Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa
File:                     3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (raw, json)
Hash identifier:          edEAW4h3zbE7MKZHtZXXXR5NtAdbIO3xMx03a9fE7lA=
Subject key identifier:   DF:DB:01:1B:EC:7E:9B:0A:39:77:64:6D:84:68:B3:6F:D8:4E:12:C4
Certificate issuer:       /CN=79E35332A362A778D03F32FD5C6A865996E2D53B
Certificate serial:       4DBCCF2BBF95E68A5178AB5BD5D0B2CEB7A521D7
Authority key identifier: 79:E3:53:32:A3:62:A7:78:D0:3F:32:FD:5C:6A:86:59:96:E2:D5:3B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79E35332A362A778D03F32FD5C6A865996E2D53B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa
Signing time:             Sun 03 May 2026 02:12:38 +0000
ROA not before:           Sun 03 May 2026 02:07:38 +0000
ROA not after:            Sun 02 May 2027 02:12:38 +0000
asID:                     149742
IP address blocks:        103.189.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.crl
                          rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79E35332A362A778D03F32FD5C6A865996E2D53B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bc:cf:2b:bf:95:e6:8a:51:78:ab:5b:d5:d0:b2:ce:b7:a5:21:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E35332A362A778D03F32FD5C6A865996E2D53B
        Validity
            Not Before: May  3 02:07:38 2026 GMT
            Not After : May  2 02:12:38 2027 GMT
        Subject: CN=DFDB011BEC7E9B0A3977646D8468B36FD84E12C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:aa:d4:ce:f7:0e:18:50:23:03:71:ae:42:
                    25:06:7c:e5:9c:0c:95:88:33:b4:b4:e4:23:a9:03:
                    1c:a3:9f:69:ff:89:f6:98:0d:58:77:42:22:33:b7:
                    fa:d5:66:81:3e:b2:1a:16:22:21:a8:1b:3b:3a:43:
                    0e:4d:32:ef:99:13:2c:f8:ea:50:7d:cf:a0:42:c5:
                    3f:36:ae:e2:34:3c:88:62:a8:7d:c2:d8:2a:d3:3a:
                    8f:d9:c0:29:53:83:cc:0c:cd:18:b9:74:47:5a:c9:
                    bb:1b:3e:af:68:a8:38:91:2d:93:24:0c:4a:25:e7:
                    39:cb:f2:35:a0:04:41:31:08:5e:13:a5:00:7d:17:
                    38:a2:4c:61:b4:e6:58:e9:49:a0:07:09:39:42:63:
                    e6:ae:fe:fa:12:7c:cf:c3:22:86:6b:0e:87:68:d1:
                    a0:a9:99:81:ef:e3:8f:cc:92:a5:ec:9b:ca:1d:6b:
                    6e:e9:1c:e2:02:ec:d3:8a:0c:48:72:47:cc:39:8f:
                    66:e1:ab:22:9b:62:53:66:0d:00:7e:8b:8b:02:e2:
                    b9:8c:8e:6e:99:f3:fa:51:22:07:ae:3e:0e:ba:9e:
                    a3:52:89:f4:00:7e:9c:06:c4:bd:8a:e2:cb:dc:73:
                    53:94:f1:d4:3f:23:5a:39:e9:11:d6:7a:b6:c7:d7:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DB:01:1B:EC:7E:9B:0A:39:77:64:6D:84:68:B3:6F:D8:4E:12:C4
            X509v3 Authority Key Identifier:
                keyid:79:E3:53:32:A3:62:A7:78:D0:3F:32:FD:5C:6A:86:59:96:E2:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79E35332A362A778D03F32FD5C6A865996E2D53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:b5:ea:71:2f:14:35:a5:f9:fd:cb:3f:73:7f:b5:79:c2:e7:
         10:ce:eb:e1:3f:fd:98:16:b9:a3:ad:96:78:52:02:36:d7:82:
         5b:5c:ac:51:a6:50:2e:be:ef:11:e9:48:17:1f:fb:33:3e:6f:
         10:d3:27:ef:85:21:13:73:e8:a0:a8:e7:0b:3d:db:51:b0:7a:
         f8:96:84:ee:fc:c2:68:e8:87:54:43:fa:48:e0:31:bd:31:2b:
         73:8c:a9:bc:d7:6b:aa:16:33:61:10:bc:55:66:c6:cf:65:8b:
         a2:81:75:f7:da:d6:6f:28:73:a8:23:7d:72:8f:77:e0:a7:cb:
         b4:66:4d:c7:3e:d8:d4:72:68:43:f2:3c:27:91:a5:3b:8a:47:
         64:9b:dd:e6:e1:9d:11:32:54:cd:69:95:57:4f:80:30:51:5f:
         91:3d:d6:2f:6e:e3:ce:f2:89:f6:69:75:1c:cd:2c:ad:c5:7d:
         fe:4a:7c:f7:b4:1f:00:23:74:61:fc:17:41:9c:7d:ec:02:c6:
         d7:32:44:bc:e6:69:e6:9e:2c:df:17:1d:fe:68:a0:1c:2b:a2:
         54:0c:a1:e0:8c:1a:88:f0:bb:14:db:43:40:02:88:35:a8:65:
         6b:a6:7f:97:32:b7:9c:ad:43:6f:eb:fe:6d:40:f5:8f:15:a2:
         75:96:0e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:16 2026 by rpki-client