Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e35352e33362e302f32322d3234203d3e20313336303532.roa
File:                     3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=
Subject key identifier:   94:87:28:DB:32:DE:3F:AF:1E:58:70:B7:86:AD:C3:C4:98:97:4F:1C
Certificate issuer:       /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481
Certificate serial:       751D7EF14354DE0C12838CD6D821E9B0A7DC61DC
Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e35352e33362e302f32322d3234203d3e20313336303532.roa
Signing time:             Sun 03 May 2026 02:33:15 +0000
ROA not before:           Sun 03 May 2026 02:28:15 +0000
ROA not after:            Sun 02 May 2027 02:33:15 +0000
asID:                     136052
IP address blocks:        103.55.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl
                          rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1d:7e:f1:43:54:de:0c:12:83:8c:d6:d8:21:e9:b0:a7:dc:61:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481
        Validity
            Not Before: May  3 02:28:15 2026 GMT
            Not After : May  2 02:33:15 2027 GMT
        Subject: CN=948728DB32DE3FAF1E5870B786ADC3C498974F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:78:09:ff:52:5b:f6:a2:7a:39:94:86:ad:
                    cb:e7:98:9c:20:37:39:1e:7b:57:bb:09:9c:51:77:
                    13:27:4f:51:75:8e:e5:2b:36:fb:1e:60:a8:d1:03:
                    cf:c4:24:de:48:c2:f0:2b:74:56:6a:a9:07:45:92:
                    77:92:c9:e3:1e:54:e5:ae:6e:d1:19:9d:65:9f:7b:
                    bd:98:62:e8:23:af:3c:51:ff:19:4f:0f:ac:be:93:
                    c5:a1:f6:41:43:f7:86:27:c2:4a:57:7d:1c:ae:49:
                    6e:89:1c:04:4b:71:80:a3:11:04:3f:65:71:2c:fe:
                    6e:95:30:29:b8:d1:27:11:64:fe:ce:55:cb:71:9b:
                    77:99:e1:1a:c6:0f:82:c0:44:7e:e0:d5:95:1f:6b:
                    b9:b9:13:f5:1d:20:58:2c:db:ab:75:66:02:f8:fd:
                    8b:fb:7b:24:4a:23:22:2a:9e:eb:e1:c3:9d:21:23:
                    93:f1:fb:07:8a:20:94:40:20:86:5a:b1:71:f1:76:
                    fb:43:0f:3a:d7:0b:cf:55:1d:84:5d:d7:2f:4a:eb:
                    dd:8b:a4:4c:37:36:76:2c:f8:8b:09:7a:d3:fc:aa:
                    3a:7f:6a:11:91:81:5d:ba:a3:1d:04:08:08:4d:79:
                    58:d7:8f:80:eb:cf:58:81:cd:b8:42:e6:e2:10:b5:
                    de:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:87:28:DB:32:DE:3F:AF:1E:58:70:B7:86:AD:C3:C4:98:97:4F:1C
            X509v3 Authority Key Identifier:
                keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e35352e33362e302f32322d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:fe:cb:c3:99:3f:49:26:50:a1:21:5e:2a:48:24:a1:28:81:
         d3:69:3a:87:07:3d:6c:69:eb:08:b0:9a:2a:78:31:96:32:74:
         ad:ba:4a:1a:6a:80:b0:4f:eb:b8:54:5a:8c:18:4e:14:86:b6:
         d4:89:5b:7f:34:ce:bd:8d:3b:98:b8:12:5a:c8:d6:9a:12:ff:
         a7:9a:ac:62:f8:51:9f:3a:09:c1:ba:84:ab:7e:b5:a6:b8:ea:
         f7:9f:a0:a0:fe:ca:69:21:22:b3:c1:29:d9:18:47:c6:a2:48:
         b5:c1:24:69:9d:f7:b9:7d:bb:fd:75:e4:98:09:75:05:05:ce:
         96:d2:85:3e:d9:35:08:b4:79:1a:65:0b:69:f5:73:ac:06:12:
         2f:9c:dc:b9:38:c6:db:28:3e:fd:92:d0:fc:fd:a5:70:eb:70:
         48:b5:3f:c5:7e:e6:5c:b7:41:4a:bd:29:23:73:fe:e2:40:2b:
         cc:04:9d:f7:be:99:68:af:bc:8a:37:33:a3:ca:f9:15:69:42:
         2f:3a:2c:ca:a9:75:e3:d3:57:d5:17:56:e7:87:ba:f8:de:d7:
         78:bc:de:be:45:29:ec:80:2e:79:bd:db:cf:17:db:91:3f:ac:
         99:b2:15:1e:3e:5b:a9:cf:d8:92:c6:04:c8:8f:20:6a:a6:22:
         c8:f7:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:49 2026 by rpki-client