Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa
File:                     3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (raw, json)
Hash identifier:          BHukqw3OCwpT8gyX9jofbrVK6NJ8azV8C28UZNn4k40=
Subject key identifier:   98:C3:95:23:D8:5E:63:CB:5C:40:BC:D6:E7:D9:B0:65:4D:B5:59:9C
Certificate issuer:       /CN=5B4C702133C87BA4BC2E55E712270969ABE45A51
Certificate serial:       18A09917FDDD175742778BF7EB9B5650F407B664
Authority key identifier: 5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa
Signing time:             Sun 03 May 2026 02:29:00 +0000
ROA not before:           Sun 03 May 2026 02:24:00 +0000
ROA not after:            Sun 02 May 2027 02:29:00 +0000
asID:                     151588
IP address blocks:        103.55.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl
                          rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a0:99:17:fd:dd:17:57:42:77:8b:f7:eb:9b:56:50:f4:07:b6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B4C702133C87BA4BC2E55E712270969ABE45A51
        Validity
            Not Before: May  3 02:24:00 2026 GMT
            Not After : May  2 02:29:00 2027 GMT
        Subject: CN=98C39523D85E63CB5C40BCD6E7D9B0654DB5599C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:4f:2e:5b:ee:76:e1:b2:97:40:44:62:be:
                    65:ad:45:be:c4:0f:bf:8c:24:70:f2:b9:be:c7:b8:
                    e8:bd:5c:69:9b:f1:eb:85:86:65:a4:f0:c6:65:e1:
                    9d:6e:01:07:d1:48:81:86:a2:92:51:db:ce:8f:69:
                    1e:fd:68:db:ec:9a:d4:c9:49:0f:44:36:72:06:46:
                    d8:ac:60:70:df:3a:6e:c5:e5:8b:7e:09:16:d3:80:
                    55:78:dc:5a:7c:b1:93:8e:f3:8c:41:e8:6f:5f:ca:
                    3f:a5:5a:17:09:8d:cf:3d:34:37:62:eb:8f:6c:5c:
                    1c:ab:56:26:00:5f:33:36:b1:db:e2:d7:98:93:e5:
                    d7:17:98:b1:a3:50:e3:b3:3b:6b:71:b4:2c:6f:22:
                    df:c9:ec:ca:df:f4:a6:51:4c:99:65:b8:66:c2:f8:
                    fd:fd:ff:57:a5:62:d5:ae:53:8e:2c:6b:54:36:d7:
                    39:da:e3:10:01:9d:f8:94:38:37:e4:60:db:8e:a9:
                    f6:c4:a7:b7:80:da:9a:a3:71:60:a3:b6:31:63:7a:
                    c0:b0:2d:b7:93:9e:a0:38:bf:ee:26:e6:a7:ea:d4:
                    1f:e1:0c:a2:07:ec:13:36:6c:c9:53:ce:99:23:4f:
                    82:72:9d:54:23:fa:f0:4a:70:e8:57:9c:94:b1:d2:
                    56:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C3:95:23:D8:5E:63:CB:5C:40:BC:D6:E7:D9:B0:65:4D:B5:59:9C
            X509v3 Authority Key Identifier:
                keyid:5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:0c:56:ce:7e:46:d9:78:b6:3b:96:d7:ac:cb:6b:61:69:a7:
         1d:0a:33:70:19:7f:56:83:00:ea:08:29:ee:9b:7a:69:c2:b3:
         5a:fc:45:48:a8:9c:ab:38:ee:3d:b5:d5:ef:95:f9:cd:f5:ec:
         1f:ed:a8:ed:10:f8:a1:c7:45:e8:42:39:53:61:18:15:ce:54:
         42:ac:0d:ee:d5:9a:03:de:c2:f7:0f:62:b3:15:a7:a8:5e:09:
         11:ef:f5:db:18:3f:2a:60:74:f0:2b:bf:c8:8e:48:c5:14:eb:
         42:1c:ca:2b:21:05:de:84:97:16:27:5d:f9:9b:a9:57:94:38:
         f4:88:d2:5d:78:e7:46:90:f8:1c:68:7e:de:94:e1:58:a6:53:
         d8:b9:c1:8d:f7:b2:e8:81:ba:61:aa:2b:53:57:07:b8:20:24:
         5d:4a:06:29:b2:64:83:10:a3:27:24:6f:2d:ec:44:14:8e:47:
         c2:79:99:3c:57:92:08:1c:aa:07:25:b5:5a:cc:23:c1:c5:92:
         5d:ae:4f:b2:57:25:bc:d0:ea:62:e5:86:9d:78:51:40:31:8e:
         ee:da:c6:eb:0a:00:dc:69:84:a3:30:60:08:88:41:ec:51:89:
         8b:61:5a:1d:65:66:ae:db:45:50:0d:0f:0f:d2:46:55:76:22:
         b2:cd:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:48 2026 by rpki-client