Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/3130332e34312e3138382e302f32322d3234203d3e203538333937.roa
File:                     3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (raw, json)
Hash identifier:          KuY5wEri7u4war8JSwekkctUjVu/WQ12XivwVmrP91A=
Subject key identifier:   47:24:25:0C:98:7F:B9:98:0F:FD:0A:AA:A1:1C:63:2A:A6:1B:63:0C
Certificate issuer:       /CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2
Certificate serial:       5CC5464AC4C164E1CCEF0E118762AC7369490777
Authority key identifier: 7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/3130332e34312e3138382e302f32322d3234203d3e203538333937.roa
Signing time:             Sun 03 May 2026 02:46:17 +0000
ROA not before:           Sun 03 May 2026 02:41:17 +0000
ROA not after:            Sun 02 May 2027 02:46:17 +0000
asID:                     58397
IP address blocks:        103.41.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl
                          rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c5:46:4a:c4:c1:64:e1:cc:ef:0e:11:87:62:ac:73:69:49:07:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2
        Validity
            Not Before: May  3 02:41:17 2026 GMT
            Not After : May  2 02:46:17 2027 GMT
        Subject: CN=4724250C987FB9980FFD0AAAA11C632AA61B630C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:60:51:24:fb:8a:b9:0b:64:c8:9b:d6:d6:
                    e0:3b:f3:70:53:37:e8:63:7a:24:4b:e2:48:bb:8a:
                    c9:4a:59:4c:3c:6d:fa:b8:10:6b:8d:45:65:2d:8c:
                    5b:f7:b7:25:f7:86:21:41:68:2f:25:8f:b5:43:f1:
                    0c:31:fe:55:87:98:27:2f:59:01:f5:de:18:0f:f7:
                    b8:84:ae:e7:41:f6:d2:d8:ba:a6:31:5c:2c:0a:e7:
                    c3:1c:0f:25:c9:bb:5d:f1:b7:d4:40:e0:da:3f:81:
                    d9:28:23:47:40:c7:6a:43:7d:e4:ad:25:78:9e:b0:
                    5d:91:76:e7:ad:02:e0:cd:b8:3b:b0:64:a9:90:fc:
                    41:99:8e:6a:9c:93:19:99:1f:ea:70:77:0c:77:a4:
                    b8:72:98:50:74:99:be:66:f8:b5:6c:e3:c0:cc:d5:
                    43:f6:a0:3c:ca:f7:85:af:17:e7:cd:e7:ab:eb:19:
                    0c:a4:b2:79:a9:45:19:e9:02:b8:30:43:31:92:7b:
                    fa:bc:d5:26:82:1d:5d:ed:16:5d:c2:fd:7b:e4:40:
                    fb:32:11:16:52:60:49:3b:04:9d:ea:85:de:22:8a:
                    6e:8a:fd:e0:fb:76:83:ef:3e:c8:7f:c1:ff:fe:db:
                    d9:12:99:17:16:dc:e1:d4:f1:e4:2f:9e:d7:65:e8:
                    c6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:24:25:0C:98:7F:B9:98:0F:FD:0A:AA:A1:1C:63:2A:A6:1B:63:0C
            X509v3 Authority Key Identifier:
                keyid:7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/3130332e34312e3138382e302f32322d3234203d3e203538333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:89:c7:6c:c5:60:d6:bf:3d:42:96:7b:5f:a5:7b:04:17:77:
         48:3a:1b:33:ca:09:20:fa:24:0e:95:6d:a0:b3:35:b6:f1:6b:
         90:25:ff:38:88:a8:ca:2a:68:79:cb:df:1d:57:ab:a6:8d:c1:
         2d:97:5e:1c:97:4e:ed:92:f1:25:96:c2:4d:9e:77:b0:d0:9a:
         bd:8d:6a:0c:ac:70:fe:c2:91:84:b7:1a:e7:d5:24:02:fd:98:
         43:07:60:65:5b:43:0e:a8:bf:2c:33:e4:0b:32:61:d5:c8:81:
         7f:35:db:25:e0:29:61:e5:ca:95:27:10:e4:d9:fc:d5:02:86:
         09:4e:8e:b0:a6:6d:bb:40:83:bb:e4:6a:08:ef:1f:94:73:aa:
         d3:30:4c:71:66:71:b4:67:e2:c5:27:79:e1:14:7e:e9:32:04:
         9b:73:45:33:b7:6f:02:29:b2:30:0e:d0:5f:86:e0:fa:44:10:
         12:19:e5:f8:ca:f0:1e:20:99:c5:b0:16:30:3d:85:25:e7:d7:
         64:52:95:08:f7:c8:63:ee:a4:8e:19:3a:40:78:d6:f6:5a:3a:
         13:ae:97:03:18:bb:52:9b:97:d5:dc:f2:2b:f2:0a:26:a2:68:
         f2:07:68:1d:67:6f:00:fb:a9:19:d8:2f:46:54:db:47:da:62:
         34:ab:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:55:43 2026 by rpki-client