Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa
File:                     3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (raw, json)
Hash identifier:          XONanozPD8at5BU77v08+BcvjpWg0G96Hwi2FNBJOcs=
Subject key identifier:   6E:5D:53:A5:8A:B6:AF:43:50:10:CB:9A:7A:F9:07:8E:C9:29:54:D5
Certificate issuer:       /CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D
Certificate serial:       1D6053096284D367741DE8BD7E456FA8C59225A0
Authority key identifier: F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa
Signing time:             Sun 03 May 2026 02:21:15 +0000
ROA not before:           Sun 03 May 2026 02:16:15 +0000
ROA not after:            Sun 02 May 2027 02:21:15 +0000
asID:                     150523
IP address blocks:        103.75.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl
                          rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:60:53:09:62:84:d3:67:74:1d:e8:bd:7e:45:6f:a8:c5:92:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D
        Validity
            Not Before: May  3 02:16:15 2026 GMT
            Not After : May  2 02:21:15 2027 GMT
        Subject: CN=6E5D53A58AB6AF435010CB9A7AF9078EC92954D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:19:74:a9:03:c0:a6:91:17:8f:20:d5:ff:
                    86:b2:43:b6:cb:01:12:cf:bc:7c:16:10:86:a4:2c:
                    03:25:ab:53:8c:96:3c:f1:a4:65:c8:dc:87:b9:78:
                    df:b2:14:d2:53:ad:91:88:50:89:fb:bc:35:38:66:
                    f0:ba:cd:5e:c2:16:a5:37:5d:a9:f6:ac:35:46:b8:
                    67:ae:d4:6c:c8:ce:54:dc:45:db:d6:f8:05:e7:81:
                    98:f7:08:ca:b2:bb:65:54:a0:e0:5f:91:14:30:57:
                    dc:40:e5:5e:5d:9b:83:f7:94:a2:27:2d:2a:5e:0c:
                    fc:cc:9b:c7:9d:4e:b3:43:11:c7:89:09:f2:49:0c:
                    30:2e:19:af:1f:7d:7d:70:2e:72:44:7f:a2:de:1c:
                    62:76:e5:90:0b:61:5f:59:eb:dc:4c:8d:98:da:da:
                    a8:7c:fd:67:4c:2c:bd:b2:3c:d8:b2:10:58:88:b7:
                    40:51:46:7a:eb:a6:1e:c6:34:d3:97:96:41:4a:71:
                    35:38:78:87:b4:e0:a9:ef:02:fa:5d:d7:78:68:c7:
                    f2:48:0d:f6:c6:63:92:f7:fd:b1:b5:c7:50:e8:49:
                    81:55:38:a7:3d:80:41:db:0f:da:58:43:8f:a0:1b:
                    db:d7:f9:32:c3:d4:e2:c0:5d:69:2e:54:f6:d3:b9:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5D:53:A5:8A:B6:AF:43:50:10:CB:9A:7A:F9:07:8E:C9:29:54:D5
            X509v3 Authority Key Identifier:
                keyid:F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:86:99:4b:18:c1:7f:20:e6:2f:e8:88:70:69:16:8b:26:2a:
         b4:e4:6c:fa:5f:93:21:97:40:35:f3:8a:bf:71:d3:6c:c8:a0:
         84:ac:0b:46:82:7e:f3:bf:b9:bc:31:21:70:9f:8f:5b:20:c8:
         28:3b:c8:4f:5d:3d:1e:a7:ad:f8:88:6e:37:80:8a:56:41:e1:
         c1:47:66:e1:d7:0e:30:26:74:4e:99:0d:92:2f:26:24:3c:17:
         5c:00:8a:b1:3d:38:b6:fd:41:f8:67:a0:d0:a8:99:50:39:05:
         0b:69:bd:60:1e:1c:54:d9:d3:51:bc:30:a1:71:ab:73:1d:e5:
         e5:ef:69:1f:6f:54:d2:4f:a5:aa:59:19:1c:45:a7:4e:1c:f0:
         48:ac:c1:5a:48:62:b7:23:39:5a:be:24:14:e8:2c:bd:f9:75:
         94:8e:d5:ef:50:4a:c0:3b:92:01:13:55:59:69:69:30:ed:eb:
         e7:ac:43:c4:e4:16:c9:7f:0e:a0:c2:a6:d9:c8:32:f7:02:b1:
         75:f3:fe:97:18:d7:91:13:dd:15:b2:92:11:fc:7d:8e:59:45:
         7a:58:58:3c:18:df:2d:a2:29:b7:6d:ff:2c:d9:3b:62:0a:0d:
         f5:eb:ae:92:36:35:69:8c:96:8f:55:ba:5d:42:92:35:d1:ad:
         68:48:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:09 2026 by rpki-client