Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/3130332e38332e302e302f32342d3234203d3e20313530323532.roa
File:                     3130332e38332e302e302f32342d3234203d3e20313530323532.roa (raw, json)
Hash identifier:          ESYFLhLUVsrTAfVtaCjm2iupLDG9Q3qv3T4W73aB/40=
Subject key identifier:   E1:48:0F:01:C8:90:71:EC:86:4B:83:EA:86:B5:24:BE:B3:F9:E8:AD
Certificate issuer:       /CN=0E8E7FF529A30407FEDE18CF892F4E205578CFF4
Certificate serial:       452B8422DDE667C79B49D5D39A2D1B035B926AAF
Authority key identifier: 0E:8E:7F:F5:29:A3:04:07:FE:DE:18:CF:89:2F:4E:20:55:78:CF:F4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/3130332e38332e302e302f32342d3234203d3e20313530323532.roa
Signing time:             Sun 03 May 2026 02:40:00 +0000
ROA not before:           Sun 03 May 2026 02:35:00 +0000
ROA not after:            Sun 02 May 2027 02:40:00 +0000
asID:                     150252
IP address blocks:        103.83.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl
                          rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2b:84:22:dd:e6:67:c7:9b:49:d5:d3:9a:2d:1b:03:5b:92:6a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E8E7FF529A30407FEDE18CF892F4E205578CFF4
        Validity
            Not Before: May  3 02:35:00 2026 GMT
            Not After : May  2 02:40:00 2027 GMT
        Subject: CN=E1480F01C89071EC864B83EA86B524BEB3F9E8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:66:36:67:87:0e:d3:37:fd:f2:cf:1a:45:
                    ba:b7:e8:26:f2:f7:35:53:51:74:65:89:e7:66:79:
                    1d:07:2a:ec:1f:4d:3f:14:4c:cb:ca:94:93:99:6a:
                    30:b3:46:44:42:12:46:ef:51:5e:ef:75:d3:83:ea:
                    91:29:e4:38:b0:57:c4:c1:55:ae:85:44:0f:4e:f5:
                    14:12:02:8f:35:77:4b:ac:a6:0b:c8:a5:87:7b:8d:
                    7c:91:37:d4:8a:c9:8a:8c:ec:4f:c4:f8:0c:fe:a8:
                    84:82:a6:da:72:b7:c8:85:c2:bd:6f:c1:7c:a8:74:
                    97:8a:09:e4:93:4a:5f:56:22:87:06:66:48:bb:9a:
                    72:bd:a0:a8:68:69:2b:8c:ad:64:62:89:aa:fc:9f:
                    86:a5:8d:64:be:52:7f:c8:b3:30:b2:b9:3c:27:f8:
                    2d:fe:0b:4b:35:ef:6a:0b:54:f3:87:ef:e3:6c:a1:
                    85:28:20:7f:ab:6f:b7:57:ce:17:94:be:6a:be:48:
                    6c:8c:81:ed:6c:0c:30:1c:6d:b3:b4:cc:50:cc:4d:
                    1c:1b:0d:ce:1d:ce:64:87:fe:9e:cd:07:1a:ce:11:
                    33:77:82:ad:22:b5:ee:b5:3a:9e:d8:15:30:90:03:
                    72:4e:a4:c1:b9:0d:fb:81:4f:f3:cb:5b:b1:a5:be:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:48:0F:01:C8:90:71:EC:86:4B:83:EA:86:B5:24:BE:B3:F9:E8:AD
            X509v3 Authority Key Identifier:
                keyid:0E:8E:7F:F5:29:A3:04:07:FE:DE:18:CF:89:2F:4E:20:55:78:CF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/3130332e38332e302e302f32342d3234203d3e20313530323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:27:99:aa:e1:67:09:5c:f7:91:20:47:56:ee:d8:43:1e:5d:
         1a:21:72:cb:69:d1:83:30:39:7c:3c:69:f2:f0:e5:15:5f:4e:
         20:8d:fd:6d:a8:09:7b:8e:33:48:2d:4c:6c:c5:38:4f:3b:1e:
         e4:24:6d:52:bf:25:fc:34:48:5d:e1:1f:32:1e:a7:90:3d:8d:
         6e:5d:70:d6:c1:32:06:0f:24:dc:9b:71:37:99:d0:da:86:53:
         cb:1c:a8:6b:6f:a8:9a:c6:21:16:05:a2:85:07:27:7a:01:c7:
         5e:bb:ae:99:29:0c:77:1a:6b:ec:43:74:7b:bf:2b:a9:d3:96:
         0c:ed:d0:54:cf:c3:8b:e2:5d:21:e1:c1:be:8a:a8:45:df:c8:
         97:66:6a:87:f6:a9:ef:b5:68:d7:7f:d9:e2:95:c8:d8:67:25:
         61:af:48:12:d4:b5:d1:9d:1f:60:b0:06:32:7d:f2:b9:e9:0f:
         f4:1f:5e:72:b6:e7:84:da:00:7d:b5:4d:95:1c:3b:ab:c6:6f:
         11:82:b5:8a:48:b9:77:10:f7:41:f1:2a:5b:c2:33:eb:15:3f:
         3a:24:f4:72:56:d1:35:98:1e:41:42:43:af:d4:b8:62:b9:7e:
         ed:fc:c5:5e:f3:8c:a8:7b:1d:4c:36:2a:55:39:99:2b:c9:45:
         8b:06:61:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:17:46 2026 by rpki-client