Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa
File:                     3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (raw, json)
Hash identifier:          f47a49V3YxCF+Lv56KFQm6oHGHVoS/JPApI1aBIRXJE=
Subject key identifier:   FF:0B:2A:42:55:37:38:1A:C3:28:0C:AA:05:68:B4:6B:09:E7:A2:07
Certificate issuer:       /CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D
Certificate serial:       0E73F1F47095F436978BAF238609E10E8325355D
Authority key identifier: F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa
Signing time:             Sun 03 May 2026 02:21:14 +0000
ROA not before:           Sun 03 May 2026 02:16:14 +0000
ROA not after:            Sun 02 May 2027 02:21:14 +0000
asID:                     150523
IP address blocks:        103.75.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl
                          rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:73:f1:f4:70:95:f4:36:97:8b:af:23:86:09:e1:0e:83:25:35:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D
        Validity
            Not Before: May  3 02:16:14 2026 GMT
            Not After : May  2 02:21:14 2027 GMT
        Subject: CN=FF0B2A425537381AC3280CAA0568B46B09E7A207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:67:58:33:21:9b:85:55:8e:29:d4:72:53:07:
                    d3:c3:94:1b:6f:03:00:02:d7:0b:d0:4f:06:29:6c:
                    3d:ae:73:d4:71:cb:22:8b:22:22:35:2d:83:55:ff:
                    2b:88:64:0f:67:16:b7:75:6c:d6:04:9f:4e:1b:08:
                    a8:29:a3:ce:7f:7f:3f:ba:2f:85:35:91:04:0d:b8:
                    44:09:63:76:a7:48:13:58:9f:b5:de:a1:26:02:9d:
                    b0:b9:66:33:88:5b:a5:83:40:75:6d:a2:12:4a:0e:
                    05:eb:dd:ea:1a:ac:e0:32:46:db:96:b7:5a:ca:c5:
                    22:b8:da:12:e8:50:ae:54:f1:d9:51:5f:17:42:a3:
                    bb:5e:c3:a8:cf:bd:7d:f2:00:72:8e:95:79:69:74:
                    82:53:5a:6f:5c:35:d4:87:1d:20:95:28:65:2f:09:
                    78:28:00:10:c1:b3:20:b6:16:58:33:d0:87:5f:65:
                    fc:9f:5d:1a:51:45:69:57:31:e5:17:49:0d:1f:e5:
                    82:f3:82:b3:dc:9c:d2:b5:cb:6f:2a:f7:4d:71:85:
                    30:3c:9c:c3:df:26:43:a9:b2:7b:d8:80:0f:ca:18:
                    24:3a:82:14:9f:34:20:18:9e:80:a5:6a:9a:eb:44:
                    7c:ee:45:62:15:1c:cc:20:1b:40:64:11:d8:e1:b1:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0B:2A:42:55:37:38:1A:C3:28:0C:AA:05:68:B4:6B:09:E7:A2:07
            X509v3 Authority Key Identifier:
                keyid:F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:6d:2d:ba:30:07:f5:7c:b8:15:cb:d5:f5:90:13:19:cd:
         cd:cf:9f:6f:58:cc:ab:90:93:2c:e6:d2:f7:e0:0a:01:09:c8:
         13:e7:03:85:2f:05:96:08:7d:48:c8:95:69:11:cb:7e:0f:2d:
         11:b3:15:51:24:3d:bf:b5:22:b0:d8:38:91:a1:3e:05:fd:c2:
         7b:c4:c7:f9:a4:92:02:96:78:ce:3c:78:8e:a3:30:60:89:1b:
         15:75:87:de:21:87:33:17:9a:ba:73:e7:38:c5:e4:d1:ce:0e:
         ac:d2:38:77:d6:8c:6f:d8:2b:e5:2d:97:6d:bb:c6:59:53:ed:
         01:f3:83:25:40:e4:eb:16:b7:c8:af:65:57:86:4b:ca:7a:77:
         b1:78:71:cd:29:09:01:a2:35:37:5d:30:4d:1e:6c:6c:36:60:
         85:1c:5b:e1:33:72:7f:85:1e:f4:d5:f6:12:42:b2:f1:47:f0:
         0e:77:2a:1a:15:06:a3:12:d7:04:5f:b8:1c:b9:53:e0:7b:42:
         9c:72:ba:fd:66:1f:be:8b:3a:cc:ac:cd:60:57:bc:c2:f7:ea:
         49:5a:17:15:34:da:c9:91:df:cc:14:89:78:b3:f8:4a:1a:91:
         16:f1:0c:c3:36:d9:2f:af:fa:01:76:ca:4d:8f:4b:4e:03:33:
         50:7e:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:50 2026 by rpki-client