Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa
File:                     3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa (raw, json)
Hash identifier:          Wot4Fg65UHELPYSjNtGBiNTS+yl3LZ1iOPF4d5K6uzM=
Subject key identifier:   5E:9B:55:E1:EE:C5:64:1B:A1:1A:61:C5:51:4B:F6:A8:06:2B:BE:F0
Certificate issuer:       /CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB
Certificate serial:       388D703CFC9415244F8A7EB033C4DCED736D6666
Authority key identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa
Signing time:             Sun 03 May 2026 02:35:10 +0000
ROA not before:           Sun 03 May 2026 02:30:10 +0000
ROA not after:            Sun 02 May 2027 02:35:10 +0000
asID:                     133809
IP address blocks:        103.50.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl
                          rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8d:70:3c:fc:94:15:24:4f:8a:7e:b0:33:c4:dc:ed:73:6d:66:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB
        Validity
            Not Before: May  3 02:30:10 2026 GMT
            Not After : May  2 02:35:10 2027 GMT
        Subject: CN=5E9B55E1EEC5641BA11A61C5514BF6A8062BBEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:8e:23:fa:17:1a:d3:38:be:5a:d9:a2:4f:
                    15:58:8c:11:82:01:86:d2:d3:0a:18:cb:98:09:89:
                    22:56:c5:01:bc:a9:1c:c8:2f:e8:5b:cd:8b:6e:a6:
                    9e:4f:d4:12:74:ba:f4:08:c0:f6:9c:30:61:ad:9b:
                    7c:45:72:75:ea:f6:09:35:0f:e0:0d:cd:73:07:59:
                    1e:c9:06:ae:89:07:8a:0c:79:31:18:82:33:92:0e:
                    4b:1d:b7:75:9a:10:64:18:cf:2f:5d:c4:bd:f1:75:
                    6a:bd:d5:56:c7:79:04:97:cb:40:9b:62:ee:3d:ba:
                    ab:5b:dc:b2:99:9f:b2:2f:c2:01:af:8d:c6:67:1d:
                    28:49:62:90:6e:31:65:74:bf:cc:4a:5f:3e:99:90:
                    fc:9d:d1:fb:46:1e:7d:9d:fe:4d:0b:70:69:b6:97:
                    12:3a:8c:ff:15:97:31:36:60:2e:3f:1f:6a:bb:e7:
                    6c:40:d4:53:57:a5:53:83:81:78:28:21:5b:c1:a5:
                    03:8f:e1:49:93:d6:76:0b:36:8c:9d:0c:e2:4c:a8:
                    f6:66:9f:8a:d8:5d:d2:6d:96:40:7a:e4:5a:4f:78:
                    4f:b7:10:c8:e5:74:67:f0:06:81:ae:39:3b:ea:b9:
                    e9:e2:72:c9:7f:7f:4e:69:15:d4:7b:12:8a:6a:12:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9B:55:E1:EE:C5:64:1B:A1:1A:61:C5:51:4B:F6:A8:06:2B:BE:F0
            X509v3 Authority Key Identifier:
                keyid:10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:81:86:17:43:03:e1:58:27:55:b6:20:e9:bd:81:fb:7e:52:
         e3:b0:c3:9f:e8:eb:3e:92:60:58:a6:9b:c2:dd:04:62:a7:5a:
         ef:f1:96:1f:36:d0:50:7b:87:34:6d:5e:76:d1:4d:1f:29:f4:
         f1:05:84:82:24:68:ac:22:00:c1:21:a5:e2:78:4d:5b:24:fd:
         c3:b1:e2:e8:10:a3:b9:77:e7:75:e1:27:0c:56:03:08:43:be:
         ee:c2:c0:d9:6c:e8:36:99:d5:b6:75:c3:97:a9:9d:dc:cd:b3:
         58:ad:ae:7f:b5:42:c1:d2:d0:35:78:51:4f:d3:ac:2c:cf:b2:
         81:4d:8b:62:37:6d:42:21:77:8c:05:d2:95:2c:0a:6d:49:e8:
         22:62:32:5f:3d:1b:7d:19:9b:ed:d1:4e:bc:44:7f:59:d1:25:
         56:3d:86:d5:0d:d6:6e:97:5e:9b:2e:e4:78:c3:21:ee:98:d2:
         6e:07:5e:e9:d2:c0:13:ff:e0:ed:e8:26:3e:24:2b:37:86:d2:
         28:5e:c4:67:af:0c:55:93:83:b9:cf:49:ba:2b:5c:c1:5d:92:
         24:25:ed:c3:f9:3f:3c:96:9b:66:f8:02:f3:bd:15:77:3e:40:
         fb:aa:be:a0:7f:95:16:54:02:6f:6a:18:c7:f2:51:45:e8:31:
         db:a7:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:07 2026 by rpki-client