Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e3235322e35302e302f32342d3234203d3e203539313334.roa
File:                     3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (raw, json)
Hash identifier:          CcTYmyX7VKsqrze+tnxJ2xXPrQIZB/9bxrpZpXXFkew=
Subject key identifier:   80:4A:91:15:7F:ED:08:2E:EC:A6:95:C4:0E:3A:B2:E7:B9:F8:DC:1B
Certificate issuer:       /CN=766F922EBE6693B4C229A00631F97A88C3ED7E42
Certificate serial:       7EBB3068B22183EFB220F26F5F03ACE048EB832E
Authority key identifier: 76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e3235322e35302e302f32342d3234203d3e203539313334.roa
Signing time:             Sun 03 May 2026 02:12:35 +0000
ROA not before:           Sun 03 May 2026 02:07:35 +0000
ROA not after:            Sun 02 May 2027 02:12:35 +0000
asID:                     59134
IP address blocks:        103.252.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl
                          rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bb:30:68:b2:21:83:ef:b2:20:f2:6f:5f:03:ac:e0:48:eb:83:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766F922EBE6693B4C229A00631F97A88C3ED7E42
        Validity
            Not Before: May  3 02:07:35 2026 GMT
            Not After : May  2 02:12:35 2027 GMT
        Subject: CN=804A91157FED082EECA695C40E3AB2E7B9F8DC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:e8:14:00:dd:f7:c1:fa:93:8a:f4:5f:40:
                    c6:b1:99:22:9f:9d:69:da:1a:20:72:3f:a9:03:7b:
                    54:97:c6:63:b3:5c:86:4e:8a:a2:0d:e9:9d:1f:6c:
                    0b:9d:f5:23:7d:47:5c:9f:9e:79:6a:72:cf:9b:db:
                    1a:ad:4a:33:86:7c:ee:f8:7d:7d:aa:68:89:bd:ac:
                    e0:d0:d6:2e:16:88:a8:59:9f:12:08:7f:52:18:24:
                    92:d2:de:48:f1:d9:c6:cc:5f:6e:bb:a7:39:4c:c5:
                    83:cd:10:d6:39:86:50:f8:ce:51:b1:a5:55:f0:0b:
                    4a:eb:4b:0a:40:6a:ba:39:83:b0:1d:c9:cc:f2:ae:
                    d9:28:30:53:b5:02:1c:c4:82:8e:3d:c0:92:f6:9c:
                    76:07:5d:43:62:3c:ab:68:76:c9:92:78:5e:8d:24:
                    fb:1f:c4:f9:4d:40:3e:f8:d3:ea:83:79:94:9b:f8:
                    8f:31:93:21:d3:30:75:79:cc:ba:f3:3f:30:0d:36:
                    90:0f:f9:17:bb:75:c4:81:40:c9:41:65:34:1b:ba:
                    51:0d:b4:ce:a2:ba:9f:70:d5:5f:c8:6b:8c:5b:91:
                    4e:19:d4:62:cf:a3:64:36:6c:88:87:b7:39:eb:15:
                    a0:3f:97:91:fb:08:61:68:5c:fa:0b:9b:5e:e2:7d:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4A:91:15:7F:ED:08:2E:EC:A6:95:C4:0E:3A:B2:E7:B9:F8:DC:1B
            X509v3 Authority Key Identifier:
                keyid:76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e3235322e35302e302f32342d3234203d3e203539313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:49:7d:f6:72:8b:98:11:4f:e4:f5:7f:9d:e4:ed:88:a1:1c:
         5b:0f:9e:37:0e:ce:32:a3:cf:d9:ce:67:18:c1:1c:b3:04:89:
         7d:83:6c:71:d4:19:50:a4:96:83:3e:39:0b:6e:56:38:60:78:
         5f:b1:e0:44:55:39:05:a2:b1:0b:e9:46:cd:2c:d0:44:68:c5:
         0b:dd:1b:6c:94:d7:2f:48:38:35:18:88:90:20:cf:51:8c:cf:
         96:b9:82:d3:21:aa:4a:ce:d1:fc:fb:f9:02:46:33:68:db:e9:
         15:ff:72:3a:88:2e:09:8a:38:84:71:81:49:e8:95:cc:07:26:
         d0:01:8b:bd:ff:c8:2c:87:58:30:3a:85:23:8c:e1:16:48:d2:
         a5:4d:5c:54:2a:5d:d2:de:9f:10:a8:d4:e8:89:4e:61:16:34:
         79:0f:9e:15:4c:d5:94:e2:34:5c:1a:3a:b4:8e:15:54:32:31:
         5d:64:52:f9:f0:c2:e7:d1:62:56:28:52:06:0a:aa:f7:60:9b:
         0c:6f:64:53:fe:4d:5f:e9:d6:22:4d:77:4d:96:49:dd:3a:f6:
         85:69:3f:71:76:ab:7d:61:81:cc:28:e0:ed:7b:b3:0c:76:1c:
         32:fc:81:0f:b4:90:c1:b6:9a:52:bb:75:1f:ad:c9:55:28:1d:
         46:43:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:43 2026 by rpki-client