Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa
File:                     3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          TcSz+zauzS2d0wQlQHs2LnJlDUw0IXmVVllLjuNxmZ8=
Subject key identifier:   E2:5E:89:71:EB:26:0D:9A:BC:34:AA:83:61:E0:76:87:41:71:F1:29
Certificate issuer:       /CN=50F813DC43F6534BABABFE684D645B96509770F9
Certificate serial:       3C3AACB3E7D71486641EFC2878208DEAE568B523
Authority key identifier: 50:F8:13:DC:43:F6:53:4B:AB:AB:FE:68:4D:64:5B:96:50:97:70:F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50F813DC43F6534BABABFE684D645B96509770F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:35:47 +0000
ROA not before:           Sun 03 May 2026 02:30:47 +0000
ROA not after:            Sun 02 May 2027 02:35:47 +0000
asID:                     4800
IP address blocks:        103.183.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/50F813DC43F6534BABABFE684D645B96509770F9.crl
                          rsync://rpki-rsync.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/50F813DC43F6534BABABFE684D645B96509770F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50F813DC43F6534BABABFE684D645B96509770F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3a:ac:b3:e7:d7:14:86:64:1e:fc:28:78:20:8d:ea:e5:68:b5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50F813DC43F6534BABABFE684D645B96509770F9
        Validity
            Not Before: May  3 02:30:47 2026 GMT
            Not After : May  2 02:35:47 2027 GMT
        Subject: CN=E25E8971EB260D9ABC34AA8361E076874171F129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:11:a1:31:66:e1:3f:2c:ea:a9:78:36:36:b8:
                    d9:95:a2:5e:3e:e0:12:54:79:1a:a9:fe:d8:08:e2:
                    b9:e7:8d:45:ce:48:70:77:af:bd:6a:93:ba:a6:72:
                    aa:ab:ca:3d:3b:70:21:88:17:0a:6f:5d:3d:b8:76:
                    7c:05:09:a6:51:ae:fb:b1:a4:81:71:da:c2:58:b4:
                    79:10:96:b7:b0:67:56:dd:4f:fc:c1:62:6c:e2:4a:
                    d1:1f:3a:e2:7f:28:e9:6c:40:c9:79:d6:a3:94:43:
                    82:a3:3b:05:24:91:b3:7a:42:c4:1a:b8:08:97:8b:
                    1c:52:7f:54:d6:7b:c6:1b:65:ce:f9:3e:2b:ce:22:
                    b2:29:50:6e:44:77:1c:f2:4a:db:f1:30:dd:88:5c:
                    b3:61:bb:f8:5c:aa:5b:ba:e1:74:c3:ed:a7:b1:e8:
                    b7:e1:86:6f:12:9c:67:28:0d:9e:86:59:b7:0a:71:
                    dd:f9:58:12:e6:11:78:91:fc:ae:08:28:e1:bc:35:
                    69:99:53:78:62:d8:20:42:f1:7c:82:a2:1d:9b:60:
                    df:65:f7:f4:0e:81:46:ac:24:c5:1e:5f:a1:9c:87:
                    47:dd:f2:de:83:89:5f:3b:ca:2f:75:a4:5f:2a:e3:
                    2b:97:09:c0:21:e0:0d:10:cf:23:78:fc:09:4f:4e:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5E:89:71:EB:26:0D:9A:BC:34:AA:83:61:E0:76:87:41:71:F1:29
            X509v3 Authority Key Identifier:
                keyid:50:F8:13:DC:43:F6:53:4B:AB:AB:FE:68:4D:64:5B:96:50:97:70:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/50F813DC43F6534BABABFE684D645B96509770F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50F813DC43F6534BABABFE684D645B96509770F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:58:af:ad:01:0e:b7:cd:85:36:0d:b3:56:d3:ec:d2:19:
         c6:38:50:f0:d4:e7:04:b5:bd:52:9c:fc:55:3c:bc:bf:9a:ff:
         96:56:4c:d1:b3:21:93:9b:3c:28:ea:79:58:bf:13:34:04:99:
         db:0b:67:db:20:46:34:6a:d2:3e:23:bd:aa:85:07:cf:c0:ae:
         19:cd:cd:76:89:13:f3:3f:09:f7:9a:7d:cb:d2:83:91:16:27:
         d2:f8:70:3b:af:31:73:c9:19:5c:3d:e8:36:fd:9d:c8:6c:89:
         f4:ae:e2:79:40:8b:dd:4d:52:4b:b9:d9:bf:55:8f:9d:c0:46:
         7c:29:24:53:b2:48:2a:85:74:e6:64:0a:1f:6b:b4:95:2d:85:
         e3:a5:49:24:e4:08:92:1d:e7:36:89:ea:0d:60:7e:ef:84:f3:
         4a:93:06:f9:5d:01:c3:14:cd:7c:9a:7a:e4:e8:32:97:2e:ff:
         f7:2e:1e:8b:bb:3f:69:18:c2:4b:8b:d7:72:6d:ee:39:ee:08:
         e4:5d:aa:61:fd:de:dd:b2:2d:e5:83:73:2e:a5:5a:c9:c0:6c:
         6b:db:0d:94:9b:6e:f0:12:81:4c:df:7b:a4:38:ea:9c:e4:36:
         14:d4:de:75:77:94:26:53:ba:ed:5c:96:a9:67:78:7d:23:e4:
         c2:f3:5f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:31 2026 by rpki-client