Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa
File:                     3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (raw, json)
Hash identifier:          TiDTdLFtscLo1gjWjoWEhnPEKlKIibkgXZac0KwabKk=
Subject key identifier:   5C:97:B4:EF:8C:58:F6:8C:33:25:20:41:67:B3:A4:8D:94:7E:A8:28
Certificate issuer:       /CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
Certificate serial:       26BAEA80BE99CC2E8F816E79CE51FC4AD02760CC
Authority key identifier: B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa
Signing time:             Sun 03 May 2026 02:29:40 +0000
ROA not before:           Sun 03 May 2026 02:24:40 +0000
ROA not after:            Sun 02 May 2027 02:29:40 +0000
asID:                     137289
IP address blocks:        103.51.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl
                          rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ba:ea:80:be:99:cc:2e:8f:81:6e:79:ce:51:fc:4a:d0:27:60:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
        Validity
            Not Before: May  3 02:24:40 2026 GMT
            Not After : May  2 02:29:40 2027 GMT
        Subject: CN=5C97B4EF8C58F68C3325204167B3A48D947EA828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:bd:a4:df:b8:35:70:c7:2c:af:62:e0:9c:
                    91:ca:5b:83:6f:fd:f6:46:61:a4:20:03:30:46:ff:
                    2b:4c:48:fb:97:d1:62:32:b1:a4:74:d2:cc:5f:9a:
                    9b:f5:b9:cc:9e:b5:73:2d:8f:25:3a:26:33:28:50:
                    f0:65:e8:f4:18:d1:1e:ea:c6:97:8c:e1:4d:e5:d2:
                    dd:c2:49:f2:64:06:a0:a2:28:25:2c:1a:af:2c:04:
                    54:a1:0c:31:d3:17:6e:5f:e4:f0:f2:9e:2c:5b:fe:
                    09:98:82:69:a5:45:39:88:01:fb:5c:36:cb:f1:30:
                    e6:b7:05:0b:d2:e8:10:fc:cd:ba:49:e6:e8:91:b6:
                    fb:d1:4f:b3:52:d0:9a:10:42:b9:bb:03:e5:9b:f2:
                    45:29:9d:bf:f8:08:1f:70:e3:23:68:19:f9:30:56:
                    0e:c5:52:38:33:73:21:01:fb:da:6d:96:86:a1:43:
                    56:71:1f:05:4f:a4:3a:dd:f4:d9:cd:ee:69:85:0a:
                    f3:c1:c3:94:73:bb:8c:d9:d3:49:5a:44:80:dc:04:
                    be:ce:12:0c:5a:5c:14:df:1d:94:e2:25:71:01:2f:
                    b2:ac:2a:f0:69:02:dd:ac:27:9a:4a:7c:c8:f7:7e:
                    fb:6e:82:62:a7:01:6c:24:7d:95:1b:8b:7e:9a:30:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:97:B4:EF:8C:58:F6:8C:33:25:20:41:67:B3:A4:8D:94:7E:A8:28
            X509v3 Authority Key Identifier:
                keyid:B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:90:45:01:d5:7e:49:21:69:a7:68:ba:3f:7f:11:84:79:ac:
         82:af:34:fe:2f:e5:2f:49:8e:09:ee:94:7d:78:71:b0:72:af:
         83:ba:c8:88:5f:7a:a7:70:26:f0:3c:43:60:9f:61:77:69:b8:
         23:06:aa:07:43:a1:2f:62:d7:cc:86:d9:d7:13:ac:51:62:61:
         ba:8d:41:e5:75:d6:6f:94:93:3a:ef:3e:4a:96:63:90:e2:0f:
         67:94:0b:75:c4:4d:76:09:08:9c:d8:38:40:54:b5:28:2d:c8:
         38:9d:cf:cf:1c:f3:05:53:36:08:4b:9c:6e:4f:f4:04:10:0c:
         02:09:c5:e5:fe:27:7d:bc:a5:74:12:c6:90:8f:28:5c:2c:9f:
         ff:7e:1a:19:c5:0c:c1:e7:59:23:e4:b6:ae:a9:14:45:6f:83:
         6f:31:a6:9c:32:19:63:52:83:e9:84:a4:d0:48:2e:74:cb:c1:
         9b:5b:1f:55:26:f3:29:37:2c:d5:b8:9a:b3:8a:c2:38:27:b7:
         5c:f3:5c:e5:23:07:23:2c:9b:fa:6f:36:cd:b7:bf:ae:b4:cc:
         c7:6d:91:f4:42:c7:98:0b:5f:b6:81:dd:cb:3c:29:61:0d:34:
         4c:fe:65:e4:f9:6c:26:8a:7d:e9:be:45:d4:78:15:22:b1:5a:
         b8:79:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:04 2026 by rpki-client