Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32332d3233203d3e20313530343639.roa
File:                     3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (raw, json)
Hash identifier:          y3pv5F6oTlsmrZ6EnNXAjdzgbs9s6wBiVuWts/sp7e0=
Subject key identifier:   72:8D:86:85:ED:45:C0:51:B4:4C:CD:BC:91:BC:DF:9D:EC:AB:38:C6
Certificate issuer:       /CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3
Certificate serial:       567C5500538D5566D9F39E12952581EC1FF4AD22
Authority key identifier: 1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32332d3233203d3e20313530343639.roa
Signing time:             Sun 03 May 2026 02:23:23 +0000
ROA not before:           Sun 03 May 2026 02:18:23 +0000
ROA not after:            Sun 02 May 2027 02:23:23 +0000
asID:                     150469
IP address blocks:        103.51.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl
                          rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7c:55:00:53:8d:55:66:d9:f3:9e:12:95:25:81:ec:1f:f4:ad:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3
        Validity
            Not Before: May  3 02:18:23 2026 GMT
            Not After : May  2 02:23:23 2027 GMT
        Subject: CN=728D8685ED45C051B44CCDBC91BCDF9DECAB38C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7e:d0:a9:80:df:3d:a9:93:f7:f3:69:43:3a:
                    3f:66:97:1c:1b:7f:91:60:ab:00:59:a7:95:ba:19:
                    0e:fa:9f:cd:03:ab:7a:d8:92:c8:c8:48:9e:1c:a9:
                    d2:89:c8:3c:e9:6b:47:17:09:f1:a1:15:ad:96:1e:
                    38:ed:d3:13:85:51:a2:b7:e5:19:99:47:2b:57:85:
                    fe:45:ab:7b:4d:2a:e9:3b:eb:dc:4c:0a:17:0c:3b:
                    df:5b:33:4a:c6:93:82:fd:96:62:bf:d4:c0:c1:f9:
                    d2:11:3c:10:96:42:31:4e:a5:f5:bf:d5:1f:d1:89:
                    a2:de:ec:f0:d3:22:72:97:e4:fa:94:c2:81:91:aa:
                    6a:5d:e0:57:8b:f5:36:e5:7e:1e:a2:e2:6c:9e:1d:
                    ff:8d:17:8c:4b:42:44:c5:45:ea:0e:45:3b:8a:59:
                    d3:6d:dd:99:ea:33:c9:d9:45:bb:67:19:3f:69:d8:
                    ae:c6:45:3b:ab:85:6c:85:b3:6e:d6:11:08:a4:4b:
                    f7:1a:1e:09:0c:f3:5f:7b:47:33:fa:e6:8b:2f:47:
                    39:19:ac:b4:89:f2:de:11:9f:49:20:21:7b:81:9b:
                    92:07:b9:43:52:f3:70:43:71:12:ae:9f:bb:4f:52:
                    db:53:7f:d0:45:17:60:74:d0:71:59:1f:35:cb:bf:
                    fb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8D:86:85:ED:45:C0:51:B4:4C:CD:BC:91:BC:DF:9D:EC:AB:38:C6
            X509v3 Authority Key Identifier:
                keyid:1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32332d3233203d3e20313530343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:a5:89:70:b7:5d:a1:b2:cd:47:02:57:94:02:ec:bc:28:
         d3:14:f3:4e:f1:2c:fb:22:01:d4:fc:1e:e6:e4:40:04:d4:d6:
         d2:02:00:88:e6:01:b1:dd:a1:77:1b:01:b2:b4:b0:65:bd:c9:
         16:8c:ea:5f:f9:4d:a8:69:1b:d6:e6:4a:dd:a3:d3:23:64:3e:
         4a:ee:58:a9:10:0c:c7:61:da:62:68:28:07:cb:42:56:15:5b:
         f8:3f:91:8a:e0:44:89:ab:66:8f:3a:2e:55:44:03:54:cc:3a:
         47:e5:dc:0b:38:f0:08:a9:21:0d:3b:06:c4:19:d0:2e:a5:38:
         6d:9f:5c:cc:0d:58:0e:8b:d9:20:f8:79:f7:d8:83:ab:40:91:
         f0:88:de:11:58:0c:7a:82:02:85:f4:d5:6e:39:f7:a4:e0:97:
         09:5f:13:21:6c:3c:c7:e0:a5:f0:94:95:68:a0:6d:d9:5b:af:
         2e:26:96:86:9b:81:0e:cf:2d:73:0d:52:90:e8:5f:a5:fc:59:
         6f:f0:db:ba:f7:85:ce:05:c9:f1:e4:2c:bf:18:93:b4:49:71:
         7d:d7:77:c2:4e:2a:14:01:89:c3:4f:45:24:01:6c:d7:9e:7e:
         56:21:3f:c4:1d:30:f3:fb:71:a5:7f:96:9e:32:da:06:99:92:
         42:62:7a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:52 2026 by rpki-client