Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa
File:                     3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (raw, json)
Hash identifier:          SLlp2TgUJDxKzIChZFNu8nUMQolYFP9BFrEaRb9z5dQ=
Subject key identifier:   05:29:17:72:06:50:75:CE:05:BD:69:A4:9A:D0:63:27:7F:88:B2:E1
Certificate issuer:       /CN=6392804C8E02387641837CC130058F05667A805F
Certificate serial:       5BDB6FD9EF33AB00EDD3F759E075F78120F0BE0B
Authority key identifier: 63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa
Signing time:             Sun 03 May 2026 02:43:47 +0000
ROA not before:           Sun 03 May 2026 02:38:47 +0000
ROA not after:            Sun 02 May 2027 02:43:47 +0000
asID:                     138062
IP address blocks:        103.129.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl
                          rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:db:6f:d9:ef:33:ab:00:ed:d3:f7:59:e0:75:f7:81:20:f0:be:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6392804C8E02387641837CC130058F05667A805F
        Validity
            Not Before: May  3 02:38:47 2026 GMT
            Not After : May  2 02:43:47 2027 GMT
        Subject: CN=05291772065075CE05BD69A49AD063277F88B2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:9f:22:8d:ff:7c:44:12:dd:d3:7d:2c:ac:
                    5d:aa:bf:6d:99:c4:d0:6e:b5:c6:de:7c:24:ad:fc:
                    89:2b:91:dc:bd:18:e9:2b:90:c8:f2:5e:a6:52:f7:
                    fa:38:86:46:52:6c:c4:83:3e:0f:28:36:19:7b:dd:
                    09:b5:f1:1b:d1:c9:26:38:ad:cc:b5:81:ad:a4:eb:
                    ef:b6:eb:5e:fa:43:cf:23:14:48:91:b8:d1:84:6d:
                    8e:d0:29:cc:04:97:bf:29:f0:92:c2:cf:76:34:91:
                    42:9a:3a:72:2d:df:d7:51:a6:9f:8e:2d:25:1b:cd:
                    5c:30:a5:dd:16:2c:11:87:c1:c2:a6:39:1c:94:88:
                    96:7a:79:01:92:48:0f:56:4b:f7:1a:a2:80:3c:0c:
                    81:95:29:0d:7c:74:61:18:e0:58:5e:9e:3a:17:f6:
                    01:5f:87:56:74:a5:9e:b8:3b:45:92:54:07:8c:38:
                    cb:bd:1e:a3:1b:29:5e:a1:9e:bf:43:7d:1e:ea:44:
                    df:84:5b:f0:f9:97:6c:cf:e8:32:c7:ff:c9:fb:08:
                    43:60:29:8d:87:7f:ac:76:b1:d4:27:b1:90:85:ec:
                    8b:99:59:06:1c:79:cb:4a:07:48:fe:fd:a6:19:eb:
                    37:57:6e:b8:a4:b0:b9:63:1a:ca:8c:b0:81:00:89:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:29:17:72:06:50:75:CE:05:BD:69:A4:9A:D0:63:27:7F:88:B2:E1
            X509v3 Authority Key Identifier:
                keyid:63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:65:51:97:17:2f:f1:ae:66:a8:1e:ce:e8:b6:94:86:88:e0:
         3b:79:89:ad:40:05:36:3e:8a:af:4c:52:b1:b6:23:2e:fe:7e:
         8c:4c:21:e8:f5:78:4d:6b:9c:82:4d:62:6a:f6:b0:43:c7:94:
         71:2f:db:f0:b4:eb:a3:34:39:c9:0d:be:c7:ba:ab:55:58:36:
         5a:54:b7:ae:f8:6d:bb:32:fe:8f:9e:9c:ea:88:e8:54:54:21:
         58:49:18:01:0b:55:42:12:0d:b5:33:28:13:7d:07:08:9d:3a:
         d6:f9:09:2f:b2:a5:ea:a7:65:69:55:f5:d2:9e:30:84:27:d2:
         7b:69:cd:0a:5d:fc:e1:13:e8:7d:10:7e:df:0b:86:c5:d9:c8:
         94:14:bb:96:12:d3:32:5f:38:82:d1:13:93:8d:a8:47:61:ed:
         cb:ea:51:f6:0a:e3:4d:bf:98:d4:94:f6:8d:74:a7:c4:03:37:
         23:11:4d:45:fc:a8:92:73:b6:98:87:92:a6:24:65:31:74:26:
         fb:21:6d:e5:81:45:c2:08:bb:10:6d:61:39:57:65:43:0d:4c:
         58:53:21:3f:cb:04:ce:6a:95:60:bf:db:f9:f0:d4:51:49:7e:
         7a:f6:3a:d5:88:fd:24:46:6d:3c:cc:1e:0a:f4:65:61:a1:8d:
         ee:76:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:53 2026 by rpki-client