Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/3130332e3231332e3233312e302f32342d3234203d3e20313530313930.roa
File:                     3130332e3231332e3233312e302f32342d3234203d3e20313530313930.roa (raw, json)
Hash identifier:          h7FSm3T3Y7Y9LQ/IQvlQJK36eyZBE5OovT8kCFxLn8M=
Subject key identifier:   C4:20:73:BA:AD:B7:EA:3C:CF:4C:88:32:77:8E:C4:47:AD:7E:60:6F
Certificate issuer:       /CN=B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B
Certificate serial:       126D473D69D2EDFD8BB724EB08700B24EA1AD682
Authority key identifier: B1:03:CB:3C:9F:20:45:BD:47:5A:6F:ED:D2:39:AE:6D:CA:89:A2:9B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/3130332e3231332e3233312e302f32342d3234203d3e20313530313930.roa
Signing time:             Wed 23 Sep 2026 01:08:39 +0000
ROA not before:           Wed 23 Sep 2026 01:03:39 +0000
ROA not after:            Wed 22 Sep 2027 01:08:39 +0000
asID:                     150190
IP address blocks:        103.213.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl
                          rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 08:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6d:47:3d:69:d2:ed:fd:8b:b7:24:eb:08:70:0b:24:ea:1a:d6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B
        Validity
            Not Before: Sep 23 01:03:39 2026 GMT
            Not After : Sep 22 01:08:39 2027 GMT
        Subject: CN=C42073BAADB7EA3CCF4C8832778EC447AD7E606F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:c8:84:73:c4:3f:64:f5:71:d1:ba:80:8f:
                    3e:71:73:17:7f:d6:fa:8e:68:6f:b9:42:32:57:1f:
                    d3:22:c0:d0:53:b1:2e:a8:42:38:7d:23:bb:99:19:
                    07:2d:9f:7c:b1:c0:2b:6b:f0:e8:61:8a:7a:92:96:
                    f3:ab:c4:82:b9:a1:68:f7:87:4c:7d:9f:f7:97:fb:
                    b8:f2:f2:2d:14:ad:e5:59:01:d4:0d:3a:c4:6e:6e:
                    f0:78:11:e4:34:d3:64:3a:6f:4c:42:97:d8:13:59:
                    fb:8c:72:1f:88:1c:0a:2f:49:b0:c7:b2:95:47:86:
                    b6:f8:da:b7:50:2f:7a:2c:84:03:c8:d4:78:00:36:
                    8c:5a:cf:d3:1a:6c:17:c7:ce:35:6a:7d:ed:59:fc:
                    d3:0c:f8:fc:1f:57:c5:60:d8:c1:fb:3d:10:4f:86:
                    77:1c:77:cb:95:f4:55:d2:a8:ba:1d:ef:fb:ca:55:
                    e7:c8:79:d6:c8:88:5a:db:28:f6:89:f1:a2:35:d5:
                    ee:d9:ce:96:55:d2:f4:fc:17:17:df:00:21:cd:87:
                    42:09:88:28:93:25:53:73:30:94:2d:bd:04:89:0a:
                    7f:7b:b3:aa:aa:f1:4a:d7:b0:e0:34:49:02:33:32:
                    28:8f:9d:92:80:99:df:40:80:03:7e:1d:14:d7:bd:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:73:BA:AD:B7:EA:3C:CF:4C:88:32:77:8E:C4:47:AD:7E:60:6F
            X509v3 Authority Key Identifier:
                keyid:B1:03:CB:3C:9F:20:45:BD:47:5A:6F:ED:D2:39:AE:6D:CA:89:A2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/3130332e3231332e3233312e302f32342d3234203d3e20313530313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5d:fc:06:0f:f1:79:f7:7c:7a:7f:a0:ba:a4:f7:c8:17:09:
         10:3c:d4:c6:04:86:54:d0:e8:08:20:ce:49:b7:ca:5a:56:0a:
         44:a0:89:d2:2a:43:6a:4f:d3:be:0f:42:6a:5e:ca:a8:bb:cc:
         c7:d8:97:2d:0f:12:b4:2c:f3:80:6d:df:a5:d9:14:20:82:64:
         5d:67:36:0c:f9:a4:48:e1:9a:44:95:65:64:87:cd:ac:c0:15:
         d2:84:1d:6b:8c:8a:a8:f3:f1:66:41:c6:08:c7:1a:10:b5:f8:
         34:02:91:c9:79:07:cf:eb:c5:dd:b1:50:2c:85:a6:32:1d:8e:
         2d:03:df:9a:b1:b7:23:55:bf:1b:96:f2:44:ab:c9:80:27:c1:
         5a:98:08:2f:a4:79:88:c7:e8:cf:f4:81:d2:e5:17:08:20:20:
         60:1d:5f:f5:6a:08:f2:52:69:30:91:4f:be:b8:ab:04:da:58:
         b8:ab:97:59:83:90:56:37:1c:e5:58:dd:d3:31:b0:e1:0c:5a:
         4a:6d:74:c1:3e:10:99:dc:a4:6f:e9:79:ee:44:e9:33:0b:3c:
         7b:09:b5:90:2c:f7:1e:48:75:cf:54:c8:f9:56:6a:51:6b:24:
         e6:6e:11:35:37:f4:b1:5a:10:be:a4:0f:d5:a5:40:5b:99:3c:
         4d:cb:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:21:29 2026 by rpki-client