Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa
File:                     3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (raw, json)
Hash identifier:          rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=
Subject key identifier:   5D:EB:E1:BC:74:B4:5B:2D:30:3D:CE:E9:B9:84:6C:00:02:73:45:0D
Certificate issuer:       /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D
Certificate serial:       5CE791163A4A372A64109682404788D4642492CF
Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa
Signing time:             Sun 03 May 2026 02:58:18 +0000
ROA not before:           Sun 03 May 2026 02:53:18 +0000
ROA not after:            Sun 02 May 2027 02:58:18 +0000
asID:                     58485
IP address blocks:        103.173.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl
                          rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e7:91:16:3a:4a:37:2a:64:10:96:82:40:47:88:d4:64:24:92:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D
        Validity
            Not Before: May  3 02:53:18 2026 GMT
            Not After : May  2 02:58:18 2027 GMT
        Subject: CN=5DEBE1BC74B45B2D303DCEE9B9846C000273450D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:69:81:10:6e:09:c4:7d:4b:c4:3c:8e:3f:
                    44:f7:be:ae:ef:a1:d0:05:50:fc:99:0d:cc:8b:41:
                    3d:1e:56:b6:55:6b:9e:f0:4a:ed:67:e9:7a:96:70:
                    d8:c6:0f:27:1e:aa:5c:18:5a:ac:59:87:3d:73:b1:
                    eb:2d:ed:64:89:47:b1:0a:3a:5a:4c:08:01:6c:fc:
                    fc:40:78:1f:7a:18:fc:ad:8c:e8:64:cb:7e:6d:29:
                    ce:b2:1b:84:af:55:61:4e:29:ca:49:b7:d0:a5:13:
                    c0:9a:d3:a1:63:3f:15:e0:0e:62:fc:cb:d7:44:4a:
                    08:c2:f6:a0:c6:74:32:6b:ff:d3:dd:f5:5e:b8:16:
                    b4:35:03:ae:37:3c:7b:6e:21:c5:35:10:fc:03:2b:
                    1f:5a:cb:5a:9d:41:07:1e:01:eb:b1:60:3b:0d:5a:
                    02:3c:3b:e2:45:4c:84:d0:9a:27:90:5d:98:00:32:
                    e5:0f:f2:60:00:6a:9e:a3:c5:bf:65:84:62:2f:ec:
                    8f:ab:ee:c1:82:45:c2:af:2f:5f:89:23:27:fd:9a:
                    c4:77:e1:04:b7:43:d2:04:aa:60:ea:2a:03:d5:ba:
                    6d:8a:b9:8f:65:22:4d:67:db:b9:4b:6b:fe:29:b3:
                    52:1f:0a:0d:9e:fc:e4:c5:dd:eb:ad:dc:d1:d6:85:
                    80:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EB:E1:BC:74:B4:5B:2D:30:3D:CE:E9:B9:84:6C:00:02:73:45:0D
            X509v3 Authority Key Identifier:
                keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:fc:df:ca:13:65:11:2b:54:fb:ec:d6:a7:72:fa:13:19:83:
         1d:0d:46:0d:54:7f:81:68:10:18:e2:c0:9c:87:4b:d3:99:0f:
         24:1b:28:13:30:2c:15:8b:29:51:5c:33:6a:c2:35:3b:5c:66:
         6c:53:e5:ab:b2:69:93:3b:c3:ea:ea:9e:99:32:05:74:f3:8c:
         3e:98:c5:13:b3:5f:9f:de:79:04:25:87:e1:31:f2:05:1d:a8:
         1e:24:5d:16:65:65:d9:21:a9:a4:e6:60:d1:5f:54:8e:4d:c0:
         e0:dc:f0:c6:30:94:42:4f:8f:9d:14:73:3c:43:26:77:38:2f:
         11:7b:eb:82:7a:2a:61:fb:8f:ed:8b:f3:63:15:f7:60:70:eb:
         3b:4c:e0:01:a5:6b:7f:c3:e6:7b:91:26:56:d1:b9:f8:cb:01:
         87:b2:18:68:ad:7a:8d:c7:e3:44:c9:44:76:71:3f:26:f4:13:
         2c:8f:d1:0e:2e:c1:6b:b0:fe:b1:b3:90:05:f2:4d:bd:d2:32:
         a4:44:3b:91:84:29:9f:70:e8:98:26:17:60:f4:c7:11:67:09:
         8e:32:28:36:ee:44:04:18:44:9e:aa:74:84:24:14:d1:07:8a:
         21:a3:3c:95:6f:f6:58:08:2b:3d:5f:12:90:2a:cf:cd:66:39:
         87:9f:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:04 2026 by rpki-client