Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa
File:                     3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier:          f7mNVMXrNdEsNoFnuQE41PlKhPiJR8mRcK26l9bSldY=
Subject key identifier:   F7:9B:C5:12:61:FD:A4:DA:25:4E:62:7A:0E:CA:51:31:E9:73:D2:0C
Certificate issuer:       /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Certificate serial:       5FBF245CF80E26E74334F59B703706F059CB5165
Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa
Signing time:             Sun 03 May 2026 02:31:01 +0000
ROA not before:           Sun 03 May 2026 02:26:01 +0000
ROA not after:            Sun 02 May 2027 02:31:01 +0000
asID:                     58475
IP address blocks:        103.81.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
                          rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bf:24:5c:f8:0e:26:e7:43:34:f5:9b:70:37:06:f0:59:cb:51:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
        Validity
            Not Before: May  3 02:26:01 2026 GMT
            Not After : May  2 02:31:01 2027 GMT
        Subject: CN=F79BC51261FDA4DA254E627A0ECA5131E973D20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:ae:97:81:76:b9:99:95:20:2b:09:3a:c0:
                    5b:71:df:d5:6e:e4:e1:31:be:5c:04:ba:b9:6b:d2:
                    99:e0:71:77:68:2d:6c:53:da:03:36:55:4f:63:f5:
                    21:f6:f1:f2:3d:5f:50:73:06:d6:2a:33:b7:4e:52:
                    8f:68:57:3a:f0:41:87:3a:64:ae:53:70:d7:40:e9:
                    24:b2:33:d6:02:c3:dd:f0:be:2e:fa:47:1c:2d:8b:
                    09:5c:6c:90:46:0b:36:88:76:90:1f:c6:9c:08:09:
                    cf:0a:89:eb:f1:ea:cd:81:41:06:2d:c3:b7:d6:cc:
                    b0:37:27:4f:2d:86:5d:31:24:1e:40:a2:5c:72:52:
                    14:0b:7a:e3:1f:ea:f8:01:fe:ab:51:9b:02:d9:5f:
                    bc:1b:69:bf:94:6d:eb:94:32:45:69:93:71:e9:48:
                    41:0d:d4:05:c7:13:50:e9:c2:8f:b3:68:ad:74:16:
                    a8:a9:14:95:55:45:ff:d0:80:88:de:18:24:7e:e9:
                    8c:5f:8c:d7:d1:53:7b:99:f0:43:64:ae:46:43:83:
                    9b:cf:c7:c1:2b:64:86:58:1b:f4:09:fd:1e:ca:90:
                    b9:c7:9a:11:29:46:84:05:62:35:44:48:c7:23:01:
                    fe:13:ac:01:45:b8:24:ab:bc:89:9a:4b:da:ae:81:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9B:C5:12:61:FD:A4:DA:25:4E:62:7A:0E:CA:51:31:E9:73:D2:0C
            X509v3 Authority Key Identifier:
                keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:10:15:90:04:76:77:b9:13:70:48:4a:7f:ec:4c:2e:1a:77:
         c9:d5:b5:ff:f2:3e:4d:ec:63:61:5c:ab:9e:7e:fb:07:38:7b:
         0c:5e:c1:67:c1:d4:a6:55:9d:76:f1:56:7b:b1:77:b4:58:a6:
         6a:95:3a:ef:63:f2:14:ee:71:4c:b6:11:c2:38:c8:ad:8d:48:
         27:e2:98:a2:9a:ae:ef:45:09:17:29:ed:0a:12:ae:3b:f2:52:
         67:a5:93:57:f7:a5:04:b6:a6:bf:b2:f0:90:ae:bf:62:7b:20:
         18:9a:45:2b:7b:e2:b7:ef:be:0d:c4:e8:41:f1:7f:83:ad:33:
         af:7d:1a:79:50:c4:a8:97:ca:2d:2c:1e:54:4c:66:4a:ee:b2:
         0b:9c:d5:77:4b:e5:f0:a1:58:d1:b1:a1:57:69:fb:74:eb:f1:
         c9:81:7c:f3:d2:05:fb:ec:43:b0:2b:b4:c4:bc:97:c5:d9:72:
         71:db:f4:58:39:62:74:d7:09:61:7c:1b:5e:5a:44:31:1e:6f:
         8b:70:fa:59:91:c3:d3:49:e5:7a:3b:55:14:57:86:0c:0d:0f:
         4c:f4:d0:48:83:2a:dd:fb:14:7b:53:47:fc:52:3a:01:7c:a8:
         8f:f2:80:83:78:16:8f:cd:a2:4a:4b:23:52:82:ce:8c:d9:52:
         4c:b4:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:51 2026 by rpki-client