Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          z6GUdeFt7cZ123YPdHdFmC2YED5wOXIptnBOz+6r2kI=
Subject key identifier:   9A:7D:28:9D:07:1C:37:95:86:E1:06:E5:37:39:24:42:5D:4A:93:9D
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       5E93402640297498ADEEA86667E4C54E19F926F2
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:20 +0000
ROA not before:           Sun 03 May 2026 02:10:20 +0000
ROA not after:            Sun 02 May 2027 02:15:20 +0000
asID:                     58369
IP address blocks:        103.4.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:93:40:26:40:29:74:98:ad:ee:a8:66:67:e4:c5:4e:19:f9:26:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:20 2026 GMT
            Not After : May  2 02:15:20 2027 GMT
        Subject: CN=9A7D289D071C379586E106E5373924425D4A939D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:c7:f5:b6:3c:1f:20:af:de:12:61:fb:d8:
                    82:e1:79:30:fb:0e:5d:b5:ec:5d:cd:06:fc:3c:60:
                    07:ce:6b:90:1f:01:e6:a7:e9:cb:fc:f0:b5:10:f8:
                    10:66:f3:89:65:10:4c:dc:ae:9c:af:e1:e3:1e:b6:
                    e7:53:9a:5c:77:cc:81:47:8d:cc:4b:5e:30:08:ae:
                    4c:0a:13:65:b3:ec:a0:6d:32:31:86:67:b4:79:99:
                    db:27:f1:90:de:55:1c:1c:42:02:db:ff:76:08:7e:
                    09:18:07:62:a0:01:a2:fc:0d:c0:e0:9a:0e:48:b9:
                    13:85:a0:0e:a6:0a:03:42:d1:b3:ea:71:66:2e:4e:
                    df:ee:0f:3f:be:aa:c5:af:ea:4b:79:9a:11:9c:62:
                    a1:a0:c5:e0:2c:e4:77:3d:c2:28:a5:84:d7:05:ac:
                    50:ea:f4:74:6f:3e:3c:b7:a4:9a:86:ef:01:f9:44:
                    55:69:0a:64:8f:7c:f1:db:67:12:6c:d5:dc:d5:ae:
                    6f:90:6e:e5:1f:43:89:8a:6a:79:da:15:91:31:90:
                    9f:03:5d:08:58:7c:1b:a3:3b:b4:91:62:52:5f:16:
                    0a:af:26:59:34:13:68:ff:97:a0:07:b2:08:c8:2c:
                    86:f7:71:ce:d0:bb:0d:a1:fa:a2:9b:8a:9c:9c:ea:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7D:28:9D:07:1C:37:95:86:E1:06:E5:37:39:24:42:5D:4A:93:9D
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:3f:d1:2b:6d:75:de:fc:ad:98:e0:03:94:96:6c:92:f9:71:
         be:26:c8:25:d9:7e:ec:0d:2b:9d:86:04:66:14:a5:f1:94:3b:
         6c:4c:3f:0b:83:dc:b6:47:bf:c7:a4:22:fd:c0:37:13:fa:f3:
         ce:88:0f:09:b8:8f:4b:7f:3e:16:f8:2c:65:83:89:5f:b5:3a:
         6a:37:be:d2:4a:10:c9:66:ef:f5:f5:4c:03:c1:f4:45:65:45:
         76:11:9a:80:66:46:92:a9:1b:92:33:0e:ad:ba:ca:ce:cd:c7:
         cd:ce:2c:96:0b:3a:ab:c3:af:2a:9f:5a:83:0e:fe:c6:f1:e3:
         e9:bb:dd:20:e7:16:d8:ea:0c:6b:5b:e8:f6:92:01:a1:ec:e3:
         db:33:57:d6:b8:32:54:17:7e:fb:1c:03:9d:de:01:9e:03:06:
         98:f8:80:7f:0e:8f:cc:ee:3e:46:13:03:d5:08:a9:c2:6d:9d:
         98:3a:f1:df:ed:e4:ef:5a:a4:db:b5:49:7a:d4:e9:d7:14:b4:
         2b:f9:78:a5:59:61:20:15:30:b4:20:af:44:79:04:27:e0:33:
         82:11:3c:32:13:8b:50:e3:af:98:70:db:8f:1b:18:0d:94:0c:
         2c:fe:21:e6:1c:fa:06:36:ee:79:da:24:73:58:34:12:bd:09:
         aa:33:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:26 2026 by rpki-client