Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36332e302f32342d3234203d3e20313530353339.roa
File:                     3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (raw, json)
Hash identifier:          Gc3lbfky0bPOcbJ53df4bfJv1IIZalpAJC7Z0mwM6C8=
Subject key identifier:   33:A8:0F:DD:25:4F:97:55:A7:CE:28:7B:F2:C6:28:BE:76:F1:E0:9F
Certificate issuer:       /CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71
Certificate serial:       1980848AD13D9C1A556EB60390409101415F19BC
Authority key identifier: 0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36332e302f32342d3234203d3e20313530353339.roa
Signing time:             Sun 03 May 2026 02:12:13 +0000
ROA not before:           Sun 03 May 2026 02:07:13 +0000
ROA not after:            Sun 02 May 2027 02:12:13 +0000
asID:                     150539
IP address blocks:        103.75.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl
                          rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:80:84:8a:d1:3d:9c:1a:55:6e:b6:03:90:40:91:01:41:5f:19:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71
        Validity
            Not Before: May  3 02:07:13 2026 GMT
            Not After : May  2 02:12:13 2027 GMT
        Subject: CN=33A80FDD254F9755A7CE287BF2C628BE76F1E09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:d9:f7:09:02:57:c1:22:7f:7e:25:f2:b5:
                    28:5f:fe:01:c7:55:ad:c1:03:28:fd:7a:46:20:8d:
                    36:b0:94:05:aa:be:07:c6:ea:b9:5a:98:30:9b:2c:
                    64:4e:dd:99:55:22:86:06:08:8e:f5:89:2d:76:3c:
                    43:f1:9e:03:be:10:db:9d:55:55:6b:77:8e:00:ae:
                    55:1d:23:1c:50:53:a5:a8:90:cf:0f:ad:5d:bf:e3:
                    06:6c:09:61:8c:b1:af:27:15:ce:1c:5a:36:0f:85:
                    f6:07:1e:a0:66:15:57:24:16:81:2f:8e:f9:d5:e2:
                    8c:e5:25:78:37:24:2a:73:f5:96:07:dc:f8:b7:28:
                    f6:44:4e:1a:c5:a1:f3:e0:89:1a:28:ba:25:fe:7d:
                    55:44:9f:cf:41:f7:5f:3f:78:62:3d:4f:4e:0d:37:
                    df:8e:6c:76:5e:32:65:6d:8c:7d:8f:79:ab:cc:f3:
                    d2:4e:06:22:e5:1b:a7:18:ff:0a:ec:73:65:d2:95:
                    20:d9:72:56:3c:2a:e4:e4:60:93:6b:bd:07:ac:01:
                    cc:91:f6:36:ba:1a:6f:c9:0f:04:b7:5d:83:8a:1f:
                    2f:8a:d2:e4:49:ae:24:0b:68:f6:c2:16:57:5b:e6:
                    7d:1b:f2:0a:51:38:29:db:81:94:15:35:48:41:02:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A8:0F:DD:25:4F:97:55:A7:CE:28:7B:F2:C6:28:BE:76:F1:E0:9F
            X509v3 Authority Key Identifier:
                keyid:0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36332e302f32342d3234203d3e20313530353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e8:1f:7e:54:91:da:f5:ef:d3:d8:85:55:fa:cf:7d:0c:20:
         47:ee:40:2e:8e:ed:ee:65:07:d1:d9:d9:86:10:a8:ac:f4:e4:
         4a:59:90:d7:9d:66:82:49:a4:a6:c6:03:19:e7:1d:2f:50:00:
         99:31:16:09:9e:fb:fe:48:8e:b5:6b:95:02:b1:3b:b1:99:1d:
         cb:14:41:c1:c3:0c:82:92:f1:d5:f7:b6:f9:36:da:1d:6a:4c:
         1b:31:82:09:16:79:89:03:bb:8d:1f:86:c2:b6:49:d5:78:f0:
         e4:15:7c:5f:ac:db:eb:70:48:28:6c:7b:e1:29:f2:12:cd:3b:
         38:c3:ab:24:87:4b:47:4d:95:e0:8c:92:ba:36:90:b2:ce:4c:
         53:80:bd:05:0d:cd:47:2d:c2:d2:51:49:32:6e:20:74:be:ac:
         b8:67:fd:b2:f9:75:45:37:52:7e:a5:17:9c:35:cd:1a:1c:d9:
         95:f2:2a:47:4d:e3:3e:6c:68:e5:4c:c4:3b:f8:ee:44:fc:5a:
         7d:73:7f:74:2f:50:00:17:e7:4c:5c:a9:0c:55:ed:35:73:c2:
         0c:79:0e:60:ab:74:d0:29:30:b2:fe:a2:f3:fd:06:d3:ff:86:
         72:71:18:f4:98:32:64:9e:ce:07:e0:e2:c4:cf:cb:32:a1:59:
         58:ab:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:28 2026 by rpki-client