Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32362e302f32342d3234203d3e20313530323832.roa
File:                     3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (raw, json)
Hash identifier:          AthlSg+fC+KDbEL8BU+u7C1PwYX8FKjL7COZzuS8GwQ=
Subject key identifier:   7E:54:54:9D:37:FB:2E:0A:0C:72:A3:BA:37:7D:C2:6C:7B:3B:67:52
Certificate issuer:       /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606
Certificate serial:       6BB0A9CE39F0AECEC0EBD8FCF4BBD17CAC5D7A58
Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32362e302f32342d3234203d3e20313530323832.roa
Signing time:             Sun 03 May 2026 02:32:50 +0000
ROA not before:           Sun 03 May 2026 02:27:50 +0000
ROA not after:            Sun 02 May 2027 02:32:50 +0000
asID:                     150282
IP address blocks:        103.43.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl
                          rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b0:a9:ce:39:f0:ae:ce:c0:eb:d8:fc:f4:bb:d1:7c:ac:5d:7a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606
        Validity
            Not Before: May  3 02:27:50 2026 GMT
            Not After : May  2 02:32:50 2027 GMT
        Subject: CN=7E54549D37FB2E0A0C72A3BA377DC26C7B3B6752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:a1:72:01:9d:b6:4b:d3:2f:ad:8c:d1:d6:
                    e7:2f:04:45:ff:41:1d:64:44:67:eb:72:33:2c:e9:
                    6d:79:de:a7:63:b2:41:13:56:15:79:ae:58:08:fa:
                    5e:1e:49:f1:e1:fc:47:08:0b:08:b4:f3:04:16:32:
                    8f:59:c8:66:64:68:67:7a:bd:d0:21:fc:07:29:45:
                    10:2c:ee:25:8a:b1:4a:7a:89:c0:63:8e:5f:e0:47:
                    d3:b8:ca:ee:4d:18:08:dd:ec:90:73:28:ba:a3:10:
                    bd:bf:35:6d:6e:66:f7:64:30:a1:2a:43:3d:a2:30:
                    da:18:ef:e5:cf:e4:dc:0a:b0:48:0d:04:85:7e:73:
                    fc:04:4b:51:39:5e:f9:b0:dc:5e:15:b8:b3:94:92:
                    fc:9d:ec:a7:ad:d2:b7:96:56:bf:0a:34:0e:7f:59:
                    06:92:63:e6:35:95:29:b2:a5:e6:b1:15:88:d1:42:
                    18:98:61:47:d3:49:95:c1:7e:05:c2:30:ee:e9:54:
                    98:21:f9:65:7c:7e:5b:c0:c0:2d:ae:4b:2f:4e:18:
                    6a:f3:15:5b:23:c2:00:05:53:a7:9f:d2:08:1b:e6:
                    da:3a:e4:b8:35:f7:14:52:39:00:3a:01:9e:0b:e1:
                    e9:40:05:a9:66:f7:e7:07:5a:af:33:37:cc:ce:c8:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:54:54:9D:37:FB:2E:0A:0C:72:A3:BA:37:7D:C2:6C:7B:3B:67:52
            X509v3 Authority Key Identifier:
                keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32362e302f32342d3234203d3e20313530323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:9c:c4:fa:c6:5f:7e:86:f6:b3:43:ea:9e:a9:bd:39:cb:a5:
         81:5e:74:05:38:a1:98:e8:37:3d:c8:d1:97:57:ed:a6:d1:14:
         44:d2:7d:e3:47:0f:d8:aa:23:8b:10:f9:bd:8b:f2:d8:eb:7f:
         8f:97:a0:02:49:33:d4:61:3c:11:33:f0:5d:9b:7d:99:ea:77:
         a6:25:72:50:df:b0:19:2b:d0:59:a0:fe:cd:d8:21:5c:d7:e2:
         82:f4:99:fc:fe:9d:01:10:57:21:75:4f:65:ba:2a:30:08:07:
         d8:9f:bd:24:fb:60:7b:0c:53:d5:ad:4f:d4:20:3b:26:cd:28:
         94:f6:44:10:3d:9b:c2:f5:67:1f:e0:c3:71:7c:20:eb:1d:c0:
         1b:71:77:8c:6b:0e:80:ff:84:21:82:5b:23:00:50:b9:30:fa:
         24:92:43:ac:7f:43:90:78:29:e3:75:f3:b2:1c:d9:f0:2d:d9:
         dc:85:ad:85:d5:39:3b:11:63:6a:da:f9:6c:26:5b:d9:e1:03:
         92:38:81:bd:8d:ea:01:91:5e:93:b3:6f:df:46:23:63:e5:95:
         bf:0a:38:23:cb:a1:60:70:ba:59:ef:cd:3a:c6:1a:99:69:86:
         32:02:44:71:97:64:a8:46:c4:44:5d:75:2f:ab:b5:d4:8a:40:
         be:f9:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:29 2026 by rpki-client