Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa
File:                     3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (raw, json)
Hash identifier:          syc9OmzYoBaedmjmic1EKQ/a6uhzrSdqyYEMr5w+o44=
Subject key identifier:   48:82:EF:5E:78:65:F9:B3:D8:75:4D:AE:2C:C7:20:0B:3B:51:E2:B6
Certificate issuer:       /CN=05F08C4CD8D1918A8E88D2D4AA116633745B8F66
Certificate serial:       589C8FC2E07CE8FC3BC31E8747FD508BF3A88138
Authority key identifier: 05:F0:8C:4C:D8:D1:91:8A:8E:88:D2:D4:AA:11:66:33:74:5B:8F:66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa
Signing time:             Sun 03 May 2026 02:32:51 +0000
ROA not before:           Sun 03 May 2026 02:27:51 +0000
ROA not after:            Sun 02 May 2027 02:32:51 +0000
asID:                     141130
IP address blocks:        103.158.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.crl
                          rsync://rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9c:8f:c2:e0:7c:e8:fc:3b:c3:1e:87:47:fd:50:8b:f3:a8:81:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05F08C4CD8D1918A8E88D2D4AA116633745B8F66
        Validity
            Not Before: May  3 02:27:51 2026 GMT
            Not After : May  2 02:32:51 2027 GMT
        Subject: CN=4882EF5E7865F9B3D8754DAE2CC7200B3B51E2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:44:41:d4:5f:d3:2f:b9:90:41:ea:26:b1:
                    61:ef:82:3a:d3:c5:f5:8d:4e:0b:70:3c:55:42:54:
                    0e:e1:07:c7:7f:79:99:96:10:f4:68:96:20:99:d3:
                    0f:19:c0:3a:38:c5:fa:ee:83:9c:e3:a1:19:69:4f:
                    c1:cb:41:21:94:22:82:fd:17:ae:4b:6f:1b:31:2d:
                    47:9b:d6:37:82:e9:ec:b6:18:2b:25:d6:1b:3b:f2:
                    69:19:4a:ce:82:44:32:d1:b1:27:27:00:f7:8d:81:
                    c6:69:2c:b8:ac:31:18:5d:a0:75:a5:d4:57:9f:1a:
                    14:c4:43:60:d3:ae:f6:53:51:d1:fa:8e:6b:69:a4:
                    16:88:e1:66:b1:98:83:5f:87:78:81:45:1e:8b:2a:
                    c3:f0:1a:eb:1d:89:9f:4b:c8:c8:61:4c:01:a4:17:
                    94:64:26:d6:a4:1c:91:22:89:cd:7d:60:db:9c:9d:
                    84:94:f5:93:f3:04:af:82:a7:0c:f2:fa:42:dc:da:
                    f3:dc:6a:36:6a:94:fc:5f:e3:a2:ac:0d:be:21:ed:
                    63:28:a9:cb:f9:42:82:49:7a:f5:cc:9d:8f:c6:bb:
                    ad:22:0f:32:96:ad:a7:f3:c6:8e:bf:df:11:ef:1c:
                    ec:0d:a7:a0:51:cf:a4:b3:36:88:c8:bc:05:1a:aa:
                    6c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:82:EF:5E:78:65:F9:B3:D8:75:4D:AE:2C:C7:20:0B:3B:51:E2:B6
            X509v3 Authority Key Identifier:
                keyid:05:F0:8C:4C:D8:D1:91:8A:8E:88:D2:D4:AA:11:66:33:74:5B:8F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b0:41:e9:8d:1f:0f:5c:00:6e:c6:3d:fb:f2:f0:c1:2c:3a:
         5f:2b:8b:b9:f9:9a:c5:da:08:53:2e:b5:5d:0a:30:2c:4b:b8:
         41:63:67:fc:c0:50:5b:4d:4c:6e:64:b0:a8:70:c6:5f:18:6e:
         a5:af:d4:ad:f6:eb:f9:99:9d:64:a2:c6:e7:e7:2f:a2:51:7b:
         b8:23:03:bd:6f:04:8e:c7:f7:69:be:74:5c:19:5a:7a:05:fb:
         68:20:d6:06:ba:80:6d:fe:17:92:93:0b:53:3d:dd:db:2b:27:
         d3:0a:b4:0a:77:43:c1:2a:f4:b7:00:b0:03:55:6b:8d:74:83:
         04:f0:c0:38:f6:34:39:3d:aa:b1:d3:99:4b:5b:8b:38:2f:38:
         d7:a6:75:dc:81:49:10:02:13:f5:cf:2a:0b:07:f9:cd:6f:bd:
         79:9f:27:b9:47:fa:57:fc:0d:34:29:6d:da:5a:8e:86:0e:e2:
         14:ca:5e:9a:2a:3e:ef:d9:3d:2b:ca:41:89:c5:b0:36:ec:dd:
         85:b3:73:60:a6:01:17:d7:ed:80:81:39:1c:f4:36:92:06:d8:
         83:c9:b5:38:76:3e:ca:95:b9:35:99:af:9f:9f:e3:bf:47:a6:
         bf:3c:5d:5d:3c:54:99:e5:56:87:4f:09:b9:55:c0:4c:f6:34:
         5d:2b:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:25:30 2026 by rpki-client