Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32342d3234203d3e203633383732.roa
File:                     3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (raw, json)
Hash identifier:          BkJTNl2EaGlXKx/0oxL6MDW8bV/3huXeq9qOcksMrJo=
Subject key identifier:   8E:B5:CD:3C:17:5B:57:20:B7:80:D1:D1:FE:0F:0F:B6:F1:0A:88:68
Certificate issuer:       /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5
Certificate serial:       6357CE80259BDD07B1E1332CE55CCC2EAC0C3828
Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32342d3234203d3e203633383732.roa
Signing time:             Sun 03 May 2026 02:53:16 +0000
ROA not before:           Sun 03 May 2026 02:48:16 +0000
ROA not after:            Sun 02 May 2027 02:53:16 +0000
asID:                     63872
IP address blocks:        103.52.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl
                          rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:57:ce:80:25:9b:dd:07:b1:e1:33:2c:e5:5c:cc:2e:ac:0c:38:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5
        Validity
            Not Before: May  3 02:48:16 2026 GMT
            Not After : May  2 02:53:16 2027 GMT
        Subject: CN=8EB5CD3C175B5720B780D1D1FE0F0FB6F10A8868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:d7:6c:c0:f1:e2:b4:be:68:30:fd:3e:f7:
                    b0:35:45:19:75:3f:bf:10:cd:c1:61:df:3a:ec:bb:
                    6a:f2:9a:86:21:80:c4:79:d3:89:79:78:2b:40:77:
                    a5:9e:8a:6a:64:13:25:6d:fe:a0:5a:a3:82:e9:83:
                    51:04:66:f5:e8:ca:4c:e0:f1:dc:a5:a0:81:07:67:
                    30:8b:4a:c8:c5:7b:ee:1e:e4:f8:4d:a7:3e:4f:ce:
                    5a:5c:64:b9:52:9b:e6:0a:31:ee:4b:32:e2:04:19:
                    e4:af:02:fc:e5:67:e3:50:9d:55:3f:5f:dc:b4:1b:
                    2c:dd:e6:63:8f:5d:17:49:5d:a5:ff:24:23:ce:a9:
                    6e:37:76:75:3e:99:47:f6:a1:d8:a2:6e:cf:30:f0:
                    05:6b:bd:d5:f2:ec:bd:5a:b0:a8:94:25:7d:52:6a:
                    4e:0c:f2:09:d3:9a:c1:2b:b4:84:66:a6:dc:76:49:
                    59:98:1f:2b:13:0f:c3:c6:89:fa:da:2f:0f:4d:10:
                    ab:84:da:bb:18:a7:67:61:fa:83:b7:76:44:bf:2e:
                    f5:98:ff:f9:fd:15:36:fb:8f:a3:0c:e0:83:88:2d:
                    26:b1:65:0a:4e:cc:01:94:94:00:f7:5d:9d:b0:d5:
                    b0:c8:b2:1f:31:1c:94:19:9b:8d:84:b3:8a:63:70:
                    5d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B5:CD:3C:17:5B:57:20:B7:80:D1:D1:FE:0F:0F:B6:F1:0A:88:68
            X509v3 Authority Key Identifier:
                keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32342d3234203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:fd:f8:b4:26:49:1e:18:95:85:dd:9f:d4:98:e7:95:ee:35:
         28:78:a9:0d:55:ee:f1:62:76:cd:dd:0d:d2:95:c4:84:34:71:
         a9:3e:88:28:4c:df:50:10:ae:31:2f:72:f1:32:29:71:6d:3b:
         fc:e2:66:0a:9d:b2:68:fe:99:ce:d2:ee:36:cb:8f:4a:e8:c9:
         23:8e:c2:e5:82:f6:c9:04:05:1d:3e:25:c5:c0:94:20:5e:bc:
         fc:e8:70:38:71:9c:6b:ba:d9:94:18:83:3d:f2:4d:a4:3f:59:
         d1:7f:87:a2:02:9b:95:31:09:b9:9d:9e:19:eb:0d:54:88:a2:
         1e:14:d8:c5:77:db:6a:2c:e3:92:be:11:57:de:f7:26:6d:87:
         9f:8c:90:ac:cf:a1:22:c0:55:90:ef:1c:d2:99:b8:2a:df:03:
         8d:92:c4:f8:4a:fe:a1:e6:a4:52:d5:04:5a:0b:6c:6a:58:4d:
         dd:59:bc:06:ef:93:04:18:4d:a3:8a:7f:48:68:0c:16:cc:1c:
         ec:d0:31:3c:26:96:f8:c1:98:36:fe:64:64:3b:05:1c:21:27:
         c1:8d:c5:65:8a:5f:f6:7f:05:13:e3:44:6e:de:22:5b:0d:cf:
         72:5c:41:26:1c:5c:71:83:21:1a:25:f5:22:70:fd:f0:55:b8:
         cf:25:40:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:34 2026 by rpki-client