Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa
File:                     3130332e34332e312e302f32342d3234203d3e203539313333.roa (raw, json)
Hash identifier:          g1g7MtGRy5qSqIwWinTtOXc9I8nzo7Y/GPnyXI8unxU=
Subject key identifier:   F1:FD:E1:33:D0:6C:F2:5C:A4:6B:09:4E:27:31:58:19:74:84:47:09
Certificate issuer:       /CN=51D2872389FAB3963625D56D9C53751581B4095A
Certificate serial:       31919C818D7465350D67002CA8E080B331487250
Authority key identifier: 51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa
Signing time:             Sun 03 May 2026 02:28:44 +0000
ROA not before:           Sun 03 May 2026 02:23:44 +0000
ROA not after:            Sun 02 May 2027 02:28:44 +0000
asID:                     59133
IP address blocks:        103.43.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
                          rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:91:9c:81:8d:74:65:35:0d:67:00:2c:a8:e0:80:b3:31:48:72:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51D2872389FAB3963625D56D9C53751581B4095A
        Validity
            Not Before: May  3 02:23:44 2026 GMT
            Not After : May  2 02:28:44 2027 GMT
        Subject: CN=F1FDE133D06CF25CA46B094E2731581974844709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6f:7b:39:4e:65:c3:2a:42:25:53:38:41:1f:
                    cf:10:a9:c4:d8:57:13:98:5f:72:ec:6a:b5:46:27:
                    f3:d0:46:7f:7e:7b:7f:3a:a5:ef:46:c3:35:c2:cf:
                    4b:12:b0:26:a3:ec:8c:f6:1e:83:ac:de:ab:69:5c:
                    ac:57:f8:8c:dd:1a:b3:45:6a:7e:eb:f3:04:49:0c:
                    9a:40:1b:65:c6:ac:db:30:2e:5c:3d:1d:8d:1f:0d:
                    c0:ba:0c:76:7b:36:87:37:54:06:2c:39:7b:74:d5:
                    00:04:6f:4b:9b:9c:d9:7c:5c:5a:6c:36:c1:c4:b2:
                    ce:db:5e:f5:dc:90:b6:d5:b1:99:21:ce:1d:47:87:
                    84:f6:51:a0:77:54:95:dd:a9:32:6b:96:e4:d8:7d:
                    59:36:df:50:f7:cb:e7:2c:0c:54:24:fc:0b:33:5e:
                    bf:4c:72:c6:bd:0d:16:b3:32:d9:7f:7e:74:0e:40:
                    b3:0c:a9:cf:6b:e7:4a:c0:70:45:2f:0c:f9:fa:f7:
                    2c:cf:a3:4e:ca:5f:7a:64:25:44:70:fb:87:43:e7:
                    f6:38:28:74:5a:22:cd:d8:97:91:8d:55:47:35:d0:
                    2d:46:66:83:b7:ff:1f:b6:f3:e8:c9:cf:1f:d4:f9:
                    2d:4a:23:26:1b:7d:09:3c:f2:97:16:f9:ae:fd:c4:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FD:E1:33:D0:6C:F2:5C:A4:6B:09:4E:27:31:58:19:74:84:47:09
            X509v3 Authority Key Identifier:
                keyid:51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:66:0d:32:b6:33:3e:18:27:1e:27:8c:1d:83:a2:7f:f3:77:
         9a:51:53:d2:1c:ce:05:50:19:a2:84:78:80:3f:e9:04:fe:1d:
         94:8a:ca:99:bb:bf:c9:a0:05:73:89:05:e3:1b:07:39:d4:b0:
         cb:f1:17:80:a3:c5:3c:66:4c:7a:9c:1c:90:f5:bd:f0:ec:56:
         c6:6a:ee:2e:3d:44:67:0d:d6:86:47:52:85:1e:fc:5b:ba:cf:
         c5:d1:e4:64:4c:7b:89:53:56:55:5c:67:3a:ca:3e:04:dd:70:
         21:32:50:d6:b4:06:cb:b9:2d:ce:21:d3:4b:bc:82:7e:47:72:
         ec:17:03:42:43:9e:6f:aa:43:28:c4:06:66:88:79:c4:dc:19:
         6c:e0:86:8a:ec:cf:cb:ce:21:46:43:6b:36:f2:c3:99:0a:fb:
         d3:47:1e:1b:60:f6:78:54:3a:fc:3e:ae:f4:ce:24:e8:eb:f7:
         b4:18:9c:6a:7a:0e:6c:d9:3d:89:73:31:d6:52:fb:cc:c9:c8:
         e8:64:70:d0:0e:fc:44:53:19:3e:c8:0d:bb:d0:5f:51:6e:14:
         2c:be:08:7a:48:d8:03:06:9d:d7:eb:6b:63:65:d0:52:eb:fb:
         57:36:58:d1:ea:66:95:60:b7:b9:fc:b8:7e:19:88:79:f8:32:
         78:e2:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:58 2026 by rpki-client