Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa
File:                     3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (raw, json)
Hash identifier:          95qI5TTOif1MY2iIjk3ZkvKBiCiEWOUsXhE4Y/1tZsk=
Subject key identifier:   AB:06:4C:0B:D9:52:26:8F:7F:68:30:99:37:98:4C:97:5C:F6:3D:96
Certificate issuer:       /CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93
Certificate serial:       52A82C5CEF71C43CD0D00317A4035CD8FB6B9E69
Authority key identifier: 93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa
Signing time:             Sun 03 May 2026 02:34:45 +0000
ROA not before:           Sun 03 May 2026 02:29:45 +0000
ROA not after:            Sun 02 May 2027 02:34:45 +0000
asID:                     141903
IP address blocks:        103.164.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl
                          rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a8:2c:5c:ef:71:c4:3c:d0:d0:03:17:a4:03:5c:d8:fb:6b:9e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93
        Validity
            Not Before: May  3 02:29:45 2026 GMT
            Not After : May  2 02:34:45 2027 GMT
        Subject: CN=AB064C0BD952268F7F68309937984C975CF63D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ae:f4:19:53:f8:82:b2:06:15:5d:88:a6:18:
                    7c:1e:4b:ea:1e:56:75:9b:d2:0e:ba:a9:3c:2b:75:
                    38:6e:8e:f2:c4:47:c8:6d:3b:9b:87:60:07:84:65:
                    66:62:1a:81:f1:5c:d3:03:75:2d:36:1b:10:3b:61:
                    14:da:20:c9:32:7f:7a:24:9e:e7:2a:73:0f:4f:ac:
                    70:7e:45:3c:e6:7c:51:d0:26:26:87:73:f3:f4:83:
                    a3:76:31:1d:a7:b9:bc:a3:2e:d0:2c:d4:5e:53:ae:
                    8c:55:26:01:07:07:67:f4:bb:cb:72:95:41:9a:ee:
                    42:8c:45:a9:50:4a:bb:eb:a3:cd:74:d1:64:ef:1a:
                    c7:d7:48:0f:24:ba:5d:69:1f:c2:af:0b:92:d7:68:
                    0a:60:c4:05:98:40:85:83:82:4b:e4:ff:e1:3c:11:
                    14:d9:fd:1e:d3:32:80:18:43:b3:1b:29:48:6e:99:
                    19:d0:f0:91:40:cd:ab:c8:fe:06:c1:39:7a:b9:4f:
                    97:55:b4:c3:38:81:66:d0:66:0f:ef:a7:5c:d0:45:
                    a2:40:26:6f:a0:6e:6c:4b:83:ad:16:41:fc:6c:df:
                    5a:7c:8c:37:ec:9d:66:d9:30:42:be:5d:8d:e4:25:
                    cd:a1:5c:f3:d2:99:63:0d:92:d8:1b:a3:7d:1e:9e:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:06:4C:0B:D9:52:26:8F:7F:68:30:99:37:98:4C:97:5C:F6:3D:96
            X509v3 Authority Key Identifier:
                keyid:93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:47:cc:98:22:ab:2b:96:80:64:41:0d:77:1a:14:9e:ec:00:
         62:c5:48:9a:8f:ad:e3:b6:72:ec:7a:71:f4:fa:d7:1c:0f:e9:
         b3:62:97:83:3f:97:45:f8:6b:aa:f6:4d:a8:21:dc:b2:8f:54:
         9a:34:11:0a:fc:af:97:c1:63:3c:53:9c:ef:3e:8e:03:ad:5d:
         42:a1:15:09:94:a8:80:6c:85:85:0b:0c:91:a5:ec:a2:98:e4:
         48:76:bf:4f:c5:a0:53:29:fc:e7:a1:f0:5d:08:c6:c1:5b:7f:
         99:ab:49:dd:37:4f:7e:e4:4c:d6:e6:c5:be:e0:30:c3:70:fc:
         f3:78:22:f3:c2:2d:f9:48:17:b9:20:66:d1:f9:50:b5:08:00:
         2e:8d:56:69:8c:d1:d1:53:89:4a:8f:0a:66:24:2f:85:8f:c8:
         72:7e:95:14:e6:65:ba:19:a5:e3:81:f7:a7:d9:3b:8f:d5:2e:
         f3:2a:59:6f:a1:26:cf:af:5f:dd:c4:0e:16:9d:d8:b0:0b:67:
         d7:68:32:35:95:65:0b:c9:27:c9:99:25:5c:a2:d5:d9:7a:09:
         96:6b:d3:fb:1e:c1:e9:f6:5d:1b:c7:b8:03:68:94:54:63:9f:
         36:09:0b:2e:d1:e7:66:09:8d:49:da:08:8d:c0:e8:b2:1c:67:
         e4:3e:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:24 2026 by rpki-client