Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          P6PmEIRs/1t0poM/Kr3TagSBOt31M209kGYVufX9qYQ=
Subject key identifier:   90:2F:A5:70:82:DF:DE:31:0C:0E:AF:1C:86:2C:BE:08:F0:65:01:80
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       491DF3AE3F7734066375DEC3234325AD61113E88
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:19 +0000
ROA not before:           Sun 03 May 2026 02:10:19 +0000
ROA not after:            Sun 02 May 2027 02:15:19 +0000
asID:                     58369
IP address blocks:        103.4.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1d:f3:ae:3f:77:34:06:63:75:de:c3:23:43:25:ad:61:11:3e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:19 2026 GMT
            Not After : May  2 02:15:19 2027 GMT
        Subject: CN=902FA57082DFDE310C0EAF1C862CBE08F0650180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:60:b2:61:f4:0f:59:c2:4c:87:af:b5:0c:
                    7b:ba:36:49:5b:2f:b8:95:d4:37:69:47:86:9f:ac:
                    99:a8:7d:65:65:80:98:45:19:17:52:f7:06:7f:0e:
                    c5:39:e9:fb:be:2e:ad:89:8e:94:e0:48:9b:be:e8:
                    6a:5a:33:93:cf:ed:54:67:d7:9f:9a:4d:e5:19:ee:
                    28:fc:d6:fa:87:f2:e8:fa:c0:f4:f4:79:77:80:42:
                    90:b3:6d:ec:af:8e:10:fb:91:32:45:28:24:b0:9c:
                    ee:ca:c4:12:84:e3:2e:01:bc:4f:19:6e:6b:f9:0f:
                    7c:60:99:63:11:a6:55:07:be:f3:76:fd:32:3d:69:
                    82:f1:c2:a8:f9:38:d4:54:59:31:5b:5d:4d:ca:20:
                    6c:63:53:9b:65:c4:7b:50:43:ec:26:b9:2d:9e:9d:
                    b7:4b:53:b1:8c:46:33:55:2b:83:57:6f:de:bd:5c:
                    a8:6e:75:11:a3:16:94:36:50:53:f6:f5:15:17:13:
                    64:94:4e:90:f9:a7:52:5b:67:77:75:a8:52:6c:c1:
                    f5:d4:cc:b5:3c:0b:23:b4:f2:65:21:05:54:a0:1a:
                    fb:d4:6b:58:d0:cf:4d:9d:48:75:c0:44:09:c6:00:
                    56:f7:50:e0:15:31:cc:63:32:f4:9c:8b:66:2e:a2:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2F:A5:70:82:DF:DE:31:0C:0E:AF:1C:86:2C:BE:08:F0:65:01:80
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:bd:84:2a:ef:2b:23:d1:19:7b:5d:f5:d8:dc:24:12:b1:0a:
         5d:a8:d3:ef:43:93:4a:82:0a:fa:f4:50:38:9f:d4:fa:65:34:
         2b:e6:46:a1:0a:71:f8:79:1d:19:b0:d6:77:ce:56:7b:47:73:
         c6:52:51:92:95:ec:2c:de:34:c7:3c:bc:20:fa:c7:eb:40:36:
         d1:a2:1b:79:57:28:52:5f:49:b6:a8:fe:ef:72:a4:c7:de:a3:
         eb:bd:f6:33:d0:c1:0d:2f:e3:d0:ed:0b:0e:f4:71:d2:5a:95:
         1f:9f:ac:9a:d3:83:b3:7f:9e:2f:54:48:5c:a5:66:28:3f:58:
         f2:bc:b2:31:af:3a:44:26:64:57:b7:61:3e:c3:38:24:12:04:
         94:85:0f:8c:21:69:94:dd:65:6a:dd:25:ad:2b:7d:e3:7d:4b:
         57:10:c5:a4:6e:38:30:66:1e:4e:21:97:2b:70:70:1b:d3:b9:
         49:9e:2c:fc:c1:05:28:99:3a:37:86:f8:3c:0c:61:6b:67:aa:
         c2:ab:1c:55:dd:5b:c7:ac:01:b4:38:e5:77:22:fc:05:bd:64:
         bf:54:ec:5a:05:be:35:bc:5e:c9:80:b0:d0:71:ec:2a:19:47:
         87:b1:eb:c2:36:d3:bf:fe:55:dc:f3:67:b9:7a:19:4c:22:4c:
         38:14:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:04 2026 by rpki-client