Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35322e302f32342d3234203d3e20313530353535.roa
File:                     3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (raw, json)
Hash identifier:          eUYjPUMGIIq2haj+zYFju+jv3KcSDuAhPxx4+266i1g=
Subject key identifier:   90:A2:43:B9:AA:FC:7F:B9:EF:43:60:B3:20:E9:76:C6:21:4E:F5:BA
Certificate issuer:       /CN=6C51F6049FEA49ABFDC27551DEA1C378434ED444
Certificate serial:       4EA0595FB42F2280645AA8D9275872A189DBB6FC
Authority key identifier: 6C:51:F6:04:9F:EA:49:AB:FD:C2:75:51:DE:A1:C3:78:43:4E:D4:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C51F6049FEA49ABFDC27551DEA1C378434ED444.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35322e302f32342d3234203d3e20313530353535.roa
Signing time:             Sun 03 May 2026 02:55:37 +0000
ROA not before:           Sun 03 May 2026 02:50:37 +0000
ROA not after:            Sun 02 May 2027 02:55:37 +0000
asID:                     150555
IP address blocks:        103.85.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.crl
                          rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C51F6049FEA49ABFDC27551DEA1C378434ED444.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a0:59:5f:b4:2f:22:80:64:5a:a8:d9:27:58:72:a1:89:db:b6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C51F6049FEA49ABFDC27551DEA1C378434ED444
        Validity
            Not Before: May  3 02:50:37 2026 GMT
            Not After : May  2 02:55:37 2027 GMT
        Subject: CN=90A243B9AAFC7FB9EF4360B320E976C6214EF5BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:52:03:d8:58:59:57:8f:c8:54:5f:5c:e2:
                    ad:c5:13:aa:be:32:91:cb:24:b9:b6:4e:9b:d5:9c:
                    75:58:63:f0:01:52:57:19:11:e3:b5:99:74:2f:2a:
                    e8:0f:e7:d2:25:29:d6:35:f3:73:f6:1b:c1:98:c7:
                    8e:33:92:37:45:00:3b:ae:02:1f:3a:91:ed:0b:15:
                    cf:df:c5:d4:73:fb:ac:0a:0e:4f:7e:08:8c:72:d5:
                    45:e7:01:ce:d0:30:60:9b:4e:69:7c:f8:70:c9:6f:
                    e3:fd:a5:4d:82:a8:d9:f2:e5:a6:58:f3:b0:53:b3:
                    1f:95:07:68:0a:14:70:19:94:6d:92:27:ad:5b:01:
                    8d:40:85:13:48:06:fa:94:55:d2:a7:ff:03:b6:92:
                    71:a0:7a:b7:ad:02:bc:83:d3:17:84:e0:5c:36:36:
                    2a:2d:af:4d:d5:de:48:a5:02:7b:7f:83:60:25:6e:
                    d0:29:78:af:26:b6:c7:4b:db:29:35:99:53:b1:d4:
                    89:50:05:55:98:75:83:a3:44:27:4c:b8:8a:8a:2d:
                    10:28:07:1a:8b:1a:36:3b:a7:76:9c:4b:48:d3:24:
                    f1:df:a3:d8:50:15:45:28:5b:8e:4d:ed:e7:89:12:
                    4b:1a:9c:28:10:2f:18:f4:c9:f7:06:25:6c:d4:47:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A2:43:B9:AA:FC:7F:B9:EF:43:60:B3:20:E9:76:C6:21:4E:F5:BA
            X509v3 Authority Key Identifier:
                keyid:6C:51:F6:04:9F:EA:49:AB:FD:C2:75:51:DE:A1:C3:78:43:4E:D4:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C51F6049FEA49ABFDC27551DEA1C378434ED444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35322e302f32342d3234203d3e20313530353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:8a:51:f7:e7:b1:48:bc:5e:eb:c1:99:36:46:be:71:e6:42:
         6e:b9:15:d9:00:f0:f2:0e:54:3f:03:72:49:79:52:ad:f2:7b:
         21:cf:fe:6f:69:0d:83:96:bc:f9:ee:cb:6b:6a:47:60:ba:79:
         69:0c:53:11:6f:f4:50:07:db:8e:15:65:19:52:70:0c:64:f1:
         ab:f2:9f:65:8b:d7:7f:7b:90:3d:22:1f:64:59:0a:f7:3a:d6:
         67:2a:a0:60:81:43:26:24:d8:55:19:d2:ea:cd:d9:05:c3:99:
         2f:52:14:06:02:a3:29:9e:3b:aa:4a:41:8e:65:28:af:dd:91:
         b6:89:08:37:7b:b5:ff:50:89:8f:a6:ca:5f:8c:cd:a7:49:be:
         ca:54:3d:ec:50:22:7a:65:b1:01:00:af:04:f7:a5:ba:3c:54:
         b5:fe:1f:d4:c7:62:51:8a:cc:88:19:a1:94:3e:7c:04:f0:d1:
         02:61:0d:97:ae:7c:bd:58:70:33:81:c7:44:0a:dd:27:a2:4c:
         44:17:e9:7d:03:65:ed:0b:94:f4:fd:cf:e3:bb:4b:12:ca:8a:
         91:d9:97:af:9d:34:b3:10:e6:5f:a4:1e:fe:54:aa:54:e7:81:
         76:96:71:de:16:23:d8:bc:bc:93:b3:9e:47:06:73:87:98:c9:
         68:6d:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:14 2026 by rpki-client