Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa
File:                     3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (raw, json)
Hash identifier:          uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=
Subject key identifier:   51:FA:43:A2:DB:05:B6:9E:73:BF:AC:7B:0F:02:0A:B0:E7:64:91:AB
Certificate issuer:       /CN=412965964A4E12BD59BDF602A054F3394E99DC57
Certificate serial:       796255E2049741BD92F6F8258D26F94171A437D2
Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa
Signing time:             Sun 03 May 2026 02:19:21 +0000
ROA not before:           Sun 03 May 2026 02:14:21 +0000
ROA not after:            Sun 02 May 2027 02:19:21 +0000
asID:                     132634
IP address blocks:        103.16.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
                          rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:62:55:e2:04:97:41:bd:92:f6:f8:25:8d:26:f9:41:71:a4:37:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57
        Validity
            Not Before: May  3 02:14:21 2026 GMT
            Not After : May  2 02:19:21 2027 GMT
        Subject: CN=51FA43A2DB05B69E73BFAC7B0F020AB0E76491AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:33:1c:16:a3:16:b3:90:2f:b5:b9:50:c3:
                    6a:ff:16:90:9a:f4:11:41:0d:dd:c7:3a:b5:a4:0b:
                    03:92:b8:7a:68:d2:38:7c:b8:ab:ae:ce:2a:bd:51:
                    7c:a4:19:69:c0:76:d6:dc:7a:40:6f:63:46:52:9d:
                    41:12:17:41:73:fb:cc:3c:89:a4:f8:b5:9f:c4:e2:
                    bc:34:e3:41:10:e9:4f:4d:69:03:e1:79:37:02:db:
                    98:7c:35:75:cf:3d:6b:5f:d4:9d:78:cb:a3:69:c3:
                    ab:26:45:11:6c:b0:05:36:c2:74:61:b6:0e:7d:93:
                    8f:76:f2:0b:b3:ae:ac:3b:dc:21:de:8e:ef:88:a4:
                    a1:9f:51:b6:d8:5d:e1:44:64:0a:2b:4d:44:7b:19:
                    7b:70:3a:88:9e:27:a2:24:0a:07:2a:b2:57:94:15:
                    30:5f:84:01:f6:4c:7b:85:55:50:aa:5f:81:79:74:
                    bb:83:97:c6:de:72:18:07:4c:cc:a9:95:83:ad:75:
                    4e:78:be:a8:d0:11:5f:8a:0d:e7:e0:49:04:36:a6:
                    c2:06:cd:ce:82:81:35:95:3a:84:b1:76:e5:3d:54:
                    60:24:1e:da:81:18:26:91:6f:8e:d5:52:56:30:74:
                    c0:21:c2:99:24:f4:ef:06:aa:c5:a6:74:ae:a8:ba:
                    97:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FA:43:A2:DB:05:B6:9E:73:BF:AC:7B:0F:02:0A:B0:E7:64:91:AB
            X509v3 Authority Key Identifier:
                keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:33:6a:55:c7:89:22:da:69:8b:98:53:82:ff:f7:53:30:
         07:07:12:a2:40:92:c6:c5:67:23:a1:48:a6:5b:42:49:ae:04:
         e6:33:97:19:23:1d:bd:b7:8c:5a:25:73:a2:38:a7:18:eb:04:
         24:d6:8d:d3:73:fe:fe:c1:c7:e6:4e:da:7b:13:dd:91:12:76:
         0e:86:52:11:5e:08:77:55:12:c3:27:24:fc:ab:dd:8b:a1:e4:
         ae:ad:1f:eb:ae:34:62:7c:68:9b:81:90:7d:a0:99:14:fc:09:
         9d:bf:20:8f:62:62:8a:a9:9c:cb:d4:53:fe:8a:4e:ac:0b:33:
         0f:1a:b9:d1:df:ea:05:b2:22:1a:b4:94:41:f0:0f:fe:12:5e:
         db:cc:8d:25:e3:94:37:5d:36:77:c8:0f:4b:15:03:a2:de:52:
         1e:dc:cb:df:b8:a9:4b:f6:61:f4:6e:6a:e1:c8:19:05:d2:c5:
         c3:53:9e:86:1c:dd:a7:c1:a7:f0:41:bf:07:0a:64:47:49:35:
         ff:e2:7d:ef:5e:19:56:5e:9e:d3:1b:76:ec:6f:7e:97:5f:52:
         ee:d9:8a:0e:0f:99:75:83:10:e0:e5:0f:4b:73:71:fd:47:08:
         5d:79:fa:9e:66:e5:0c:35:53:e2:ed:64:4f:b0:4c:9c:43:42:
         bb:e3:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:03 2026 by rpki-client