Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa
File:                     3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (raw, json)
Hash identifier:          FOuLqe8z3jP9/FdA5FO4WwiK2ha2s9B/nD4rv4Mnpyg=
Subject key identifier:   78:D5:E9:59:CD:1B:48:D2:9B:56:B7:A5:47:0A:7A:C6:F1:54:AC:D7
Certificate issuer:       /CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910
Certificate serial:       2065BD5170C56B620F015AFD6C83483B366DCB14
Authority key identifier: 1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa
Signing time:             Sun 03 May 2026 02:30:56 +0000
ROA not before:           Sun 03 May 2026 02:25:56 +0000
ROA not after:            Sun 02 May 2027 02:30:56 +0000
asID:                     59151
IP address blocks:        103.131.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl
                          rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:65:bd:51:70:c5:6b:62:0f:01:5a:fd:6c:83:48:3b:36:6d:cb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910
        Validity
            Not Before: May  3 02:25:56 2026 GMT
            Not After : May  2 02:30:56 2027 GMT
        Subject: CN=78D5E959CD1B48D29B56B7A5470A7AC6F154ACD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:84:f7:91:c5:67:5a:0b:82:3c:0e:26:1b:
                    fe:42:08:fe:fd:23:3a:56:25:11:59:f2:e3:68:b1:
                    b8:04:1e:ff:d1:f7:d3:b6:c7:85:18:dc:e5:5b:6d:
                    b1:39:92:24:a9:74:0b:e1:06:32:bc:d7:d3:8f:81:
                    e9:93:4a:b8:93:68:e1:79:9a:6a:28:c7:7a:d6:00:
                    09:75:09:14:4c:ab:32:c8:8f:ad:f0:00:94:e1:07:
                    55:b7:ce:56:24:fe:b4:e2:81:03:ab:e7:62:9f:46:
                    92:23:fc:b6:66:59:1b:74:49:91:2c:f9:02:6b:19:
                    de:78:3a:da:7c:64:99:5e:f9:13:eb:ea:0a:a9:50:
                    65:89:00:ec:96:58:f7:d9:58:ba:39:03:38:f5:3b:
                    16:f1:f5:8a:7f:33:31:7f:e9:c3:87:05:f3:8c:a5:
                    a6:2a:d4:ba:08:12:fc:2a:a1:45:06:d3:e1:d4:d7:
                    37:db:d5:12:a6:a3:f6:97:e7:c2:78:8f:77:48:e0:
                    ed:6f:a6:18:3c:e5:ed:60:91:ab:52:f1:69:ab:fe:
                    20:8d:61:cb:76:3e:1e:de:e2:34:1b:86:46:12:fb:
                    f3:35:1e:d2:ae:24:4a:a6:84:f5:b7:44:c2:01:01:
                    f8:30:fc:60:7d:1c:cc:86:a6:bd:89:f8:9c:bf:5c:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D5:E9:59:CD:1B:48:D2:9B:56:B7:A5:47:0A:7A:C6:F1:54:AC:D7
            X509v3 Authority Key Identifier:
                keyid:1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:67:c8:08:af:95:77:e3:48:61:6a:d2:4a:6d:1e:0e:54:e7:
         84:04:9e:87:8c:55:88:92:d5:16:a9:4d:81:58:56:4e:be:ab:
         c5:69:94:d5:2a:49:07:24:48:73:bf:26:0d:f5:64:e7:2a:f6:
         fc:1c:7b:7e:4d:87:e6:c5:4d:fa:46:dc:d1:d4:04:cc:70:fb:
         f7:a0:32:56:f8:3d:0b:b9:ad:25:41:c5:02:9c:3b:39:ce:a6:
         f3:17:be:5c:e2:6e:d0:c1:5d:a0:a7:2a:29:1f:24:9b:e0:66:
         07:03:96:65:4e:54:83:80:8f:2e:64:d8:99:e1:a8:7a:4f:25:
         9b:67:9c:ed:94:6e:95:e8:ec:44:ef:7b:c1:ef:5f:ba:fb:08:
         08:78:00:8b:7a:8d:9c:eb:b4:09:6c:09:e1:8d:c9:0e:c6:d3:
         48:70:f9:a9:2b:c3:d4:b7:e4:b2:31:54:42:53:df:3f:00:76:
         b5:03:cb:ed:34:5c:b3:35:50:c5:99:bd:ab:3d:be:79:98:f4:
         20:3f:56:8f:84:4e:a0:94:23:9b:5e:31:cd:11:66:0a:dc:c0:
         1d:da:93:a3:0b:d6:a9:ab:85:52:74:6c:34:18:de:a9:6e:8d:
         50:bb:0a:cc:07:39:2d:ce:c0:af:96:42:a6:5d:ef:ea:f7:82:
         e9:7b:c1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:26 2026 by rpki-client