Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132322e302f32332d3233203d3e203536323436.roa
File:                     3130332e31302e3132322e302f32332d3233203d3e203536323436.roa (raw, json)
Hash identifier:          ZHcolGakYZ6TQezMAe/PV/t+gp9TqyvOFYQZPH4ismk=
Subject key identifier:   55:17:93:89:8D:C2:A5:8B:D9:63:93:0F:50:C5:2D:E0:45:B7:B5:09
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       455C0D5315B127494A909C31D82763015330DDB8
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132322e302f32332d3233203d3e203536323436.roa
Signing time:             Sun 03 May 2026 02:36:28 +0000
ROA not before:           Sun 03 May 2026 02:31:28 +0000
ROA not after:            Sun 02 May 2027 02:36:28 +0000
asID:                     56246
IP address blocks:        103.10.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5c:0d:53:15:b1:27:49:4a:90:9c:31:d8:27:63:01:53:30:dd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:28 2026 GMT
            Not After : May  2 02:36:28 2027 GMT
        Subject: CN=551793898DC2A58BD963930F50C52DE045B7B509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:40:f7:7c:de:df:d0:16:67:24:e0:d1:b2:
                    1b:a2:a7:93:e6:52:7f:84:f7:70:ff:b1:90:3d:56:
                    4a:ff:d5:1e:88:c4:d3:97:4e:92:7d:5d:8e:11:aa:
                    e7:ba:ba:b2:06:f2:ed:69:6b:e5:0f:1e:08:41:36:
                    5b:10:79:f0:e2:ac:f9:be:b3:9a:cc:ca:36:e2:bf:
                    92:be:52:a0:71:37:5a:15:58:e8:b4:5f:a8:2c:0b:
                    f2:17:d5:aa:64:0f:78:8e:c0:db:89:4d:2e:af:d8:
                    f2:71:85:b6:c7:d1:47:5a:3c:d3:85:57:54:3b:21:
                    57:2f:68:e3:79:75:a4:1d:c2:32:c6:72:a5:60:3a:
                    1c:30:5b:4f:f7:88:9b:cd:fa:11:c6:91:42:1f:5a:
                    59:6d:09:8a:22:6a:0f:a1:cc:65:36:a3:0b:f5:51:
                    80:3e:e7:7d:f6:d5:ba:e5:94:22:2c:e4:69:a5:0b:
                    65:0c:b3:72:cd:49:91:23:7a:34:6c:b0:3c:67:20:
                    b3:af:ac:8a:78:d4:d1:2a:c7:cb:97:3a:95:3a:b0:
                    de:c7:11:c0:c8:6d:7b:9e:e3:ba:cb:54:18:84:20:
                    50:30:15:59:23:e1:0d:d5:49:21:6c:8c:7c:6f:dc:
                    9b:2b:9d:b6:a0:3d:99:91:24:e5:6a:d8:d4:c3:0b:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:93:89:8D:C2:A5:8B:D9:63:93:0F:50:C5:2D:E0:45:B7:B5:09
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132322e302f32332d3233203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:c8:01:54:99:28:07:96:dc:bb:65:7a:35:fd:0a:6c:67:74:
         b8:9a:9d:c0:36:74:00:c0:df:b0:b6:36:ea:ac:3e:8e:b2:a1:
         ff:dd:65:a0:48:bb:2c:ff:b3:ab:a4:c3:ad:16:4a:31:1d:88:
         71:51:f3:f2:24:cd:c6:6d:95:c5:9c:f1:91:97:c4:c4:38:3f:
         3b:f8:4a:e6:51:4b:53:e0:7c:7f:04:c0:0b:59:75:b8:28:5c:
         b4:10:63:6a:7d:21:c0:0e:05:9c:9d:b2:3e:2c:63:e5:b2:05:
         6b:90:26:56:86:a2:bc:cc:4b:4c:9e:cd:bc:2b:44:10:e4:b7:
         1f:4a:31:20:c7:ea:76:e1:ce:4d:09:17:eb:a6:93:cf:27:73:
         83:eb:e4:6b:5b:78:46:05:68:55:f9:63:29:23:ea:95:42:67:
         5e:08:e3:02:32:75:7c:9f:62:32:47:79:3d:0c:81:8a:c0:84:
         44:ae:bd:3f:86:58:40:7b:09:9c:78:fd:c6:4b:f8:19:77:5d:
         44:4d:cf:a4:a1:96:cf:5d:05:c7:1d:41:54:98:f3:00:2d:18:
         5d:29:a3:44:7f:4e:35:9c:e9:4e:b4:08:d8:4b:c9:2e:10:b5:
         97:5e:11:96:6e:20:fe:c6:1d:b1:12:59:c7:60:84:5e:c3:49:
         05:a1:23:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:31 2026 by rpki-client