Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38332e302f32342d3234203d3e203435373233.roa
File:                     3130332e32382e38332e302f32342d3234203d3e203435373233.roa (raw, json)
Hash identifier:          LXt8OGULAdQpoNoWK4gxLrA5MzZUVnNwkr0fY1oAkvc=
Subject key identifier:   85:A4:D7:A2:21:99:91:FB:CD:D3:A0:9F:63:C2:BA:90:51:DF:C7:03
Certificate issuer:       /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
Certificate serial:       15BD1FBB67238374A8DDDD2158A46EDF248E5063
Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38332e302f32342d3234203d3e203435373233.roa
Signing time:             Sun 03 May 2026 02:29:04 +0000
ROA not before:           Sun 03 May 2026 02:24:04 +0000
ROA not after:            Sun 02 May 2027 02:29:04 +0000
asID:                     45723
IP address blocks:        103.28.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl
                          rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bd:1f:bb:67:23:83:74:a8:dd:dd:21:58:a4:6e:df:24:8e:50:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
        Validity
            Not Before: May  3 02:24:04 2026 GMT
            Not After : May  2 02:29:04 2027 GMT
        Subject: CN=85A4D7A2219991FBCDD3A09F63C2BA9051DFC703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:fe:bd:d1:d1:9a:83:12:a6:df:cd:60:af:
                    8c:a7:b8:bd:11:c1:96:df:30:64:af:5d:e2:c5:12:
                    b9:9c:98:9d:33:bc:ce:0b:ca:00:7b:9e:8a:7c:43:
                    83:4d:ff:b7:79:bd:03:51:0a:d7:e9:d5:22:69:fb:
                    df:5b:9a:cf:a7:16:43:0b:e0:8c:62:69:9e:55:6d:
                    da:e2:3c:9f:32:d0:bb:13:29:53:65:09:d2:d0:9e:
                    64:16:23:f8:03:3b:9d:a8:f7:35:de:38:3f:a0:42:
                    9a:34:ea:0d:e3:d6:32:06:ea:29:d7:40:ad:27:e4:
                    95:a7:af:cf:8c:f5:09:67:17:d7:df:b2:d6:d5:dc:
                    f6:18:63:55:62:4a:24:08:9f:1d:f7:cc:cc:bc:ef:
                    47:cd:d5:21:a6:ea:a0:31:ad:c0:47:c9:41:1c:3e:
                    0b:66:5a:88:18:dc:52:30:a9:b3:98:e6:e3:2e:69:
                    18:47:3e:cf:ac:5d:94:14:b8:c6:b4:6a:7f:eb:ba:
                    e5:15:84:86:ba:27:6e:38:66:70:ac:9d:1e:06:34:
                    a6:aa:80:27:5c:e2:d8:33:b8:9c:48:4e:b7:bf:f2:
                    37:59:be:36:0c:23:db:b3:c3:a0:ad:e2:b0:ab:73:
                    3d:e7:63:b8:8a:16:cf:b6:2f:9c:84:73:13:39:f4:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A4:D7:A2:21:99:91:FB:CD:D3:A0:9F:63:C2:BA:90:51:DF:C7:03
            X509v3 Authority Key Identifier:
                keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38332e302f32342d3234203d3e203435373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:64:95:ed:9d:5b:f9:d3:73:ac:4a:f6:07:54:5c:de:81:47:
         2a:77:6b:b5:16:69:34:f1:82:f3:fb:f9:01:0c:65:cd:8a:3b:
         55:d7:3a:31:0a:26:e1:75:e4:cf:bd:fa:70:87:87:ec:06:eb:
         06:2f:c2:b6:9e:c6:54:6d:c9:23:e6:57:d0:85:f7:45:88:3e:
         66:c6:ca:66:c1:7c:b1:4d:f5:16:19:9b:bd:d7:31:12:6b:92:
         9c:6c:d5:8e:3a:04:16:c8:b5:13:99:b1:48:9e:a9:e8:99:5b:
         16:f4:44:04:c2:fe:ca:a2:5b:ed:12:c4:3e:15:05:96:4b:8d:
         6d:af:97:9f:ca:f6:fd:b5:e9:f1:5b:2c:68:23:fa:3d:51:42:
         43:c8:c4:d7:bc:d3:9a:b9:d0:bd:a4:26:af:d7:e2:25:8d:9d:
         3e:40:43:04:99:a0:08:bf:aa:ce:07:12:90:0b:47:e3:40:2b:
         61:22:8e:d7:36:5a:2e:7c:1a:02:a6:89:be:73:a0:95:79:e2:
         4e:d4:a7:24:48:2a:5f:f2:3b:1e:ba:76:bf:54:61:c7:0b:d7:
         7f:47:5a:eb:20:b3:e3:80:eb:c6:91:f8:f7:c2:36:02:e0:13:
         b9:93:19:2c:43:97:7a:8c:e2:8f:6f:07:9d:46:d6:64:54:b3:
         7e:6a:99:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:14 2026 by rpki-client