Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa
File:                     3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (raw, json)
Hash identifier:          L6gQCpLzy7aXDtfuVgbwQW0xcldnnRmpgqFEsdoAP3Q=
Subject key identifier:   02:D4:F4:87:31:E6:92:9F:00:B5:8A:07:CA:77:08:BE:60:4F:F6:D7
Certificate issuer:       /CN=5D885821D2406437CDFEC04380E967515A67AECC
Certificate serial:       037155FB009DF600B4CC92F294E530D31FC53FB6
Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa
Signing time:             Sun 03 May 2026 02:47:27 +0000
ROA not before:           Sun 03 May 2026 02:42:27 +0000
ROA not after:            Sun 02 May 2027 02:47:27 +0000
asID:                     141071
IP address blocks:        103.54.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl
                          rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:71:55:fb:00:9d:f6:00:b4:cc:92:f2:94:e5:30:d3:1f:c5:3f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC
        Validity
            Not Before: May  3 02:42:27 2026 GMT
            Not After : May  2 02:47:27 2027 GMT
        Subject: CN=02D4F48731E6929F00B58A07CA7708BE604FF6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:cb:19:ab:d2:19:f6:3e:a5:48:f3:da:1e:
                    cf:ec:d9:75:e3:cf:2e:2b:dc:7a:46:0a:ea:1e:47:
                    30:2b:3e:79:e4:5f:8e:a3:5a:27:4d:1e:20:ef:5d:
                    c0:f4:d0:ba:f2:c7:35:4e:49:2c:a6:c8:46:3a:e4:
                    65:84:48:86:97:75:de:90:8c:93:28:17:c6:ad:89:
                    02:ba:64:c4:a6:b0:d6:99:5a:a6:67:4d:ae:ae:cc:
                    ad:a3:d9:11:48:52:0a:cb:39:3b:12:b3:02:19:fa:
                    93:7b:57:2c:38:ae:a8:a9:e7:7f:9b:56:ab:a4:47:
                    f1:71:5e:a5:2f:1d:94:06:e0:60:ed:3c:3a:2c:47:
                    37:64:48:2e:e5:89:3c:ab:a5:5d:fd:6c:91:61:95:
                    5b:d9:56:bf:92:df:44:72:ed:2e:ec:18:a2:16:a1:
                    5c:c1:f4:e2:36:72:70:a2:c9:4c:31:12:75:8f:ad:
                    27:a1:78:f1:92:ff:62:ac:8c:ba:29:70:e4:1b:03:
                    57:5a:6e:56:d5:8b:14:78:a7:9a:cd:8e:ad:5b:cf:
                    65:b5:c9:ef:13:57:57:fa:20:99:01:4d:55:f6:31:
                    e9:fb:c7:13:63:42:b4:67:48:d2:3c:4b:72:ac:55:
                    94:93:02:4d:8c:ea:98:96:43:2e:12:ef:12:ea:27:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D4:F4:87:31:E6:92:9F:00:B5:8A:07:CA:77:08:BE:60:4F:F6:D7
            X509v3 Authority Key Identifier:
                keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:0a:f1:98:a0:63:3b:af:3e:73:5f:57:6f:a8:e3:41:e9:1c:
         76:13:36:c4:0f:bf:59:e8:a6:78:8a:e1:4d:d2:d8:18:81:31:
         2c:e8:86:c7:dc:2f:78:21:4f:96:e4:12:d7:65:76:aa:d8:e4:
         4e:bc:79:60:fb:e0:65:94:23:27:77:f8:f3:b3:f7:8c:9a:7c:
         27:21:7e:ec:d4:70:f1:a5:3a:d2:2e:9e:e0:00:1b:b2:35:72:
         69:3c:44:58:dc:29:dd:21:14:9b:ad:b7:a2:8a:e0:4f:00:77:
         3e:37:31:e4:24:bd:ed:11:a9:53:30:cb:a2:2d:65:47:d9:ee:
         e6:97:db:90:e3:ff:4a:db:c0:5e:84:d2:0e:19:74:4f:36:9a:
         ef:69:45:fa:11:30:e5:01:dc:2a:fa:45:ec:28:87:ee:94:01:
         70:10:cb:fd:42:46:8d:10:2d:ca:7f:44:04:d0:f0:ee:f2:3e:
         5b:7b:9c:24:57:89:ea:a7:13:27:5e:5e:9e:0a:63:d5:c2:43:
         c9:c4:7f:a3:ec:e1:e7:c8:9c:83:e2:8b:1d:ee:47:cd:70:ea:
         2d:5e:2a:95:45:f7:28:82:24:48:53:66:40:1a:dc:e1:80:46:
         0d:79:05:eb:3e:59:08:76:d1:97:33:2d:da:c2:b0:e0:e5:75:
         f9:25:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:04 2026 by rpki-client