Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32382e302f32342d3234203d3e203538333839.roa
File:                     3130332e31312e32382e302f32342d3234203d3e203538333839.roa (raw, json)
Hash identifier:          MrR2/iTfv1dntIlCuh8OTd67AJ2/WtEg9I6TW8SUmew=
Subject key identifier:   E5:42:73:5E:67:D8:8B:92:A8:9E:8E:31:9F:A1:08:2F:F7:C6:68:47
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       1E8B463A8E004848EE1C6BF1E9F58707931AD08D
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32382e302f32342d3234203d3e203538333839.roa
Signing time:             Sun 03 May 2026 02:36:41 +0000
ROA not before:           Sun 03 May 2026 02:31:41 +0000
ROA not after:            Sun 02 May 2027 02:36:41 +0000
asID:                     58389
IP address blocks:        103.11.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8b:46:3a:8e:00:48:48:ee:1c:6b:f1:e9:f5:87:07:93:1a:d0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:41 2026 GMT
            Not After : May  2 02:36:41 2027 GMT
        Subject: CN=E542735E67D88B92A89E8E319FA1082FF7C66847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:6d:1d:b5:89:5c:b4:13:b5:73:f8:a3:30:
                    23:60:f6:b2:52:06:82:03:17:65:f7:03:5a:bf:29:
                    b6:ea:b0:10:79:ab:cb:8e:3c:96:8a:e7:6b:b4:f3:
                    7d:32:81:78:a4:89:a4:c1:31:ca:0c:a2:e6:f5:82:
                    83:2b:1b:d4:0b:fb:c4:5a:d3:6f:90:ae:4d:dd:8c:
                    cf:6d:af:ca:5b:93:0c:12:07:0f:b2:39:91:d1:5c:
                    65:26:64:b2:1b:51:24:88:39:68:cb:5e:6a:f9:0c:
                    d6:1b:ca:ef:c6:22:29:93:08:ed:5b:ba:e5:4e:ba:
                    31:58:3c:7d:5c:03:dc:31:a3:5a:b3:d2:82:53:be:
                    aa:a5:70:fd:18:7b:9b:ff:c1:7e:4e:90:d6:13:9f:
                    3b:83:60:61:1f:70:88:d6:be:76:d2:d2:9c:02:3d:
                    6e:72:5c:49:b7:cc:d4:37:72:61:c9:d6:b2:1a:cd:
                    5d:6c:a7:60:10:a0:23:8c:46:3a:4c:02:8e:20:d3:
                    e4:36:eb:84:2e:60:ab:44:ed:da:9d:d9:03:b4:65:
                    72:16:68:a0:5d:fe:11:72:b0:b3:1a:40:d9:20:28:
                    05:7a:9f:7d:a3:37:86:0a:96:83:40:87:86:95:76:
                    58:fa:7c:03:e6:89:19:26:db:8c:72:3f:e4:81:c3:
                    c4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:42:73:5E:67:D8:8B:92:A8:9E:8E:31:9F:A1:08:2F:F7:C6:68:47
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32382e302f32342d3234203d3e203538333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:99:9b:88:2d:f1:a9:c7:db:84:c1:1c:52:26:a1:3d:d0:be:
         c7:e1:ef:1b:a3:3d:5f:f2:b8:19:3e:cf:0f:d3:0a:f3:ca:24:
         11:6e:d3:f9:6e:d3:2a:09:33:82:84:18:bf:e0:e5:97:b0:54:
         2d:7d:72:63:3e:ff:ca:a2:6e:90:31:96:18:85:b8:2d:8e:ae:
         65:f9:7b:a7:a6:68:96:a2:ba:8b:8d:01:13:9f:59:39:94:f3:
         f4:c7:6f:9f:63:21:fd:cb:19:1c:ae:fb:d2:d5:ad:d9:f4:6a:
         02:c2:43:f9:bb:e2:21:7c:15:82:78:47:81:7a:d7:d0:9b:61:
         a6:a4:88:30:19:40:f9:93:af:fb:6a:a1:61:3d:9a:53:bb:25:
         1f:d9:58:65:d5:46:ba:71:90:77:df:1d:a2:bf:a5:ae:39:a1:
         c7:1a:0d:fe:20:04:b1:a1:8a:04:46:18:65:e4:6b:41:cf:57:
         db:89:cd:a9:47:c4:7e:bf:b0:86:71:cf:d6:83:da:10:2e:6d:
         25:34:4e:8f:28:11:13:48:9e:77:23:45:67:d0:a9:e3:0e:06:
         15:14:a7:f5:99:1c:75:4f:54:b6:bd:68:b0:b5:a1:d4:1f:d3:
         fb:bb:cc:ba:04:54:7e:1d:5d:52:b7:f4:9d:07:82:5a:5c:70:
         ff:af:51:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:39 2026 by rpki-client