Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36342e302f32342d3234203d3e203539313538.roa
File:                     3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (raw, json)
Hash identifier:          vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=
Subject key identifier:   3D:D5:2F:80:97:5B:D8:B3:4E:8D:3B:66:13:1F:A5:D5:D1:0B:25:F5
Certificate issuer:       /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE
Certificate serial:       07E171FBF6D67E536EBAD117616CC3CCE9EC94B8
Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36342e302f32342d3234203d3e203539313538.roa
Signing time:             Sun 03 May 2026 02:31:16 +0000
ROA not before:           Sun 03 May 2026 02:26:16 +0000
ROA not after:            Sun 02 May 2027 02:31:16 +0000
asID:                     59158
IP address blocks:        103.224.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl
                          rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e1:71:fb:f6:d6:7e:53:6e:ba:d1:17:61:6c:c3:cc:e9:ec:94:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE
        Validity
            Not Before: May  3 02:26:16 2026 GMT
            Not After : May  2 02:31:16 2027 GMT
        Subject: CN=3DD52F80975BD8B34E8D3B66131FA5D5D10B25F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:fd:2c:5e:88:88:38:a4:a3:3c:ac:ae:44:
                    bc:a0:8d:90:73:ce:dd:9e:64:06:4d:2c:90:fa:26:
                    77:3f:73:ce:8b:1f:2f:d9:7a:98:ba:48:74:b0:d1:
                    82:d9:3a:42:e4:e4:7f:56:50:e9:72:70:b0:38:2c:
                    00:f0:3d:1d:a5:b2:7a:3b:a2:8a:7a:4c:db:7e:66:
                    a8:d2:f9:cf:eb:dd:29:34:32:db:a6:ff:bd:90:60:
                    bd:61:95:d0:84:a3:3e:71:2a:f2:42:ea:74:09:96:
                    f6:18:7c:70:22:3b:1b:f5:45:25:63:54:ba:db:04:
                    85:9a:e3:1a:85:d7:74:73:58:ba:c8:78:4a:11:38:
                    b7:e3:81:e6:12:52:69:2d:5c:4b:76:99:08:29:16:
                    e1:43:c9:32:9c:5d:ef:8a:53:93:d2:dd:95:a8:48:
                    b7:6d:aa:cd:1d:3f:3b:08:fd:40:31:5d:37:76:f1:
                    8e:27:5d:22:3c:2a:ad:28:be:78:b7:28:88:8d:a4:
                    27:ed:61:4a:24:e9:6e:a3:39:6b:54:d3:f2:aa:ab:
                    9a:0b:f1:d0:96:65:ac:a5:5c:b9:97:ab:7b:23:47:
                    de:49:c3:23:22:41:37:a5:34:37:7e:ee:30:b1:38:
                    88:50:67:17:ac:b0:9d:2a:c1:ce:25:57:d7:16:71:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D5:2F:80:97:5B:D8:B3:4E:8D:3B:66:13:1F:A5:D5:D1:0B:25:F5
            X509v3 Authority Key Identifier:
                keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36342e302f32342d3234203d3e203539313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:00:df:62:87:51:82:aa:77:62:36:08:2c:d4:a3:1f:a6:79:
         ee:e2:d5:30:e0:93:3b:44:46:57:6e:8d:7f:33:04:8f:3c:13:
         7e:a2:f6:ba:19:0b:c0:e7:dd:a9:39:e5:a7:27:2e:fd:9c:f1:
         29:6c:51:42:ae:1e:12:bc:63:6b:4d:eb:8e:3d:93:f3:14:24:
         a5:4d:d4:73:e8:8c:a6:dd:9a:01:b8:21:2c:56:28:09:46:59:
         ef:da:50:9d:fb:95:94:af:5e:63:66:4e:95:56:bb:5c:da:d5:
         6e:26:79:10:67:2f:e7:a9:37:22:0b:0a:ca:ad:6b:6d:bf:ae:
         9a:f7:fa:c8:b5:2f:24:28:92:89:e8:53:ca:24:b5:45:f5:64:
         28:23:01:85:f2:31:37:4b:08:1f:40:cd:57:17:60:b5:99:06:
         cc:ee:de:bc:99:1e:3b:5b:62:29:d7:32:43:cd:f4:01:62:14:
         d1:9b:6c:29:0a:33:e3:a8:be:13:a0:27:b9:bc:ac:64:dc:fd:
         8a:d9:3f:44:e5:e0:e9:f9:e2:1c:40:ba:50:4c:ae:42:7d:00:
         53:1e:07:47:55:06:09:24:c8:9b:c8:00:88:ae:bf:63:dd:22:
         eb:aa:07:78:6f:22:80:ef:c1:35:11:54:5b:dd:6f:ac:e6:a3:
         b3:c1:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:28 2026 by rpki-client