Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232362e302f32342d3234203d3e203538343832.roa
File:                     3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (raw, json)
Hash identifier:          2DvWh74e0gTHrXIRaChkLzNlvEmjtj+ENIh/NqjqLKI=
Subject key identifier:   58:20:4F:63:B0:3B:0A:FE:E9:2F:84:44:8E:30:78:09:30:E9:78:8F
Certificate issuer:       /CN=797581F67816C4132050EC6348DBB15EBC5C0189
Certificate serial:       72822CE7B442FB928F5038E0797402ECF008A2F8
Authority key identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232362e302f32342d3234203d3e203538343832.roa
Signing time:             Sun 03 May 2026 02:40:42 +0000
ROA not before:           Sun 03 May 2026 02:35:42 +0000
ROA not after:            Sun 02 May 2027 02:40:42 +0000
asID:                     58482
IP address blocks:        103.28.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
                          rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:82:2c:e7:b4:42:fb:92:8f:50:38:e0:79:74:02:ec:f0:08:a2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797581F67816C4132050EC6348DBB15EBC5C0189
        Validity
            Not Before: May  3 02:35:42 2026 GMT
            Not After : May  2 02:40:42 2027 GMT
        Subject: CN=58204F63B03B0AFEE92F84448E30780930E9788F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:24:ec:48:f9:0d:b7:ee:ee:87:9e:d2:8f:
                    85:a1:77:bc:d5:f5:ae:e7:d8:a4:1d:69:1f:fb:d5:
                    cc:89:f4:c3:1e:cd:e3:51:cb:f5:e6:7f:75:67:01:
                    02:90:f3:27:e3:f2:5c:77:72:5f:51:a3:8d:73:06:
                    bb:87:72:cf:b1:18:54:b4:10:8c:52:18:35:1f:8f:
                    65:e8:51:53:5b:50:b8:7a:db:c9:70:fc:cd:cb:65:
                    aa:a5:63:b9:2c:4b:2b:05:8e:7f:1f:ae:ed:0b:07:
                    30:81:5d:70:08:24:d5:01:7c:b1:6a:f8:d9:68:93:
                    d8:4e:c3:c5:21:71:b1:3e:a1:fa:23:f0:24:67:d0:
                    64:27:b4:ee:43:8e:2f:7c:5a:a6:5d:01:a9:4c:05:
                    da:7b:81:c2:a3:dd:42:37:86:30:1a:31:c0:56:2c:
                    ea:76:e5:02:d3:c5:08:80:da:21:b2:34:57:20:b6:
                    84:7b:26:e7:ff:1d:f8:94:44:d6:0a:24:12:ae:af:
                    d2:ea:04:0f:24:4d:a8:0e:ae:54:5b:e9:47:fe:6d:
                    55:9a:9a:ba:99:d9:30:ac:67:46:be:ed:17:af:77:
                    8d:61:58:85:c7:31:21:9f:f8:80:e4:83:70:e0:6b:
                    0e:53:79:db:30:a1:3a:b0:60:0b:6c:82:ed:f0:35:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:20:4F:63:B0:3B:0A:FE:E9:2F:84:44:8E:30:78:09:30:E9:78:8F
            X509v3 Authority Key Identifier:
                keyid:79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232362e302f32342d3234203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:9c:67:09:52:e5:a5:ea:29:07:0e:ac:a2:8e:98:9e:a7:b2:
         80:17:a7:39:f3:ce:cc:4e:6e:d8:60:12:d9:26:3d:a6:5d:25:
         1c:90:b4:17:28:c4:0c:82:ef:8c:e5:36:03:64:b7:98:41:a8:
         b9:4b:19:9b:c4:3c:d8:01:a8:e6:38:4d:28:6c:cf:54:e9:4e:
         f1:de:d1:c3:9f:8d:ef:72:b7:6e:22:71:28:d4:e7:99:43:25:
         3f:00:08:4d:14:cd:68:ef:1f:e5:ae:41:6d:76:bf:13:b8:17:
         d1:a9:d8:da:22:b5:26:72:a0:4f:73:4e:61:35:30:6b:2f:8d:
         c4:7b:7f:4b:48:3a:3e:c3:9f:85:fd:3c:59:99:20:f8:e2:0e:
         ea:b2:1c:fd:0f:d8:1e:d6:b2:6b:df:61:1f:1c:6b:e7:a1:41:
         49:f4:10:15:f8:45:c2:38:9c:84:44:e2:25:54:5d:95:cc:c2:
         dd:ff:11:d9:0e:c9:82:ad:1f:9d:8a:61:bb:f4:80:78:ba:eb:
         5a:53:46:89:fd:de:d3:96:e4:dd:a8:46:14:da:91:df:12:d1:
         5a:ff:ea:d7:ef:6f:c3:f9:4d:e8:35:db:6a:e5:62:64:80:21:
         bc:a5:ec:06:91:d7:38:51:95:55:9c:2d:ec:32:d5:aa:43:14:
         d2:1b:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:51 2026 by rpki-client