Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32392e302f32342d3234203d3e203538353532.roa
File:                     3130332e31312e32392e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          2CbxeoXFfgDGBGEkfSRm0x5MC4RpOk4or1xBvzgM9mM=
Subject key identifier:   F2:B2:1D:26:98:87:47:F1:68:F0:F4:81:FB:30:3D:6D:9F:FB:09:48
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       649FEEA99DE722777BFEBC9EB2129479D4C23F14
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32392e302f32342d3234203d3e203538353532.roa
Signing time:             Sun 03 May 2026 02:36:30 +0000
ROA not before:           Sun 03 May 2026 02:31:30 +0000
ROA not after:            Sun 02 May 2027 02:36:30 +0000
asID:                     58552
IP address blocks:        103.11.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9f:ee:a9:9d:e7:22:77:7b:fe:bc:9e:b2:12:94:79:d4:c2:3f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:30 2026 GMT
            Not After : May  2 02:36:30 2027 GMT
        Subject: CN=F2B21D26988747F168F0F481FB303D6D9FFB0948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ee:94:28:c6:11:3d:73:c8:34:e7:65:f0:f9:
                    79:f4:f9:09:9c:ff:d0:8b:55:93:cb:56:c1:6a:4a:
                    73:4b:34:6d:24:ea:1a:9e:34:dd:66:6a:ca:d6:e0:
                    3a:74:2e:e5:e0:61:12:25:b2:a5:94:c0:90:93:df:
                    1a:74:81:6a:8f:0a:3b:b6:a8:af:a4:b7:85:d8:76:
                    16:69:c6:6e:b9:58:16:5e:c4:74:ed:b6:92:fd:de:
                    41:14:61:f7:f9:ba:ec:71:5e:81:26:61:e5:74:1d:
                    bf:0d:65:4b:15:74:39:0e:3a:7b:37:93:be:1b:07:
                    62:e1:ff:06:77:ea:e9:4b:98:db:6c:bb:21:ff:de:
                    f8:fc:bf:9a:9b:fb:89:dc:18:e5:5d:92:2a:4e:bf:
                    67:f0:10:de:5c:5d:11:60:30:59:c2:27:81:5b:93:
                    03:06:f0:41:1e:e0:15:70:e4:1f:c1:b5:9f:32:86:
                    e1:9f:67:d6:09:80:0c:7a:58:8d:41:68:b5:77:c9:
                    59:27:fd:72:78:14:39:a7:5b:b7:e9:7c:69:88:87:
                    95:bb:4f:26:cb:77:e3:ff:88:f0:71:ab:59:c4:17:
                    0e:75:9d:04:75:0a:28:57:1e:a3:c1:d8:52:e0:5e:
                    6c:a4:28:fe:ce:7d:21:4c:c0:77:db:fb:a8:44:44:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B2:1D:26:98:87:47:F1:68:F0:F4:81:FB:30:3D:6D:9F:FB:09:48
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32392e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:22:cc:72:b1:c6:0a:41:46:e7:44:f0:2d:cd:09:e0:07:31:
         1c:23:89:11:53:bc:24:14:6d:ab:57:b7:28:a4:ca:09:af:e9:
         77:10:3a:01:33:c0:4b:6c:02:21:81:e8:8c:97:85:42:ca:bd:
         7c:44:7e:98:23:21:22:00:8e:c1:9e:9b:a2:46:26:76:51:b8:
         a5:a9:8d:c5:17:95:02:3b:8f:e5:b3:1c:79:f1:1b:6b:ef:75:
         09:4f:fa:c4:fe:b4:f9:9f:26:4f:3a:5d:af:d9:25:8e:3a:4d:
         af:6c:c5:85:0b:05:f7:d1:7f:29:f9:60:bd:e8:65:52:9f:13:
         d4:84:57:a6:8c:b8:41:c0:0c:9e:94:4f:c9:de:6f:05:10:12:
         42:30:f2:d6:74:5b:9d:20:6f:e1:4c:73:e2:4b:91:c0:ba:d4:
         78:e8:03:20:35:cb:de:c5:85:2f:42:ab:86:a0:df:a1:61:71:
         d3:58:8f:9a:d3:0e:f1:28:83:44:32:c4:a1:8d:dd:aa:6f:0c:
         8d:03:df:4a:d6:89:96:ad:40:79:7c:b5:fa:fc:1a:e4:39:93:
         68:c8:e0:a9:69:57:3d:60:57:9d:ab:62:c9:81:a2:14:07:ca:
         ef:c8:04:44:14:5b:b6:11:8f:ba:e5:87:13:a4:2d:00:a0:0c:
         ab:bb:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:35 2026 by rpki-client