Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa
File:                     3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (raw, json)
Hash identifier:          Da+BSi/QmlOV/X3TjGzgwu4l3eK1o4UhYD/OBNK4cHQ=
Subject key identifier:   1C:1E:D9:5F:A0:62:CC:6A:FB:34:AC:D4:C2:74:5C:EF:59:82:7D:4C
Certificate issuer:       /CN=FF5F881DC07CC4A9A985D594360658D202A551B7
Certificate serial:       5CDE4C8A261CDBF53A34691B3B329391B7C1014A
Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa
Signing time:             Sun 03 May 2026 02:45:21 +0000
ROA not before:           Sun 03 May 2026 02:40:21 +0000
ROA not after:            Sun 02 May 2027 02:45:21 +0000
asID:                     17440
IP address blocks:        103.209.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl
                          rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:de:4c:8a:26:1c:db:f5:3a:34:69:1b:3b:32:93:91:b7:c1:01:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7
        Validity
            Not Before: May  3 02:40:21 2026 GMT
            Not After : May  2 02:45:21 2027 GMT
        Subject: CN=1C1ED95FA062CC6AFB34ACD4C2745CEF59827D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:3c:3c:e7:72:10:75:2d:93:44:49:ad:8b:
                    fb:35:80:02:72:f3:f6:ca:a2:5e:34:1f:ab:17:66:
                    a6:0e:4a:46:30:89:8c:9c:a8:29:1b:73:2b:d2:0a:
                    b7:0e:b0:b9:fa:ff:b8:04:78:88:43:e5:63:cd:9e:
                    b5:9a:11:a0:ba:ff:80:33:32:47:4e:87:27:e4:8b:
                    fe:ec:93:97:2a:91:c6:b8:ed:b8:70:fa:be:24:3c:
                    fc:c3:3a:a8:1c:75:de:8b:50:b6:49:cb:1f:f7:6c:
                    0f:cb:bd:2e:ee:97:22:23:5d:ff:77:17:cf:69:a4:
                    f6:a2:cb:82:48:7d:84:c2:d2:1b:e1:a5:9d:92:62:
                    31:d3:d6:19:83:cf:30:64:ed:b2:9e:31:34:d0:ca:
                    66:41:dc:d4:99:53:28:8c:4f:60:0b:5e:be:6e:2a:
                    87:23:27:0a:45:35:60:0b:37:c3:a3:4a:d5:c3:82:
                    21:2b:17:41:2b:07:99:8b:fd:e9:ee:b2:4f:52:fa:
                    f0:91:ef:a9:75:9a:04:a2:85:b6:46:b0:4b:9e:f9:
                    6e:af:b1:13:03:3d:7e:9c:37:66:35:91:c2:c4:c8:
                    85:90:78:9f:04:6e:e0:c9:12:da:a0:c4:bf:9e:7f:
                    cb:fb:bc:e7:af:bd:e9:7d:d3:50:f4:07:12:26:ee:
                    93:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1E:D9:5F:A0:62:CC:6A:FB:34:AC:D4:C2:74:5C:EF:59:82:7D:4C
            X509v3 Authority Key Identifier:
                keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:03:42:1e:ae:97:cd:d4:ee:0c:f7:b8:ee:19:ef:fd:c8:36:
         44:03:ee:b5:bd:5e:d6:44:94:24:e0:33:04:ab:c6:12:d4:b6:
         29:0c:16:93:dd:74:73:a9:71:a5:06:8d:c7:fc:8b:86:0d:53:
         41:1d:15:ce:3d:da:0c:ec:36:c5:3d:9a:ff:f3:8f:37:eb:0b:
         0f:0a:6c:6e:5e:95:66:c4:93:38:1d:49:08:c7:fc:8f:e8:0e:
         5e:35:f0:b3:2f:75:ce:bf:09:60:d7:06:78:49:05:51:0e:79:
         67:6a:65:99:51:ba:1e:ff:55:43:d8:e9:ea:cb:47:f2:b5:64:
         0c:96:a0:d1:58:b3:4e:6c:c3:76:dc:83:3e:fe:7a:28:32:04:
         4c:7f:7d:c1:87:3b:28:05:f7:81:cf:6c:82:63:4e:47:b5:08:
         ab:d7:b7:63:7c:90:ff:52:65:14:cf:51:b1:0b:d3:08:28:a2:
         7d:e5:63:7c:e3:45:69:28:36:37:28:20:21:b5:55:5c:27:b5:
         e0:4b:a9:68:74:11:0c:f2:fd:74:2c:6f:59:9b:d7:b8:6d:ed:
         03:33:e6:24:2f:89:34:aa:bd:a2:cc:d2:c1:3f:c1:44:97:e4:
         d3:e9:06:0d:70:35:d5:6c:f9:05:84:c9:19:20:18:68:86:21:
         43:3c:b6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:23 2026 by rpki-client