Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa
File:                     3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (raw, json)
Hash identifier:          BL3YV8OyoAQ7j+EF73e3LAhx4M4vSUgHtEhY9UKiKNQ=
Subject key identifier:   41:BE:2B:25:9D:66:99:3C:7F:A5:DE:07:81:EE:AC:46:0F:43:5B:17
Certificate issuer:       /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Certificate serial:       79EF276D9553BFE9F8E8CFAA4604B2E7CC4CF044
Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa
Signing time:             Sun 03 May 2026 02:49:56 +0000
ROA not before:           Sun 03 May 2026 02:44:56 +0000
ROA not after:            Sun 02 May 2027 02:49:56 +0000
asID:                     138139
IP address blocks:        103.133.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
                          rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ef:27:6d:95:53:bf:e9:f8:e8:cf:aa:46:04:b2:e7:cc:4c:f0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
        Validity
            Not Before: May  3 02:44:56 2026 GMT
            Not After : May  2 02:49:56 2027 GMT
        Subject: CN=41BE2B259D66993C7FA5DE0781EEAC460F435B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:0c:89:cb:9f:58:bb:d5:53:6d:20:16:6c:
                    b0:f0:7f:c7:ef:ee:7b:a6:20:6e:c2:ac:0c:71:53:
                    bf:bb:50:b2:14:96:48:8c:2b:6f:fc:83:7b:0f:a3:
                    0f:d9:f4:46:ca:18:a7:f7:7c:27:ee:76:d0:19:07:
                    7d:b7:52:a6:28:2a:1a:86:6a:e1:9e:6d:bc:e9:81:
                    e1:84:e6:8d:cc:21:92:93:54:30:62:2a:ee:75:92:
                    e0:55:0c:fa:71:37:5b:a0:85:7f:1c:57:1c:45:c1:
                    40:03:6b:3d:4f:67:7d:c5:5a:7a:ae:cf:e8:c6:ca:
                    74:16:49:33:35:aa:db:2e:f4:97:8f:d5:d2:8a:b1:
                    ab:f2:5d:54:80:74:21:75:a9:40:b7:87:42:29:ef:
                    74:c1:f5:88:8e:31:f4:44:4b:a1:f1:b9:ea:40:ab:
                    7f:55:8b:41:0e:5e:3b:83:29:bd:a2:4a:81:42:5b:
                    ca:6e:a5:41:0f:fb:9d:6b:85:2f:89:ee:7a:6e:ab:
                    0f:1c:dc:ac:cd:4c:b7:db:46:45:7c:b6:3e:77:90:
                    51:b5:52:1a:5b:91:33:10:0e:f8:68:85:8c:26:69:
                    0c:c8:5c:3f:9f:e5:08:4d:50:98:aa:41:3d:67:3c:
                    2f:e4:7b:36:ed:d1:13:00:d4:01:f9:71:c7:b8:ad:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BE:2B:25:9D:66:99:3C:7F:A5:DE:07:81:EE:AC:46:0F:43:5B:17
            X509v3 Authority Key Identifier:
                keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:50:fa:62:8d:d8:43:4c:7d:3e:e5:3f:e7:e2:49:1d:64:a2:
         67:41:4e:19:f6:55:9b:be:22:1d:bf:7d:36:32:04:6e:b7:8a:
         b8:8e:98:40:15:44:57:26:aa:cf:c7:fb:dd:96:a3:a9:3f:49:
         5f:b2:e7:c6:69:34:4d:88:47:c4:16:25:b1:33:80:b7:42:9d:
         77:02:28:9d:92:ca:2a:2e:a3:24:a0:5f:d9:f0:7e:df:b0:41:
         f0:90:fa:08:5c:ec:fe:57:a4:5f:de:d9:ce:95:ca:eb:1d:27:
         bb:58:36:86:c9:76:5c:e7:a8:73:85:c8:a0:b3:52:ac:92:35:
         25:d3:b4:dd:df:a4:84:de:dd:5c:0c:a5:75:87:f4:cb:a7:fe:
         6b:f0:49:34:a8:92:40:1d:3d:d4:f5:d9:8a:43:f0:ed:c4:33:
         51:62:00:8a:5b:e7:80:e4:1e:4c:c4:d1:98:38:de:26:20:51:
         94:b4:2f:8b:0e:f9:a6:2e:84:bd:8d:86:70:df:cf:15:8e:46:
         36:1a:06:5e:63:16:51:4b:f7:31:89:c8:a3:1b:d6:46:35:c4:
         77:be:07:d8:1a:25:eb:4c:dc:a6:c2:e2:18:e9:5b:b4:30:05:
         18:2d:7f:3f:13:4e:74:6d:26:61:b4:9e:52:95:83:e5:f5:ef:
         6d:02:de:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:40:19 2026 by rpki-client