Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35332e302f32342d3234203d3e20313530353535.roa
File:                     3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (raw, json)
Hash identifier:          TY9xtOQFTiGa56M4F+YE1hmcUj+TGkmqgi8wHfKHu1E=
Subject key identifier:   43:B3:2F:85:E1:DC:4A:DE:13:34:0C:F7:D1:12:08:5D:1E:E4:5C:A4
Certificate issuer:       /CN=6C51F6049FEA49ABFDC27551DEA1C378434ED444
Certificate serial:       7E123E0C9976B669E341D26F6D133FF5999D53BC
Authority key identifier: 6C:51:F6:04:9F:EA:49:AB:FD:C2:75:51:DE:A1:C3:78:43:4E:D4:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C51F6049FEA49ABFDC27551DEA1C378434ED444.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35332e302f32342d3234203d3e20313530353535.roa
Signing time:             Sun 03 May 2026 02:55:35 +0000
ROA not before:           Sun 03 May 2026 02:50:35 +0000
ROA not after:            Sun 02 May 2027 02:55:35 +0000
asID:                     150555
IP address blocks:        103.85.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.crl
                          rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C51F6049FEA49ABFDC27551DEA1C378434ED444.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:12:3e:0c:99:76:b6:69:e3:41:d2:6f:6d:13:3f:f5:99:9d:53:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C51F6049FEA49ABFDC27551DEA1C378434ED444
        Validity
            Not Before: May  3 02:50:35 2026 GMT
            Not After : May  2 02:55:35 2027 GMT
        Subject: CN=43B32F85E1DC4ADE13340CF7D112085D1EE45CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:72:0d:41:e5:17:97:54:bc:bf:d2:7e:f2:06:
                    fd:c8:33:29:da:0d:51:70:1d:41:c3:93:fe:de:9e:
                    f5:79:ed:43:17:59:91:5c:82:9c:3b:31:96:f7:52:
                    cd:dc:50:eb:72:52:95:20:92:c0:13:d7:77:79:6f:
                    9c:ce:c2:fd:b6:55:44:67:dc:73:2a:fd:21:9a:6c:
                    1d:98:ec:93:87:48:f6:9f:28:a5:c9:e3:cf:1b:20:
                    bc:99:63:0a:1a:d6:ec:f2:61:0d:a0:d4:ff:50:6d:
                    04:42:cf:6f:36:63:64:d8:86:6e:0d:39:fe:88:08:
                    9a:a8:60:a1:e0:cb:b4:00:05:7b:75:dd:8f:44:14:
                    16:ed:87:8a:f0:d3:06:15:f7:d7:55:f1:49:f4:63:
                    7e:5b:e2:f0:9f:08:f1:0d:f0:b5:99:7c:b8:9d:9b:
                    a0:dc:6c:f3:56:84:e1:36:c6:6f:76:c5:3c:59:7e:
                    b7:a3:d7:5d:40:d5:d9:c7:b3:47:1a:e8:ec:41:0c:
                    8a:8e:d2:9e:c0:80:9c:54:30:fe:b6:a8:ba:12:a7:
                    db:46:04:d0:30:98:4e:2f:6b:87:a8:aa:09:31:48:
                    a4:f7:e1:4e:83:e7:13:a5:92:6d:a4:d9:c1:22:72:
                    c4:b7:f8:30:c3:9b:97:58:cc:64:67:5d:65:25:7c:
                    f9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B3:2F:85:E1:DC:4A:DE:13:34:0C:F7:D1:12:08:5D:1E:E4:5C:A4
            X509v3 Authority Key Identifier:
                keyid:6C:51:F6:04:9F:EA:49:AB:FD:C2:75:51:DE:A1:C3:78:43:4E:D4:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/6C51F6049FEA49ABFDC27551DEA1C378434ED444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C51F6049FEA49ABFDC27551DEA1C378434ED444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35332e302f32342d3234203d3e20313530353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ba:7b:3a:4b:8b:dd:4f:65:dc:e2:b7:d7:66:f4:25:40:ef:
         4f:85:2f:75:c3:22:88:e5:40:22:2e:8d:51:f5:be:7e:ba:74:
         0f:be:93:1a:bb:12:47:d4:9d:2b:d8:bd:79:56:8f:ee:81:96:
         4a:ad:38:af:78:a3:d2:e4:af:52:00:d8:0a:bd:74:6a:ac:67:
         f8:1d:c9:7b:68:2f:d2:a4:e6:79:19:ca:a1:11:c1:35:f1:14:
         11:4b:a1:8b:17:1c:84:b4:1a:5a:1b:6e:b8:fa:1d:d3:49:aa:
         3c:aa:a7:42:77:25:45:2a:3f:46:0c:76:2e:ed:71:10:52:e1:
         79:f9:06:60:b6:83:0b:5e:9d:6c:23:66:4a:a8:5a:e6:a3:5e:
         5d:36:cf:8b:d1:e6:0b:26:24:4b:ad:12:d5:00:ca:f2:47:42:
         a0:14:3b:1a:ce:e5:86:c7:21:9d:62:43:11:58:45:3c:08:62:
         d7:72:3d:13:24:6d:32:45:e5:95:8c:dc:20:1e:87:ce:14:ee:
         37:c4:3a:01:c1:ff:c3:7d:b5:8e:ae:fb:ee:2f:de:f9:52:30:
         4c:19:72:f0:3c:33:41:46:4f:3c:d9:f0:6e:34:97:45:c0:82:
         2c:ea:4f:9b:1a:29:fa:65:da:24:d6:7e:0a:ca:92:e7:99:51:
         b4:14:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:40 2026 by rpki-client