Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/3130332e33392e35322e302f32342d3234203d3e203633353033.roa
File:                     3130332e33392e35322e302f32342d3234203d3e203633353033.roa (raw, json)
Hash identifier:          Fo5NB9vASxOhrtlcTFfuoSfV+Q1Mqfl65n0mUhSShiU=
Subject key identifier:   85:70:74:76:4D:EE:8E:80:FD:00:7D:0E:EF:06:13:3D:02:F2:24:9D
Certificate issuer:       /CN=FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB
Certificate serial:       0F19F9C5FAA8A59BC82A44419E0E7C0123606C6D
Authority key identifier: FE:D5:7B:6A:0C:A0:BB:25:22:DC:00:EC:0D:79:B4:7B:10:D2:D6:AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/3130332e33392e35322e302f32342d3234203d3e203633353033.roa
Signing time:             Sun 03 May 2026 02:35:55 +0000
ROA not before:           Sun 03 May 2026 02:30:55 +0000
ROA not after:            Sun 02 May 2027 02:35:55 +0000
asID:                     63503
IP address blocks:        103.39.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl
                          rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:19:f9:c5:fa:a8:a5:9b:c8:2a:44:41:9e:0e:7c:01:23:60:6c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB
        Validity
            Not Before: May  3 02:30:55 2026 GMT
            Not After : May  2 02:35:55 2027 GMT
        Subject: CN=857074764DEE8E80FD007D0EEF06133D02F2249D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:f8:f7:c8:9d:4b:f4:bd:b3:0d:93:ef:cf:
                    2f:e9:48:56:f4:12:b0:f7:c2:48:3e:18:32:2b:9f:
                    46:21:62:07:29:73:0b:21:b1:cf:9e:49:94:21:49:
                    f4:27:5e:64:05:24:95:28:27:65:50:d5:ee:00:20:
                    ef:da:de:af:43:59:be:ec:ec:94:a0:77:92:5e:a5:
                    3d:b5:47:d9:52:85:6f:35:05:10:c1:ad:07:f2:5d:
                    a2:6c:6e:7c:9e:9a:fa:df:34:ba:ba:df:cc:ba:ec:
                    0a:9b:88:94:d3:d0:81:f8:b6:86:af:55:29:c0:1e:
                    a6:e5:a3:28:8b:fd:05:2e:a8:b2:fb:69:1a:d4:b3:
                    b5:bf:9d:a6:d8:5b:4f:16:85:41:03:17:56:24:e1:
                    ad:94:88:4e:6e:23:ea:30:7d:a0:80:cf:fd:db:0c:
                    06:de:d5:38:33:f2:0a:02:d0:29:bd:c8:b2:f8:06:
                    ed:f1:50:ee:40:02:03:27:46:ce:f3:75:05:f0:e4:
                    73:c7:5e:d5:26:e4:9d:3c:11:ee:91:15:90:19:50:
                    7a:4a:61:d5:7c:70:7a:87:15:a8:17:db:36:73:43:
                    45:65:e3:6b:44:0d:9b:cf:e0:32:b2:c2:f9:ae:e0:
                    2d:c7:42:77:28:f3:93:50:aa:87:e7:c9:e5:78:7b:
                    69:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:70:74:76:4D:EE:8E:80:FD:00:7D:0E:EF:06:13:3D:02:F2:24:9D
            X509v3 Authority Key Identifier:
                keyid:FE:D5:7B:6A:0C:A0:BB:25:22:DC:00:EC:0D:79:B4:7B:10:D2:D6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/3130332e33392e35322e302f32342d3234203d3e203633353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:b3:8a:99:fc:90:35:68:a4:69:01:00:16:f6:bc:a3:85:
         51:53:a5:c1:a8:31:39:1c:41:67:06:80:68:de:99:40:b9:d1:
         5e:43:03:e2:c2:4a:46:7d:65:3a:40:6d:87:f4:02:0d:a2:57:
         2e:fb:ca:14:35:ca:09:10:5b:02:28:82:93:f1:52:0b:9d:ba:
         78:bd:38:8a:36:09:71:16:c2:c2:85:b7:6c:12:71:e5:50:fe:
         40:e8:06:a8:5a:25:5d:f5:ad:cc:c9:36:85:16:32:b2:01:9c:
         8e:41:05:dd:b9:a0:bc:47:e1:d3:8f:ab:06:7f:7e:cf:31:df:
         17:07:4c:d3:86:40:71:c0:16:e4:12:47:4c:57:2f:9e:e6:6a:
         02:74:aa:45:d5:55:70:18:f0:4e:1e:1f:0f:42:79:22:af:63:
         0b:24:c6:a4:d1:0a:aa:8e:2e:f9:58:2c:55:ef:66:88:7e:c6:
         3c:95:d8:56:d8:76:ee:36:57:4b:5f:2b:0e:6f:bd:96:d0:2c:
         ef:d8:1c:37:69:a8:42:18:61:97:52:57:f8:53:b2:f2:65:11:
         a1:59:e2:d2:30:17:02:11:90:26:87:b0:61:e2:0d:a6:f7:98:
         ad:c0:7b:b9:ff:f0:1f:d5:32:52:5d:d4:4e:26:35:17:eb:3c:
         4d:fe:b7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:19 2026 by rpki-client