Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa
File:                     3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (raw, json)
Hash identifier:          7GHOz1ylbdZGh0QV7pltHYzAZILZEP8/dZbie4U2PnE=
Subject key identifier:   7C:68:77:F5:67:4D:B6:EA:41:50:1E:08:D2:19:A7:93:6A:E0:B2:E1
Certificate issuer:       /CN=51D2872389FAB3963625D56D9C53751581B4095A
Certificate serial:       18BB9BD028559CB5DECC46CEEA423ACAD64C0173
Authority key identifier: 51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa
Signing time:             Sun 03 May 2026 02:28:44 +0000
ROA not before:           Sun 03 May 2026 02:23:44 +0000
ROA not after:            Sun 02 May 2027 02:28:44 +0000
asID:                     59133
IP address blocks:        103.243.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
                          rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bb:9b:d0:28:55:9c:b5:de:cc:46:ce:ea:42:3a:ca:d6:4c:01:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51D2872389FAB3963625D56D9C53751581B4095A
        Validity
            Not Before: May  3 02:23:44 2026 GMT
            Not After : May  2 02:28:44 2027 GMT
        Subject: CN=7C6877F5674DB6EA41501E08D219A7936AE0B2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:47:3d:17:e6:ea:b3:07:f6:0a:78:04:63:
                    52:dd:e0:15:69:c6:a0:a4:b6:d5:25:ca:a6:26:5f:
                    c6:9c:5f:5e:b9:60:ec:3f:ba:c7:cd:18:41:22:38:
                    e5:ac:58:87:ec:c0:fc:09:ee:a1:df:0e:f5:f0:2a:
                    3e:b9:a6:0c:c2:b4:42:24:2f:a0:a6:60:94:75:14:
                    c3:52:45:b6:0c:c2:58:1a:17:49:e8:8f:83:ef:79:
                    f6:e5:38:17:2e:65:b9:60:18:cb:0b:bf:11:d1:84:
                    92:64:b5:58:eb:b4:a2:6b:aa:98:3c:d7:6e:3c:25:
                    73:cc:89:11:da:8a:a2:cd:15:05:ff:c0:93:49:89:
                    74:5a:c5:fe:0a:b8:cf:8e:a9:53:dc:39:7b:35:30:
                    12:52:89:62:a6:c1:20:5c:6f:26:dc:d8:83:a9:c8:
                    68:07:4e:67:6f:81:b3:2a:9e:5b:7e:1b:11:bf:a6:
                    5d:22:ce:95:3c:4f:4c:09:80:c3:cb:9b:2d:c4:c9:
                    bb:a8:14:9f:aa:5a:e8:4e:15:2f:fd:91:82:7f:1b:
                    f3:5a:ab:49:b2:4a:b7:28:07:b3:55:23:cb:75:d7:
                    20:1d:d3:4f:8e:7a:8d:bb:f0:ec:4c:3c:ed:10:76:
                    95:e7:69:4c:f8:64:c5:1b:cb:e6:be:77:93:23:e2:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:68:77:F5:67:4D:B6:EA:41:50:1E:08:D2:19:A7:93:6A:E0:B2:E1
            X509v3 Authority Key Identifier:
                keyid:51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:cc:58:c5:eb:84:8f:04:69:d3:0a:af:23:ee:cd:8b:89:63:
         39:c5:a7:66:34:ae:97:93:48:b2:22:db:58:06:56:58:76:1a:
         84:ac:26:5b:31:60:b7:6f:03:e4:b4:26:fe:3a:5b:fd:1a:fe:
         0b:5a:61:09:b0:db:17:c9:7b:c2:47:d2:8e:bd:86:78:93:f5:
         dc:89:0b:f3:f6:b8:2b:b6:25:12:15:1c:1e:76:41:9d:ea:67:
         1b:fe:df:11:23:46:88:33:79:e3:dc:e7:6b:0c:12:20:de:a6:
         75:c1:9e:e9:c2:c2:51:a2:e5:0e:6b:a3:8b:0c:20:f1:4e:44:
         c4:19:62:bf:10:9b:65:c4:db:9a:43:9a:ae:66:a9:50:9d:4b:
         4c:6f:b9:8a:f0:bf:a0:70:ae:49:54:f6:72:2b:f3:d0:f9:cb:
         86:a1:f6:04:8f:a7:26:d1:92:99:99:f9:9f:3f:0a:4c:ce:c3:
         af:e0:29:79:5f:8f:da:f6:21:15:ba:24:a8:c3:04:3e:3d:6d:
         77:b9:e2:4a:83:c8:60:ea:03:70:18:81:eb:f7:6d:02:4f:15:
         b4:cb:02:a3:65:00:42:bb:a2:e8:55:05:dd:05:3a:22:dc:cd:
         7a:ad:d7:82:94:6b:4e:9b:54:59:79:9f:95:7e:13:71:c9:62:
         76:b3:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:38 2026 by rpki-client