Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa
File:                     3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (raw, json)
Hash identifier:          GheubIEbC2RH3FMbulGJZm2AS1TBwHys9ZC8vY6htKI=
Subject key identifier:   C4:45:D6:0A:D1:DF:D7:95:C4:D1:E1:6A:59:D1:A6:E1:00:0A:8F:3C
Certificate issuer:       /CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB
Certificate serial:       6CAF7E3EDC4F06523518E6F5763E3F5BE8B82A9E
Authority key identifier: 5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa
Signing time:             Sun 03 May 2026 02:26:01 +0000
ROA not before:           Sun 03 May 2026 02:21:01 +0000
ROA not after:            Sun 02 May 2027 02:26:01 +0000
asID:                     149913
IP address blocks:        103.191.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl
                          rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:af:7e:3e:dc:4f:06:52:35:18:e6:f5:76:3e:3f:5b:e8:b8:2a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB
        Validity
            Not Before: May  3 02:21:01 2026 GMT
            Not After : May  2 02:26:01 2027 GMT
        Subject: CN=C445D60AD1DFD795C4D1E16A59D1A6E1000A8F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:58:0f:ee:66:98:71:77:d3:1b:c4:09:36:
                    73:ab:55:b5:54:21:e6:38:7f:60:07:c8:43:2f:95:
                    f2:11:8e:91:6d:f2:78:a0:f2:a7:7c:a5:aa:73:a5:
                    19:69:ef:8e:da:99:58:5b:0e:5b:bc:c2:38:81:a7:
                    dd:cc:d9:c7:30:10:82:d5:8c:0f:e6:20:78:41:ad:
                    99:c8:89:38:ee:09:a8:3a:08:5e:b4:8c:20:4e:6f:
                    9e:ae:9c:0f:39:03:c3:d4:af:f0:e3:4e:59:eb:a1:
                    7a:a0:ba:6f:24:c7:13:98:03:f2:11:19:2c:82:c7:
                    e4:01:76:16:57:95:f9:ed:91:9d:e4:c8:e9:ea:13:
                    44:10:56:90:cb:8c:30:36:f3:d4:e8:d5:c9:31:0e:
                    ce:45:33:39:27:0c:71:21:6e:75:f6:ff:69:c5:03:
                    c9:2d:c5:37:f0:a9:68:81:07:32:b9:41:4f:5f:a8:
                    e1:7a:bd:45:b3:57:ff:55:48:e2:49:36:d3:7e:55:
                    fb:94:f6:4b:38:10:46:94:9f:17:5f:d5:76:02:b4:
                    e0:bf:45:9c:91:28:91:4a:ad:b8:06:74:cc:70:9e:
                    78:c3:65:bd:ce:f2:2c:03:8c:9e:60:f2:c1:54:39:
                    e6:3b:47:2f:b4:54:28:5d:33:2a:40:ce:a3:15:ae:
                    da:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:45:D6:0A:D1:DF:D7:95:C4:D1:E1:6A:59:D1:A6:E1:00:0A:8F:3C
            X509v3 Authority Key Identifier:
                keyid:5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:20:b3:b2:a3:78:41:5c:e1:3e:e2:d6:48:32:52:8a:bd:ab:
         77:5d:2a:76:0f:4d:9c:51:33:ca:a8:b9:ff:fd:0f:38:00:98:
         28:28:72:ce:85:7b:c6:05:c5:13:37:9c:e1:ba:f6:01:8f:0c:
         97:9e:cd:99:92:3d:5e:fb:04:46:84:98:8f:8d:cd:0d:10:06:
         f9:a0:77:6d:b3:d0:ee:03:f2:7f:08:e1:68:40:46:00:47:a3:
         36:d2:85:0e:03:fa:e7:76:17:29:7a:da:7c:4e:41:b3:d6:59:
         70:8f:80:1c:a0:19:c2:57:3c:cf:84:51:01:26:de:e4:40:c7:
         18:51:01:c8:46:bf:a4:33:90:a1:9d:b0:6f:70:b5:93:e1:bf:
         0a:c4:70:90:24:98:b7:82:77:4d:1a:c3:ba:9d:99:58:21:c9:
         33:ed:7c:57:b6:54:42:39:08:20:9d:a1:6d:db:c9:83:68:59:
         4a:1d:33:db:21:84:15:08:cb:c2:32:61:4a:8e:f3:e6:c9:ff:
         39:9c:0d:7b:34:14:a5:74:b1:76:d5:90:b8:90:61:43:de:36:
         c4:dd:9f:fb:8d:43:da:5d:54:d2:a7:f1:9e:ef:84:9b:15:ad:
         fc:d4:67:d9:0f:36:43:da:f8:97:d8:29:5c:b7:9e:c1:e8:a5:
         99:7b:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:26 2026 by rpki-client