Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35382e302f32332d3233203d3e203538383136.roa
File:                     3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (raw, json)
Hash identifier:          Uu5Kd6iXyGaprYmPa+VOlFaxRx4y+R+qslKP+7tCJFI=
Subject key identifier:   EA:A9:D3:06:71:62:98:71:0E:DF:73:8A:05:37:01:C2:CF:F7:DC:D8
Certificate issuer:       /CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
Certificate serial:       1B8A4FF5F9E4E0A2F0491D5462941265A55B1860
Authority key identifier: 92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35382e302f32332d3233203d3e203538383136.roa
Signing time:             Sun 03 May 2026 02:42:13 +0000
ROA not before:           Sun 03 May 2026 02:37:13 +0000
ROA not after:            Sun 02 May 2027 02:42:13 +0000
asID:                     58816
IP address blocks:        103.248.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl
                          rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8a:4f:f5:f9:e4:e0:a2:f0:49:1d:54:62:94:12:65:a5:5b:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
        Validity
            Not Before: May  3 02:37:13 2026 GMT
            Not After : May  2 02:42:13 2027 GMT
        Subject: CN=EAA9D306716298710EDF738A053701C2CFF7DCD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:32:1f:15:83:22:f5:ed:0b:e7:1e:cc:8f:
                    ea:ce:64:ca:53:16:8e:8c:38:96:53:1f:44:f4:53:
                    30:23:ce:46:f1:50:1d:4f:8f:ef:b7:d8:76:35:91:
                    7d:10:a5:45:d3:1f:63:93:f1:59:ce:f4:ab:a3:ae:
                    4d:eb:41:aa:29:c2:35:ef:bc:06:1d:57:10:55:16:
                    ea:78:97:89:c4:b9:63:c7:d2:0e:fe:66:3d:c8:46:
                    96:37:5a:a1:8c:71:c1:36:a2:c5:e5:b5:6d:c7:52:
                    c0:a0:a8:75:db:7b:19:24:a9:16:e2:16:5d:3f:90:
                    f3:ef:c3:21:65:e5:a0:3d:d7:77:ce:b7:be:d6:26:
                    f8:4f:b0:8f:f0:75:d8:ea:f7:29:0a:af:31:6d:76:
                    0b:58:2f:15:e7:67:74:e6:5e:d8:fd:6d:1d:5a:9e:
                    f0:e2:00:df:25:33:87:7f:0a:fe:d9:db:66:91:97:
                    c5:b7:e0:6f:ca:c3:1a:13:3f:9c:fb:0b:7c:be:33:
                    0d:0e:81:fa:18:27:83:1c:1e:0a:f5:fc:34:73:d5:
                    37:00:7b:2a:f1:3a:9e:e7:ab:24:ca:7b:ce:02:c7:
                    c5:40:9d:44:75:d7:29:70:62:25:c7:ab:e9:af:2c:
                    c0:59:c0:d6:21:08:93:46:57:03:a6:51:b1:37:28:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A9:D3:06:71:62:98:71:0E:DF:73:8A:05:37:01:C2:CF:F7:DC:D8
            X509v3 Authority Key Identifier:
                keyid:92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35382e302f32332d3233203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:a8:49:14:07:57:c1:3c:21:42:0f:6b:2b:cb:ac:d2:2c:49:
         3d:f9:f2:f1:2d:31:3d:db:19:90:ea:82:ac:c3:40:5b:76:79:
         f6:61:c4:48:95:db:8e:6d:63:ae:f6:71:ee:93:ff:62:73:6c:
         91:8e:67:8a:4f:74:17:a3:be:4b:bb:c1:13:41:4f:bc:ea:19:
         35:d3:a5:36:52:bb:34:98:23:1c:cb:5f:4b:a9:c2:0d:70:c4:
         ef:67:8c:21:0b:88:03:35:04:46:90:b0:97:da:77:ae:bd:87:
         73:04:dc:c7:62:46:b5:a1:56:07:a3:45:43:0a:62:73:67:34:
         a4:d4:71:b2:76:12:28:da:3a:2e:bf:f5:8a:9b:ca:e8:bb:7d:
         c7:65:a1:fc:6f:02:b1:41:28:99:2f:49:b5:a6:71:0d:dc:1d:
         2c:bd:b9:7c:2e:c5:e3:73:27:ff:94:c8:53:7a:62:92:ce:d0:
         bc:a4:53:3f:51:bf:2b:82:a2:8d:6a:d4:1b:3b:ea:97:27:d0:
         98:ff:02:50:6b:46:75:c4:ad:96:a5:0b:32:ae:c8:af:78:45:
         78:a6:c4:67:96:1f:b5:09:68:22:08:46:57:12:ea:f5:a0:2a:
         1c:ad:be:ba:e4:f7:0b:57:59:b8:f9:a4:c9:3a:de:35:2e:1e:
         fc:13:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:14 2026 by rpki-client