Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/3130332e35332e32302e302f32342d3234203d3e203436303334.roa
File:                     3130332e35332e32302e302f32342d3234203d3e203436303334.roa (raw, json)
Hash identifier:          PTvRAn9wK3M28ze+u03Jb/fa1WyNAdR/8RUqE31KU0c=
Subject key identifier:   F3:63:C2:F4:12:7D:8F:40:8C:F2:03:47:04:D4:09:69:2E:3E:F7:CB
Certificate issuer:       /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692
Certificate serial:       5612F691100A99F30FC4FA99B54B8711EB07C73E
Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/3130332e35332e32302e302f32342d3234203d3e203436303334.roa
Signing time:             Sun 03 May 2026 02:32:29 +0000
ROA not before:           Sun 03 May 2026 02:27:29 +0000
ROA not after:            Sun 02 May 2027 02:32:29 +0000
asID:                     46034
IP address blocks:        103.53.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl
                          rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:12:f6:91:10:0a:99:f3:0f:c4:fa:99:b5:4b:87:11:eb:07:c7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692
        Validity
            Not Before: May  3 02:27:29 2026 GMT
            Not After : May  2 02:32:29 2027 GMT
        Subject: CN=F363C2F4127D8F408CF2034704D409692E3EF7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6e:9d:0f:a5:b4:65:4e:98:10:92:6d:f2:b7:
                    c7:c3:29:b1:02:6e:c8:89:d3:93:3f:fc:9b:05:68:
                    fa:48:f3:95:a1:51:eb:5a:f4:ee:0a:a4:5a:ee:dd:
                    40:b5:e9:a0:e5:20:cc:85:b2:a9:f0:24:3a:f0:1b:
                    b0:ef:fd:09:24:b5:b5:a7:2e:3e:a9:56:7a:4b:6c:
                    19:26:96:4a:da:ab:0b:ac:82:7f:e1:23:fd:f0:ba:
                    4d:e5:99:c7:8f:e7:12:c7:00:7d:3e:db:15:73:d6:
                    61:b2:9d:7e:db:e5:20:57:39:b6:f7:eb:d7:d8:24:
                    de:81:b8:e4:33:7c:51:e6:3d:94:ad:dd:4c:9e:65:
                    80:8b:a2:dc:15:83:50:de:a3:f1:40:99:0b:b1:b0:
                    95:ac:e0:fc:74:e6:ea:90:13:75:34:1f:5b:4a:84:
                    59:a7:e0:42:e4:64:ba:05:68:26:ba:28:16:01:87:
                    1b:ac:72:f2:4d:8f:98:91:fe:a4:3e:ff:d0:7b:fc:
                    0a:61:c0:14:09:91:26:a1:46:ab:3c:5b:70:97:54:
                    f8:45:d0:80:54:58:74:cc:99:30:21:11:6f:b2:52:
                    82:d6:e0:b0:37:17:14:7b:5c:66:8b:a1:e9:c4:60:
                    2a:98:0b:66:a4:82:0a:31:82:7b:7b:a6:11:46:fc:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:63:C2:F4:12:7D:8F:40:8C:F2:03:47:04:D4:09:69:2E:3E:F7:CB
            X509v3 Authority Key Identifier:
                keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/3130332e35332e32302e302f32342d3234203d3e203436303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:ed:a2:5d:0a:91:7d:fd:30:ab:26:0c:41:f5:75:2c:77:0f:
         81:f1:e0:cb:49:e4:b5:a3:04:87:a5:88:31:c5:ce:e2:42:12:
         7e:d0:5b:ac:b9:85:73:86:e8:e5:7e:d4:36:85:a5:7e:5d:5a:
         1a:d2:d2:22:a6:64:c2:58:ce:35:0b:08:64:54:58:f7:b8:aa:
         0c:8b:a9:8d:5f:52:80:2d:af:6d:aa:b4:74:c2:59:9d:9c:d0:
         bc:b2:23:8f:5d:2e:99:d3:a8:93:95:a4:ee:07:e7:2c:8e:1d:
         75:f9:1f:42:0e:7f:4f:10:69:bc:b7:a5:c7:e6:3f:ae:e0:f0:
         ef:20:53:95:c6:db:7c:81:d5:fd:ae:18:52:91:07:d6:2b:ed:
         d5:f8:b2:81:7d:11:b7:84:f7:57:d8:e8:7b:b8:ac:04:0d:10:
         36:fd:41:cd:0e:1e:cc:34:67:28:e6:ae:4a:8a:5d:e5:b9:5d:
         35:48:20:f4:a8:fb:7e:ab:89:40:78:8a:a1:ae:e2:ac:38:94:
         83:c3:fc:63:3f:dc:ea:a2:3c:78:9a:72:4a:81:ea:b6:fb:1d:
         4e:a6:bd:cb:6f:10:3a:9c:9f:41:77:9a:ee:ea:1b:08:f4:49:
         96:4a:81:7e:8f:f0:92:06:1f:73:92:72:af:c2:f2:be:1a:1d:
         21:43:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:18:51 2026 by rpki-client