Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa
File:                     3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          5QRCY/F26LQx+cpm0T1M7MYTi3ygt+T6ugETEbjQYdg=
Subject key identifier:   A9:3B:A2:4F:53:F6:25:8E:65:E9:2E:0D:79:B5:F1:87:5F:AE:3B:DC
Certificate issuer:       /CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Certificate serial:       0EAB44E672F2A34FC05F971122C8337F56D4A1EC
Authority key identifier: 02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:33:29 +0000
ROA not before:           Sun 03 May 2026 02:28:29 +0000
ROA not after:            Sun 02 May 2027 02:33:29 +0000
asID:                     58369
IP address blocks:        103.121.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
                          rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ab:44:e6:72:f2:a3:4f:c0:5f:97:11:22:c8:33:7f:56:d4:a1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
        Validity
            Not Before: May  3 02:28:29 2026 GMT
            Not After : May  2 02:33:29 2027 GMT
        Subject: CN=A93BA24F53F6258E65E92E0D79B5F1875FAE3BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9b:50:43:cb:96:fc:08:5e:82:0e:e6:d6:e4:
                    18:84:53:cd:b5:62:00:d8:50:5f:6f:a9:46:a2:35:
                    a1:34:d3:2a:e3:bb:6b:5a:2b:70:7c:e4:da:15:69:
                    dd:8a:2c:38:91:8e:b5:8d:5a:6f:22:04:52:f6:1d:
                    d6:a7:c2:05:2e:7c:6c:1c:62:12:f5:b3:dc:88:91:
                    61:17:76:9d:c4:ed:c1:12:79:9c:45:c1:da:23:54:
                    88:31:68:f2:da:14:b8:15:75:3f:bf:6a:95:27:d8:
                    49:61:44:e2:e8:22:88:2b:0f:3e:b2:81:e1:f3:28:
                    2b:85:52:3a:25:09:53:eb:92:8f:6b:0c:e7:92:46:
                    fc:12:6e:3b:0c:9b:da:8a:49:f9:35:ad:22:f0:bf:
                    f8:0c:94:a2:79:6a:51:bb:20:6c:d9:8e:c8:f2:83:
                    45:31:b4:13:65:53:4f:86:b9:d2:a9:aa:d0:bd:60:
                    d3:16:e9:52:18:a3:8d:a4:47:2f:46:6b:1a:40:79:
                    58:ac:c8:dc:9f:66:c6:77:56:9b:c5:43:81:05:4a:
                    c3:0b:0f:a9:d5:ea:9f:f7:a3:48:ac:53:82:b8:7e:
                    eb:a6:5e:35:fe:13:a8:b8:12:eb:78:6e:c6:4f:3a:
                    58:26:26:1e:5a:ef:08:72:b5:0b:31:8d:24:19:0e:
                    ca:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3B:A2:4F:53:F6:25:8E:65:E9:2E:0D:79:B5:F1:87:5F:AE:3B:DC
            X509v3 Authority Key Identifier:
                keyid:02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:0d:2a:6c:e4:ba:5f:6a:d4:d8:31:e8:ec:16:7c:93:fd:7e:
         b8:64:ed:60:d4:b6:9b:40:67:b3:08:d1:18:ef:e5:46:60:28:
         af:9b:b8:ca:b8:14:b4:7e:0d:cc:11:dd:37:44:12:d5:59:33:
         6d:31:3a:f4:dc:33:a7:2f:a0:a2:f4:ad:ca:6f:ae:7e:9c:4f:
         b4:58:ec:c6:e4:e6:99:55:28:b2:76:65:d2:f1:fd:db:4f:1a:
         6e:50:32:92:a7:41:22:cd:5c:15:2e:ed:b6:ca:5a:66:82:47:
         65:24:bc:65:bf:e9:3e:79:12:c2:67:ef:32:cc:fd:71:1a:a5:
         98:be:ac:74:cb:17:d9:14:f6:c7:87:6a:7c:bf:73:61:cc:e6:
         ae:24:3a:e7:ca:0e:ee:34:bd:e1:82:5f:ee:09:e3:cf:92:05:
         72:32:17:2d:56:82:69:b0:66:4e:12:49:96:03:84:36:98:48:
         76:90:60:9a:09:0c:11:9f:9b:86:ec:f3:18:18:f4:d6:a6:dc:
         55:ee:be:50:34:ed:5c:63:31:27:65:4a:fc:1c:5b:f9:92:be:
         57:ca:94:d6:75:b0:54:6a:d8:26:9d:72:5d:76:19:ae:af:7c:
         78:f8:c0:72:1f:be:48:52:44:8a:c0:c3:41:6c:fe:2a:4e:45:
         1e:c5:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:25 2026 by rpki-client