Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa
File:                     3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (raw, json)
Hash identifier:          hnn33VKD9efbhB9XD33L1BjuaAJltz7STiP/0n5gC5M=
Subject key identifier:   0D:91:B1:04:F1:62:DF:00:97:DB:F1:9B:CE:1D:2A:49:B7:87:1D:93
Certificate issuer:       /CN=E57A1275BA6338436B9AC4AE519D143B5747116B
Certificate serial:       5261D9C59D88B1A114ED71DFC66E2FB1BD07516C
Authority key identifier: E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa
Signing time:             Sun 03 May 2026 02:53:45 +0000
ROA not before:           Sun 03 May 2026 02:48:45 +0000
ROA not after:            Sun 02 May 2027 02:53:45 +0000
asID:                     149680
IP address blocks:        103.184.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl
                          rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:61:d9:c5:9d:88:b1:a1:14:ed:71:df:c6:6e:2f:b1:bd:07:51:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E57A1275BA6338436B9AC4AE519D143B5747116B
        Validity
            Not Before: May  3 02:48:45 2026 GMT
            Not After : May  2 02:53:45 2027 GMT
        Subject: CN=0D91B104F162DF0097DBF19BCE1D2A49B7871D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:2b:6a:8c:e6:51:54:38:13:be:56:76:c3:
                    57:05:20:43:97:13:70:4a:b5:3e:45:18:c6:51:07:
                    64:39:a6:aa:62:aa:0e:2e:13:7f:ca:37:1c:ab:03:
                    0f:dc:a9:d1:38:10:ab:05:70:2d:32:9c:3e:c8:4a:
                    54:95:f1:5d:d1:3f:7d:b4:2f:bd:8b:38:67:fb:77:
                    a5:c4:12:0b:e8:c2:7e:90:7a:93:f2:2e:56:17:a4:
                    df:44:3f:d6:a4:a8:85:6e:76:0d:fd:dd:85:71:12:
                    e9:8d:22:49:01:4b:44:08:e0:a9:dd:7b:e4:4f:72:
                    8c:32:84:f9:ba:31:20:81:1a:1d:c3:19:8f:a4:99:
                    fc:fd:38:d4:7b:73:c9:6c:f8:2d:8f:1b:7f:11:c6:
                    97:bb:6b:eb:22:07:02:a9:30:39:b0:d9:f3:0b:01:
                    cf:60:2a:6f:fd:37:62:d1:64:68:5a:79:65:a3:d4:
                    70:69:e8:da:0f:18:4d:19:2a:42:ee:27:eb:20:61:
                    a4:45:ff:46:0f:a9:c5:52:22:4b:7b:f5:58:2c:de:
                    ad:f0:f7:f7:1c:de:52:bf:60:b7:ce:2a:0c:79:79:
                    dd:e1:ce:65:46:3e:36:da:1d:ce:6d:34:9b:29:74:
                    31:4b:64:66:46:f3:0b:6e:15:82:3c:ef:6d:13:b9:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:91:B1:04:F1:62:DF:00:97:DB:F1:9B:CE:1D:2A:49:B7:87:1D:93
            X509v3 Authority Key Identifier:
                keyid:E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:61:c7:a3:71:5a:d0:6e:c2:48:5c:1e:3d:a0:63:0c:7a:
         7e:6e:00:cf:0c:dc:5f:60:f2:ad:b0:46:87:3e:a9:12:43:6f:
         bf:a5:70:7a:47:62:3a:3b:66:a9:a5:6d:19:a1:2c:cd:eb:15:
         97:29:77:b2:f3:02:9b:81:e2:36:bb:2b:19:95:ac:5c:2f:e4:
         bc:7c:a3:40:68:4d:10:a3:c8:fb:95:01:4c:c8:b3:9f:89:9e:
         da:23:c6:a3:32:23:b8:60:c4:4b:72:05:2b:c3:f1:45:7b:de:
         a6:55:06:8b:e3:fc:25:11:b8:1f:90:10:55:9c:3c:e0:00:7d:
         f2:0d:de:1f:6c:18:de:b9:26:c6:62:2e:8d:9b:43:b0:08:98:
         94:1d:ef:a7:54:86:eb:f3:bb:75:0d:18:65:01:aa:b9:bd:98:
         3f:7d:cf:2e:ba:ef:f1:06:60:9f:c7:eb:03:68:6d:1b:18:8b:
         e5:da:37:78:9f:59:89:07:dc:30:e2:32:a3:d6:98:54:96:6c:
         fb:dd:7c:2d:b9:b8:68:b5:87:94:1c:f8:f0:9c:2c:56:d7:51:
         19:9a:59:4f:ec:a4:11:ea:b7:2f:fe:f3:46:7c:5b:99:15:ff:
         b3:3f:fb:7d:39:44:10:d0:ff:45:9f:e8:c6:cc:28:16:a4:33:
         12:82:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:34 2026 by rpki-client