31:3a:32:d5:05:6f:
                    05:da:9c:f3:67:a4:6c:ed:88:b6:12:dd:56:1e:12:
                    25:29:38:5b:a0:ba:94:e5:dd:69:32:09:a4:53:a0:
                    2c:d1:67:86:2b:52:4c:39:be:42:fa:13:50:29:af:
                    56:ca:d4:ff:1f:f5:1e:ee:59:ca:da:82:97:cc:a2:
                    f9:6c:94:f3:40:81:89:0b:ef:17:af:2b:a3:73:4b:
                    8d:5f:d2:8f:86:58:1f:0b:8a:a0:e0:80:64:30:f2:
                    10:58:56:92:71:4d:2c:00:8d:35:14:24:17:b4:56:
                    64:95:80:ea:c8:fc:7b:70:7a:95:0b:a4:1c:bd:58:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C9:72:9C:87:F6:CA:7D:E2:32:86:BC:FC:60:7A:C9:6F:DF:3F:97
            X509v3 Authority Key Identifier:
                keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:a7:ef:7a:ad:a7:45:39:ae:60:2b:9d:ea:a1:a5:99:b9:
         70:4a:04:e2:00:3c:81:40:3b:43:d8:f5:ad:93:71:d6:e4:ad:
         a3:5f:95:2c:18:33:54:5f:a6:d7:05:33:37:e2:e5:2d:68:a1:
         1f:01:b6:00:3c:d6:9b:b0:65:dd:4f:d6:fe:d8:d5:71:b7:04:
         7e:1e:c4:10:77:4a:3a:a6:65:fd:8b:87:fb:3a:69:e7:8a:b4:
         fb:de:6c:5a:63:05:95:07:6b:59:37:43:22:f4:2c:98:a4:a4:
         a4:af:6e:cf:fd:96:cb:6f:c8:34:f6:3f:c9:71:d3:47:08:ac:
         f1:89:30:cf:82:17:a5:26:93:c0:ab:bb:ec:a7:ed:43:c3:8e:
         6d:a0:60:8c:80:b4:6d:5d:07:f8:81:a0:4e:02:c5:1b:96:59:
         1d:2b:0f:f7:81:eb:62:2d:32:92:01:8b:14:96:55:f5:e5:47:
         49:93:98:b3:90:9f:52:8c:1f:a1:6b:7e:c2:8d:71:ad:6e:1a:
         ca:ee:dc:f7:49:9a:f4:94:e2:d4:d5:e8:46:a6:6e:27:6a:81:
         c9:a7:ec:58:61:af:67:56:2c:90:a7:18:9e:65:02:ae:a4:e1:
         78:3f:d8:02:47:19:1b:ed:d7:2b:6c:4a:16:f8:70:b6:2c:cd:
         64:79:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:08 2026 by rpki-client