Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa
File:                     3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          3pwrvYXUcXwtoiYb2fFzF/R5rpxEebJsT3YYZEfo+OM=
Subject key identifier:   75:EB:D5:3C:66:C5:50:45:AE:9A:06:54:32:E0:36:6B:0A:7A:85:63
Certificate issuer:       /CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Certificate serial:       1D64EF89D79139CA54657CE965544FA4656A9284
Authority key identifier: 02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:33:30 +0000
ROA not before:           Sun 03 May 2026 02:28:30 +0000
ROA not after:            Sun 02 May 2027 02:33:30 +0000
asID:                     58369
IP address blocks:        103.121.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
                          rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:64:ef:89:d7:91:39:ca:54:65:7c:e9:65:54:4f:a4:65:6a:92:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
        Validity
            Not Before: May  3 02:28:30 2026 GMT
            Not After : May  2 02:33:30 2027 GMT
        Subject: CN=75EBD53C66C55045AE9A065432E0366B0A7A8563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8e:31:07:62:be:05:d4:74:fa:0e:02:c3:16:
                    0f:33:ec:16:e3:a5:f6:5f:d0:0d:b7:23:ec:99:b3:
                    53:54:c8:ff:96:60:7f:db:43:a2:f6:90:60:ee:d4:
                    03:88:8a:9d:12:53:55:83:32:e4:ab:dc:98:df:23:
                    bf:ae:35:2f:86:0d:f9:e3:96:8d:ff:32:cf:f5:b7:
                    9c:45:4d:5e:47:df:f0:4f:fd:e1:0f:eb:f0:b8:c7:
                    b6:6d:1d:fd:10:bb:0e:fd:78:67:d6:e5:10:27:d9:
                    11:6f:79:fb:72:11:90:06:de:c2:03:a2:ab:d3:e7:
                    6d:a9:49:00:93:92:90:bf:84:33:a4:cb:17:43:24:
                    33:c5:41:b5:74:aa:5f:d9:2e:f9:6b:53:ff:3d:28:
                    c0:99:88:46:bb:84:4b:bb:e7:bb:db:ab:2a:22:0a:
                    c1:0e:28:5d:6d:fe:3f:de:c5:ae:2b:bc:82:05:78:
                    7f:52:b7:a5:57:c5:7f:f5:69:f8:33:22:11:9e:4e:
                    6b:a1:ee:2e:42:e0:27:4f:7a:e7:94:88:80:5d:19:
                    fd:f2:dc:c4:53:23:1c:46:c0:69:1f:2d:bc:b9:f4:
                    19:65:e2:93:99:84:ff:4f:16:28:08:33:65:91:a6:
                    5b:c6:53:f9:71:2b:5d:70:72:18:07:8f:fc:df:cf:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EB:D5:3C:66:C5:50:45:AE:9A:06:54:32:E0:36:6B:0A:7A:85:63
            X509v3 Authority Key Identifier:
                keyid:02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:e1:1d:22:44:7d:bc:1f:0d:0c:6e:1d:21:c9:3f:6a:ac:e1:
         e6:2d:a2:73:54:d0:8d:53:7d:a0:c7:01:ce:ea:01:40:bc:17:
         fe:2d:81:98:56:51:9a:f4:42:87:3c:7c:74:69:e1:8f:37:47:
         b5:2d:0c:80:eb:59:4c:05:87:a2:87:39:46:71:7f:03:65:2e:
         f6:56:e9:68:a9:bd:ad:35:25:72:be:5c:30:2f:ec:fe:3d:1a:
         05:ad:25:e7:9c:37:f0:7c:41:b6:50:63:91:18:63:84:74:98:
         62:33:1b:0e:ef:12:d0:c5:1f:21:cc:1b:91:dc:79:df:d9:54:
         e7:ad:77:11:fc:43:cc:88:2d:7d:08:be:c0:67:45:ec:21:01:
         88:5c:dc:62:11:b1:d3:85:69:3e:14:88:10:0d:33:a5:db:23:
         8b:32:41:05:f3:d3:31:1d:48:bc:b9:58:d2:52:32:c7:56:1d:
         1f:72:a8:5c:82:68:8e:37:46:8c:17:0a:fa:d8:68:dc:26:ae:
         de:74:a7:41:7f:44:da:4c:71:05:f9:a8:37:0e:c4:9a:ad:96:
         e5:a6:5c:99:5f:d5:7b:11:af:cd:69:6c:10:ef:ae:eb:08:11:
         45:32:5a:bb:c0:0d:77:c0:3d:8f:d4:d6:29:53:c9:35:39:3b:
         0f:59:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:34 2026 by rpki-client