Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32322d3233203d3e203538343034.roa
File:                     3130332e32382e31322e302f32322d3233203d3e203538343034.roa (raw, json)
Hash identifier:          B7lLwYyGx/CkKBE8Qhv5JNipvmsoWuu5k92uqzr9wrU=
Subject key identifier:   BB:99:B0:E0:82:1D:85:D8:24:CE:D9:76:5B:CA:14:00:37:55:61:2A
Certificate issuer:       /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
Certificate serial:       5B8EE926872A2EDA72EDC3D6D2B394CEC38AF061
Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32322d3233203d3e203538343034.roa
Signing time:             Sun 03 May 2026 02:41:36 +0000
ROA not before:           Sun 03 May 2026 02:36:36 +0000
ROA not after:            Sun 02 May 2027 02:41:36 +0000
asID:                     58404
IP address blocks:        103.28.12.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl
                          rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8e:e9:26:87:2a:2e:da:72:ed:c3:d6:d2:b3:94:ce:c3:8a:f0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
        Validity
            Not Before: May  3 02:36:36 2026 GMT
            Not After : May  2 02:41:36 2027 GMT
        Subject: CN=BB99B0E0821D85D824CED9765BCA14003755612A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:e9:43:30:8f:5a:8d:35:4f:6f:22:79:58:
                    57:65:15:b0:db:f2:02:92:fa:40:c3:4c:ef:a1:95:
                    52:a8:71:88:17:10:6c:54:02:4b:43:ca:ef:ad:9b:
                    49:a2:fd:21:cc:42:18:2d:10:40:78:cf:1c:b1:54:
                    8a:67:4d:28:ac:da:95:c5:61:6a:97:1d:bb:5a:20:
                    0e:48:fc:7b:00:49:97:83:30:3a:78:c1:ad:e8:18:
                    97:18:47:8c:c0:9f:f4:fe:21:65:9f:28:7b:c4:41:
                    26:a6:37:b8:27:fa:e5:72:50:d2:cf:03:2a:94:81:
                    af:ea:ac:ce:46:23:ed:7c:97:7e:70:60:6d:fe:c2:
                    0f:fa:05:44:c9:8f:57:9d:9a:ae:45:98:01:cd:ec:
                    2a:11:f0:62:2b:e4:82:3f:a7:ae:11:81:e7:5f:76:
                    e6:97:90:a9:c6:c6:1e:ac:a6:ba:84:93:23:e8:aa:
                    23:99:8d:67:e0:aa:d9:22:49:2e:57:2e:cd:3e:1d:
                    3b:f6:58:00:f0:cf:d0:d0:7e:d2:d8:2f:77:b4:63:
                    2a:35:0f:6f:6c:97:6d:c0:99:5e:5c:53:1c:6b:fd:
                    f8:36:14:2d:90:98:7e:17:fa:24:5f:c6:50:c6:69:
                    f5:a2:a6:3a:9b:e9:b9:00:69:91:d5:41:fa:96:c9:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:99:B0:E0:82:1D:85:D8:24:CE:D9:76:5B:CA:14:00:37:55:61:2A
            X509v3 Authority Key Identifier:
                keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32322d3233203d3e203538343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:3f:51:f6:8a:fc:50:b0:1f:8f:a6:fd:e4:d1:d1:d2:af:c6:
         80:66:ba:b5:9a:3e:fd:a8:be:24:e2:9b:52:c6:56:05:c3:4b:
         bb:1a:5d:4a:ca:eb:71:4b:2a:93:81:bc:0e:45:62:b0:02:c6:
         a6:b2:1b:82:94:4d:b4:28:29:2e:52:81:e6:5e:a1:28:f6:14:
         4c:f2:e7:db:fb:01:e5:ff:09:5c:4b:90:3c:35:a1:3c:71:38:
         eb:68:92:02:66:9d:c4:98:fa:a9:92:a2:76:e9:f6:05:ca:22:
         1d:66:c9:8e:df:db:99:f1:9a:34:4e:81:9d:d3:ce:b0:56:02:
         4b:4e:9a:58:ad:32:0f:33:87:4a:1b:d6:a9:5d:40:43:5c:aa:
         a8:00:d7:fa:68:31:b9:2c:14:a0:33:47:0b:2a:00:3d:ad:e1:
         af:ae:53:87:15:d1:d2:10:72:4f:6f:b5:1d:33:8f:e5:f0:7a:
         f7:08:2f:6b:7e:e8:59:c8:0e:c3:7f:be:07:e3:be:b5:14:70:
         13:8e:b1:cb:ac:69:04:cc:ca:6b:7b:92:67:6a:6d:c1:24:a7:
         2c:e0:59:a1:12:25:ca:ae:f8:96:6b:28:d2:46:e1:a7:72:7c:
         8d:c8:d7:e1:27:09:90:7d:9f:8d:78:22:da:b3:9a:2a:73:c2:
         04:67:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 23:01:28 2026 by rpki-client