Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32342d3234203d3e203436303233.roa
File:                     3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          zTrk/mUqNGYGN3goqf8btntNYIFiQO0wuda1PmG4Zpo=
Subject key identifier:   77:7F:43:1D:FD:DA:CD:7A:7B:3B:84:AD:A2:E2:50:10:F9:29:C0:0D
Certificate issuer:       /CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Certificate serial:       53D21DD5D851DE2A87779FB8235F4C448EB891DD
Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32342d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 02:33:46 +0000
ROA not before:           Sun 03 May 2026 02:28:46 +0000
ROA not after:            Sun 02 May 2027 02:33:46 +0000
asID:                     46023
IP address blocks:        103.245.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
                          rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d2:1d:d5:d8:51:de:2a:87:77:9f:b8:23:5f:4c:44:8e:b8:91:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067
        Validity
            Not Before: May  3 02:28:46 2026 GMT
            Not After : May  2 02:33:46 2027 GMT
        Subject: CN=777F431DFDDACD7A7B3B84ADA2E25010F929C00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:e6:d0:f2:13:55:7a:9d:79:04:d9:01:75:
                    25:42:ae:9b:be:80:73:29:6b:e9:4f:be:7a:04:6d:
                    5d:9c:64:db:0b:8e:48:05:57:25:23:0e:36:4a:2a:
                    3b:9e:a4:7d:fb:59:4d:b6:b1:4b:58:01:f3:8a:21:
                    17:1c:23:62:5a:27:43:de:71:3e:25:bd:cf:8c:30:
                    e6:56:09:c4:61:04:8d:91:ef:d3:34:6c:38:0d:39:
                    a2:99:d1:bb:d6:e1:30:46:64:a8:69:db:0f:c4:7d:
                    2d:85:ff:8c:cf:6b:0e:b0:8f:40:4b:85:bc:d4:10:
                    cd:3f:89:f6:6c:22:bc:31:8a:c9:07:83:54:1c:72:
                    8c:b5:85:05:d7:d4:a0:0a:66:89:77:0a:bd:0e:3e:
                    67:bc:25:e4:e6:03:15:90:1f:c8:e6:91:00:92:b3:
                    e8:ab:5f:fd:8d:25:4f:7a:e5:97:76:3a:29:bb:98:
                    91:75:c4:ce:95:ec:48:d5:d0:ee:23:6b:99:11:76:
                    3b:0d:f3:7e:88:d6:84:0b:0e:94:c4:2a:c1:c7:c2:
                    92:8b:af:19:58:9a:1a:8d:5b:5f:58:2e:de:ad:66:
                    58:2e:88:b0:33:b0:24:54:ea:c2:77:0e:da:c9:16:
                    d5:6b:e3:1f:18:fa:4e:b2:7d:81:eb:5e:0a:31:6c:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:43:1D:FD:DA:CD:7A:7B:3B:84:AD:A2:E2:50:10:F9:29:C0:0D
            X509v3 Authority Key Identifier:
                keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:65:ee:a2:30:e5:6a:88:c4:3f:21:c9:6c:87:08:41:29:d8:
         3f:0c:66:9d:3f:25:32:ba:56:e8:3c:91:a4:65:be:1a:2e:dd:
         f3:bf:f2:7c:bf:86:d4:67:a5:17:bd:e2:f0:a7:2b:c2:22:44:
         33:d3:8b:3d:50:14:2c:4c:63:e9:c7:22:9a:61:16:74:60:83:
         fb:30:3b:aa:7e:22:e0:90:1b:b5:0e:11:1b:33:06:e3:4c:10:
         b6:66:e8:c7:a9:19:07:4a:41:ca:42:7b:13:92:60:5f:39:f2:
         44:36:ad:61:4d:bf:ce:52:2d:80:e7:95:10:99:27:06:fc:1a:
         8b:0a:b1:f0:22:00:98:f7:f1:c3:da:25:bf:20:1b:b7:9e:46:
         f6:cc:c3:59:47:0c:4d:52:eb:c7:ff:f2:0d:c1:2b:be:80:81:
         01:f8:95:1c:a6:26:e4:10:39:53:f3:7d:16:13:a6:af:85:31:
         e9:5b:f4:17:d3:b4:79:60:0e:71:d0:05:83:4d:09:ea:ab:4f:
         aa:f2:aa:05:58:82:20:4c:cb:e8:2a:4a:41:b8:b1:4d:61:d2:
         e9:88:06:2c:ae:b3:ae:b0:fb:21:98:06:db:7f:40:85:fd:19:
         e7:0c:b8:1a:8a:ea:2a:8e:e7:7f:72:7d:a9:a6:94:f9:f5:d5:
         5c:75:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:54 2026 by rpki-client