Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132332e302f32342d3234203d3e203536323436.roa
File:                     3130332e31302e3132332e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          pD27yEPlTkrOjAoPlnaG5zBVQsTc1M8AcDgsBh9vbPk=
Subject key identifier:   E3:E8:F7:7D:C8:B7:90:48:11:87:C4:AE:4B:9A:4C:3E:40:8B:A9:7D
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       04405EAF78A710C5515142089BBB7E95AC120F58
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132332e302f32342d3234203d3e203536323436.roa
Signing time:             Sun 03 May 2026 02:36:28 +0000
ROA not before:           Sun 03 May 2026 02:31:28 +0000
ROA not after:            Sun 02 May 2027 02:36:28 +0000
asID:                     56246
IP address blocks:        103.10.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:40:5e:af:78:a7:10:c5:51:51:42:08:9b:bb:7e:95:ac:12:0f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:28 2026 GMT
            Not After : May  2 02:36:28 2027 GMT
        Subject: CN=E3E8F77DC8B790481187C4AE4B9A4C3E408BA97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:a9:db:d0:eb:c0:2b:3b:1f:d0:67:e1:70:
                    ac:22:67:1e:97:8d:6f:f6:5e:8e:42:2a:fb:d0:c8:
                    ab:7c:ff:ed:ec:b8:a7:ff:41:00:62:d7:69:e9:8b:
                    a6:bb:2b:27:f0:6f:d3:80:8c:c2:99:92:cd:e9:4a:
                    a1:ee:8a:82:16:f8:36:f6:c7:6c:8f:4d:ff:8a:be:
                    9e:de:fd:90:7f:23:dc:2d:01:db:51:51:81:fc:80:
                    00:a2:ca:cd:43:99:c3:d7:ab:3a:fa:d3:2e:74:4d:
                    e3:0c:d5:f9:ae:a0:8f:2b:42:06:6e:f2:43:6a:13:
                    82:89:83:94:49:c4:49:44:c8:cb:56:20:e0:b1:39:
                    df:0e:df:74:5e:f7:09:86:da:43:c6:df:f4:0d:8a:
                    67:a8:d3:6d:52:90:b4:46:e3:f9:88:4e:ef:d1:f9:
                    36:04:11:74:e4:c8:bc:b5:ff:68:e4:f6:9f:a1:d7:
                    34:2d:ed:1e:8b:b4:b4:b7:a4:c5:68:95:b9:f0:36:
                    52:57:26:d2:30:b0:84:b5:e2:e1:97:60:e3:db:ae:
                    0b:ac:95:85:13:76:34:04:4f:ce:8d:b6:b0:dd:59:
                    9e:d8:6b:8c:db:67:2b:28:df:60:3e:e7:19:0f:6c:
                    34:dc:8c:b2:41:31:22:dd:63:39:1d:22:03:a2:e0:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E8:F7:7D:C8:B7:90:48:11:87:C4:AE:4B:9A:4C:3E:40:8B:A9:7D
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132332e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:8b:a5:bc:53:2e:f9:66:e8:1c:5e:33:56:d5:48:1e:39:13:
         4d:6c:82:0c:b8:b4:32:8c:f0:5a:ef:c4:9b:e6:cd:02:27:ea:
         a3:07:6f:fd:4d:25:e2:1b:6e:93:f9:e8:8a:07:6f:ba:81:80:
         9a:fd:ea:4c:a6:c1:d3:78:78:0d:b9:65:8a:53:0b:af:a6:4c:
         5f:80:69:84:b5:3f:16:b8:bb:d9:39:a7:d2:9a:e5:3b:71:89:
         80:34:45:ef:a2:5d:83:38:8f:de:67:22:3b:7b:b1:cf:1d:db:
         a2:89:b7:ef:5f:0c:28:39:e1:5e:fe:bd:8a:81:6c:80:0e:4b:
         83:16:a9:34:05:d4:6c:2c:c3:ca:ea:2b:fe:21:eb:3d:3a:17:
         66:27:a9:f6:1b:ab:26:8c:fb:be:27:c0:f0:31:5f:64:56:b9:
         fb:dc:ff:0c:63:94:13:3f:9f:b8:cf:be:7b:8f:0f:2e:70:76:
         63:ce:fd:c5:57:70:5d:08:c8:4e:01:21:1f:32:fe:fc:78:f1:
         c2:cf:a0:e6:18:54:18:2c:85:d0:f7:dd:09:82:3d:08:34:22:
         c8:8d:bb:6a:4c:52:a5:26:c0:f0:eb:08:20:ec:6e:7f:e2:5e:
         a5:6c:1f:f8:86:11:77:6a:cd:6b:9c:75:88:b5:a1:92:a8:30:
         90:d6:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:14 2026 by rpki-client