Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          CiiqdwBZAVnGMR0qtGMfauV+tUH3q+Pz/RWqgcuzqbE=
Subject key identifier:   EA:C3:6A:5D:FF:55:B4:82:CE:42:77:3C:F1:2F:7C:87:17:06:1D:B8
Certificate issuer:       /CN=B030517A0B1BD65FBFEE74838496299F0BA05F7F
Certificate serial:       5DD991F9BE7B67F4480B281EFCB3C640699823F8
Authority key identifier: B0:30:51:7A:0B:1B:D6:5F:BF:EE:74:83:84:96:29:9F:0B:A0:5F:7F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 02:32:56 +0000
ROA not before:           Sun 03 May 2026 02:27:56 +0000
ROA not after:            Sun 02 May 2027 02:32:56 +0000
asID:                     135478
IP address blocks:        103.121.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.crl
                          rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d9:91:f9:be:7b:67:f4:48:0b:28:1e:fc:b3:c6:40:69:98:23:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B030517A0B1BD65FBFEE74838496299F0BA05F7F
        Validity
            Not Before: May  3 02:27:56 2026 GMT
            Not After : May  2 02:32:56 2027 GMT
        Subject: CN=EAC36A5DFF55B482CE42773CF12F7C8717061DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:1f:06:0f:c7:c8:66:f2:7b:e1:98:96:63:
                    bd:a2:7e:a5:66:d7:9d:41:ae:81:af:44:c5:95:3d:
                    46:0d:1a:5e:97:ed:c6:3b:5b:8d:bb:2f:cb:00:b2:
                    34:a3:7c:a4:5c:75:67:c4:14:b7:44:a4:2f:ea:55:
                    61:29:2b:62:f9:45:6e:31:36:6b:c5:33:b9:4e:66:
                    c9:05:31:38:d3:9a:01:6e:57:cc:69:81:69:2c:d9:
                    27:30:a4:2e:9b:ed:05:31:56:5a:82:03:84:0f:ad:
                    ff:62:23:21:1d:49:f4:aa:59:92:0f:47:eb:eb:6b:
                    86:80:cc:c3:e9:e2:38:13:57:d3:d2:ab:86:37:3a:
                    a3:f4:0c:38:d4:e0:12:81:e1:07:64:99:a3:14:40:
                    50:74:2b:fa:c5:26:83:7c:d6:22:d7:44:bc:13:72:
                    24:cf:de:22:22:99:2c:05:f2:55:68:15:3e:de:34:
                    61:7d:85:fd:d4:b8:52:4d:f2:33:59:1e:5c:fb:43:
                    13:b0:9d:2d:b5:17:33:f1:be:ad:06:2e:42:37:37:
                    0a:92:4f:34:e2:a0:df:a3:52:bf:45:ad:23:3e:83:
                    8d:c4:b3:e3:bc:d5:a7:ac:02:51:fc:a7:e5:37:fc:
                    e2:89:67:a4:b5:3a:24:4d:48:cc:ca:7d:28:28:81:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C3:6A:5D:FF:55:B4:82:CE:42:77:3C:F1:2F:7C:87:17:06:1D:B8
            X509v3 Authority Key Identifier:
                keyid:B0:30:51:7A:0B:1B:D6:5F:BF:EE:74:83:84:96:29:9F:0B:A0:5F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:22:66:8c:52:71:db:d7:08:37:a5:97:1e:17:ff:bd:c5:6f:
         64:37:f2:03:51:f7:95:a0:fb:eb:9d:2b:5b:2b:db:09:1b:9a:
         61:fb:67:10:45:19:d2:96:c2:a1:78:ee:4c:59:04:d8:d9:74:
         2f:9c:ba:4b:51:a6:b6:5e:e9:62:de:5a:ea:52:67:45:75:c6:
         8c:10:bc:8f:26:09:d2:9b:99:fe:00:68:ad:fd:a5:81:21:48:
         bc:34:f3:fa:74:fb:a0:b6:c8:01:c2:0f:14:08:0d:f2:3d:86:
         50:45:12:2c:3d:32:7e:46:5d:38:9a:66:bd:98:e7:8e:cc:44:
         1d:ad:d0:8f:d1:98:e2:ad:8d:7e:76:48:f9:81:be:01:12:3f:
         54:db:9f:0a:d5:f6:04:0f:c9:7a:87:1c:b6:9a:a7:81:a3:d4:
         46:a8:fb:99:f5:4f:f9:9e:ce:ab:c3:52:e8:fe:27:2e:00:91:
         ed:d6:20:32:08:5b:ab:60:c4:91:84:37:3a:79:d7:49:c3:a6:
         25:53:02:08:53:48:6d:25:c9:94:97:50:aa:df:2f:e1:05:b5:
         1c:37:b4:4c:b1:55:1f:68:f1:b2:45:d8:59:8e:3f:89:de:3e:
         db:ac:04:a6:93:5a:4a:d5:3c:b1:f2:dd:8f:a2:a6:64:fc:0b:
         66:95:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:07:07 2026 by rpki-client