Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa
File:                     3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          +B7APtjLCoUGlmZg2IX9a/3yBj6gC7Y5su6xqwGObds=
Subject key identifier:   4D:48:0D:51:88:15:C5:A3:DF:2F:92:1D:9C:19:66:21:BC:DC:F5:3C
Certificate issuer:       /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3
Certificate serial:       7F396F3A2843994184857E93B768397430BA9F80
Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa
Signing time:             Sun 03 May 2026 02:13:28 +0000
ROA not before:           Sun 03 May 2026 02:08:28 +0000
ROA not after:            Sun 02 May 2027 02:13:28 +0000
asID:                     138123
IP address blocks:        103.132.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl
                          rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:39:6f:3a:28:43:99:41:84:85:7e:93:b7:68:39:74:30:ba:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3
        Validity
            Not Before: May  3 02:08:28 2026 GMT
            Not After : May  2 02:13:28 2027 GMT
        Subject: CN=4D480D518815C5A3DF2F921D9C196621BCDCF53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:df:85:34:0a:ba:43:23:38:40:c2:10:58:
                    55:09:26:5e:1a:32:e7:7e:35:b6:71:21:ed:ad:09:
                    a1:43:b2:0a:96:3b:45:31:a7:24:7d:ee:0e:14:d3:
                    e0:e7:83:83:54:d2:3a:ae:96:14:4c:dd:aa:0f:c0:
                    29:0d:bb:ed:95:7b:d4:b0:97:7e:63:91:6e:45:e4:
                    c5:ef:64:1b:35:c8:b9:43:20:13:41:c9:b8:c6:8d:
                    34:4f:7f:01:76:cf:0a:55:39:46:ac:77:38:a0:41:
                    98:b3:26:11:9c:28:d6:05:a6:ee:16:59:8a:dc:53:
                    dd:cb:7d:81:63:cc:cb:db:f7:c6:59:7c:6b:ba:75:
                    63:d0:ec:b7:89:f6:82:1e:76:0b:98:9e:77:9d:2b:
                    d5:79:e5:df:12:ed:3e:e2:97:7d:f2:72:33:b2:96:
                    d4:e8:ed:9d:50:2d:72:07:92:2b:e7:15:62:61:e5:
                    0c:87:a4:ce:3a:b3:fc:82:13:aa:0d:26:b7:cb:80:
                    11:ec:56:ba:86:5e:6f:a8:80:64:ca:9c:37:72:7a:
                    14:95:79:55:be:f9:d9:70:8f:45:f6:c8:7f:fe:f3:
                    ff:9c:5e:cc:f6:9c:d1:97:6a:3c:6d:32:d3:24:3c:
                    19:f2:aa:bc:5d:2c:01:86:83:d0:1e:4e:dc:3f:de:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:0D:51:88:15:C5:A3:DF:2F:92:1D:9C:19:66:21:BC:DC:F5:3C
            X509v3 Authority Key Identifier:
                keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:3c:1c:ed:8a:0a:ff:70:22:38:0d:63:22:db:21:ce:e7:9d:
         12:c5:08:f3:07:b5:3c:92:e7:cf:7b:72:c2:64:73:57:30:38:
         78:2f:61:33:cf:1e:44:2a:ea:c6:f7:4f:a8:de:73:1c:cf:c1:
         cb:01:62:5b:4b:9b:3e:fd:ba:11:42:d2:5f:c9:2b:66:90:9f:
         20:e6:0f:09:70:59:56:40:3a:50:b5:05:74:e7:e7:9c:68:69:
         46:7d:00:17:25:61:aa:e5:90:63:1f:b6:12:0c:4a:06:95:9c:
         3e:d9:83:f3:12:08:16:fe:35:5f:10:d2:b2:4e:3f:8a:b3:15:
         17:ea:49:3c:e3:38:11:6e:06:f0:a0:55:1b:7f:06:3f:9b:5d:
         8d:61:af:e2:67:c2:1b:ca:77:27:99:f4:9d:c3:f6:c2:e9:3e:
         78:28:5a:60:04:e7:85:ef:63:4b:66:f9:86:77:7d:92:6c:73:
         fb:d4:f9:aa:9e:a2:d5:40:3d:d1:24:48:79:fd:db:34:33:07:
         ae:75:87:b0:e1:06:cd:09:8a:ef:d2:97:2e:e5:53:6b:e6:2f:
         7b:d3:97:df:3d:45:4a:b6:fb:47:d8:e5:52:3a:7b:ea:bd:d0:
         b5:c4:33:a6:09:81:71:71:c4:4c:76:58:01:b1:df:2e:99:84:
         97:31:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:26 2026 by rpki-client