Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          aaKY+MlBIUGtoYrPuIo9eQvpF3POtIeNeOCAoDOkoyU=
Subject key identifier:   DF:50:54:5F:5A:A0:38:40:DA:0C:F1:14:2B:EC:C0:68:5B:CE:39:99
Certificate issuer:       /CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5
Certificate serial:       3E322C724BD22F71DD2CA96BC4F711992208AD73
Authority key identifier: 53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 02:58:08 +0000
ROA not before:           Sun 03 May 2026 02:53:08 +0000
ROA not after:            Sun 02 May 2027 02:58:08 +0000
asID:                     135478
IP address blocks:        103.129.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl
                          rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:32:2c:72:4b:d2:2f:71:dd:2c:a9:6b:c4:f7:11:99:22:08:ad:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5
        Validity
            Not Before: May  3 02:53:08 2026 GMT
            Not After : May  2 02:58:08 2027 GMT
        Subject: CN=DF50545F5AA03840DA0CF1142BECC0685BCE3999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bb:22:ad:65:96:c6:89:ae:36:f8:a1:24:8f:
                    05:0e:fb:f0:8b:37:91:cc:d3:fa:77:45:6c:55:92:
                    13:35:01:3e:1a:9a:a5:38:d3:e7:66:cb:ba:77:49:
                    bf:99:f2:12:57:c2:5b:9d:61:da:81:fe:a0:a9:61:
                    96:28:84:6d:e8:e9:49:6c:df:29:a8:ae:01:80:eb:
                    90:e0:bd:4f:a8:1c:bf:6f:3c:c3:c8:ed:b2:73:45:
                    bf:15:82:81:0f:89:58:c8:99:1a:d4:63:bd:56:70:
                    64:48:4d:2b:55:47:50:42:21:23:ef:62:3d:4f:28:
                    8a:49:c2:60:97:3d:bc:af:74:f6:7f:b8:3f:0b:9f:
                    a3:38:47:81:83:c2:eb:a4:c6:82:0d:37:10:67:a6:
                    e9:61:7e:f4:9b:f0:e9:d1:48:74:49:79:bc:cd:15:
                    76:71:a6:ad:43:bd:83:f1:1c:f1:f6:f8:cb:91:6a:
                    e3:41:d9:b5:ce:ca:33:22:56:f0:a5:8e:b0:d6:91:
                    a9:59:a1:af:b1:9c:b2:5a:ea:85:77:d8:e9:ec:cf:
                    d6:c3:91:da:70:75:f1:e8:82:f8:46:07:52:95:54:
                    59:0e:ac:dc:fc:c1:a6:d5:25:af:bd:62:cb:99:ed:
                    51:9d:e9:58:db:35:ca:99:a4:f5:db:66:b7:c2:b3:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:50:54:5F:5A:A0:38:40:DA:0C:F1:14:2B:EC:C0:68:5B:CE:39:99
            X509v3 Authority Key Identifier:
                keyid:53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:24:d5:a5:17:44:9d:49:1e:8f:2e:38:c0:3b:9b:1b:93:8b:
         13:f1:bb:bc:a6:58:b9:0d:a1:16:64:19:43:4e:17:18:0f:3a:
         ad:6e:2e:88:e1:d7:5b:09:9b:39:9c:b8:13:07:76:7c:3d:b3:
         16:7b:c1:a8:66:1d:7d:6c:57:f7:dd:27:88:1c:0a:ff:d9:78:
         09:2c:a8:ce:dd:b1:c6:88:16:c1:e8:93:8e:89:82:23:ac:11:
         ef:9f:38:26:6f:fd:f5:83:57:84:2e:c4:3b:0c:da:8d:ec:9d:
         5b:c3:7a:86:c0:66:c7:e6:c4:22:c4:f0:46:5f:7a:a0:04:30:
         89:fe:43:04:91:1b:ea:c2:17:2e:57:34:d0:28:a7:e8:06:76:
         9c:8b:d2:9d:15:55:04:71:cf:8b:d4:f1:a3:04:2c:01:11:1b:
         fe:05:6d:70:29:10:88:99:dc:ce:09:92:06:9a:e1:06:f2:31:
         2f:a8:24:14:55:dd:d7:c5:72:18:49:7f:53:d3:11:82:ea:49:
         fc:2b:53:36:b2:e3:32:c8:8a:bb:f5:7f:8d:81:16:13:d0:b1:
         79:77:a2:b4:ab:4a:23:7a:f6:4c:30:70:d4:0f:15:67:f4:23:
         75:2d:87:5a:30:b5:39:e4:54:4e:95:38:0a:69:86:ed:63:39:
         c0:c1:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:25 2026 by rpki-client