Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32332d3233203d3e203538343832.roa
File:                     3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (raw, json)
Hash identifier:          tgAP81pJRFmyV2IuMwUdr3spO/dqbAUV+MjVwtlAQOI=
Subject key identifier:   96:E2:60:7C:7A:7F:46:C0:63:DC:62:1B:18:08:E8:11:77:C3:1D:DC
Certificate issuer:       /CN=797581F67816C4132050EC6348DBB15EBC5C0189
Certificate serial:       7335152F295B111AAB7AD1064DF575DBED89B5E0
Authority key identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32332d3233203d3e203538343832.roa
Signing time:             Sun 03 May 2026 02:40:40 +0000
ROA not before:           Sun 03 May 2026 02:35:40 +0000
ROA not after:            Sun 02 May 2027 02:40:40 +0000
asID:                     58482
IP address blocks:        103.28.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
                          rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:35:15:2f:29:5b:11:1a:ab:7a:d1:06:4d:f5:75:db:ed:89:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797581F67816C4132050EC6348DBB15EBC5C0189
        Validity
            Not Before: May  3 02:35:40 2026 GMT
            Not After : May  2 02:40:40 2027 GMT
        Subject: CN=96E2607C7A7F46C063DC621B1808E81177C31DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:22:0d:8f:aa:dc:84:9b:9b:75:69:1f:9b:a9:
                    eb:a7:51:34:30:d2:c8:ea:9d:8f:5d:8a:c5:67:4f:
                    9b:d5:3c:66:52:1a:20:e1:37:1a:65:12:0e:d3:ae:
                    bd:3e:df:40:69:cc:ca:60:74:c5:56:6f:48:5d:f3:
                    d9:a3:de:c8:8e:68:d1:59:d1:88:ea:e1:2e:20:e6:
                    9a:80:7f:60:35:5a:12:4e:73:b2:ed:b8:16:f8:09:
                    42:f0:c0:62:8d:e3:40:94:62:d4:da:64:82:dc:0e:
                    01:41:bc:e6:e5:d5:7c:06:82:c0:b3:98:6b:e0:43:
                    b3:8a:18:85:26:63:df:5f:30:12:38:bb:dc:91:f8:
                    21:3d:65:89:6f:0a:e5:2a:f7:0c:b2:9d:3d:19:5e:
                    06:cf:70:7c:3e:06:44:7e:4d:32:4c:e4:16:11:45:
                    51:a1:c8:7b:64:61:4f:84:68:0d:50:b8:76:b1:ff:
                    37:44:5e:6f:c5:35:f9:9a:f3:8c:51:7e:03:98:bc:
                    43:03:3a:3c:fd:1f:87:f3:85:c0:7d:bb:17:c1:a5:
                    13:e3:1e:8b:21:47:9e:29:e8:5c:0d:d6:18:3f:da:
                    8f:10:cc:36:37:d1:3a:43:b9:e9:46:26:fc:98:12:
                    fb:e7:a2:69:a6:3b:db:64:cd:13:6f:4c:5d:61:7e:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E2:60:7C:7A:7F:46:C0:63:DC:62:1B:18:08:E8:11:77:C3:1D:DC
            X509v3 Authority Key Identifier:
                keyid:79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32332d3233203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:ab:60:ab:cd:42:bc:b2:a2:de:7d:e5:46:b7:ae:39:c1:f5:
         f9:57:af:ba:a4:d6:4d:f3:88:d6:7d:0e:4d:9f:58:54:ca:a6:
         8d:b3:f7:ee:d0:be:cc:da:ba:f8:30:1d:85:d1:60:8e:8d:9c:
         e4:9f:aa:85:d2:28:16:97:1b:4f:24:94:ed:6e:45:ba:f7:f7:
         61:9e:f2:53:76:d9:17:dc:74:62:07:78:2f:1c:33:52:f8:dc:
         93:13:ea:01:eb:37:4c:41:36:0b:30:cc:77:07:7a:5e:38:ee:
         42:34:fd:a5:b8:cb:16:7f:39:31:ea:87:51:4c:0b:97:53:1c:
         f6:a0:5c:d6:59:7f:79:0d:28:87:86:1b:94:d3:ba:c6:79:5d:
         e7:68:92:7f:2d:65:26:42:e3:a7:84:16:44:b0:b3:73:bf:c4:
         71:3e:62:4c:c9:15:d1:59:59:51:47:03:5c:30:b1:9f:39:bf:
         5b:66:17:2b:40:56:ae:de:00:b5:6d:f3:6d:0a:6e:d5:e6:c4:
         7d:e7:8c:d1:58:12:ef:77:c9:c4:bf:2f:8e:71:0d:79:9e:f4:
         3d:02:a9:f6:9b:6f:98:76:e7:c8:94:b1:c5:ca:02:0e:ad:19:
         22:de:0d:75:5c:a9:1f:fb:13:19:0d:8c:57:a5:fa:b6:68:a5:
         12:a8:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:19 2026 by rpki-client