Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa
File:                     3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (raw, json)
Hash identifier:          JXl9nF73Wg0ANBBDSP3R1eZt9u9/t+JbOCpzL0EVDI8=
Subject key identifier:   9F:9F:F9:EE:3C:1A:0B:3C:0E:86:2C:9A:54:CB:ED:EF:DE:AC:69:E0
Certificate issuer:       /CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Certificate serial:       7B5049E93417D316A162EEAAC0959CB862438B78
Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa
Signing time:             Sun 03 May 2026 02:59:27 +0000
ROA not before:           Sun 03 May 2026 02:54:27 +0000
ROA not after:            Sun 02 May 2027 02:59:27 +0000
asID:                     150959
IP address blocks:        103.116.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
                          rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:50:49:e9:34:17:d3:16:a1:62:ee:aa:c0:95:9c:b8:62:43:8b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5
        Validity
            Not Before: May  3 02:54:27 2026 GMT
            Not After : May  2 02:59:27 2027 GMT
        Subject: CN=9F9FF9EE3C1A0B3C0E862C9A54CBEDEFDEAC69E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:c1:ae:ce:90:27:1c:ca:72:38:6d:dd:0d:
                    4e:c2:1b:62:bf:54:c4:60:a8:eb:79:92:b7:eb:9f:
                    6b:0c:a2:8c:5e:f5:d8:fd:f0:12:2d:56:82:56:53:
                    03:37:f1:79:10:6c:72:01:2f:ff:bf:40:4b:9b:8b:
                    a6:53:60:43:9d:81:11:60:5e:8f:b5:44:66:37:56:
                    5b:63:bf:e3:23:36:23:5d:56:16:ea:33:21:de:b6:
                    14:87:fd:08:98:54:ad:d1:e3:d0:47:25:05:93:43:
                    61:49:eb:9e:94:56:56:96:43:6e:6c:91:20:a7:b3:
                    6c:17:de:74:a2:23:e8:c5:f4:04:b2:ac:d6:69:98:
                    d7:b7:61:bc:b3:ee:39:a9:40:fa:47:5d:d1:b2:57:
                    a3:a9:54:8b:52:a2:97:2b:34:92:07:82:e0:65:51:
                    a5:98:07:76:07:ea:c1:ed:7c:fa:c2:54:ca:cc:6f:
                    f8:84:c4:b7:d6:76:53:e3:ca:37:06:5b:3a:d7:f5:
                    6c:8f:c5:41:67:7a:60:fa:ef:e3:33:e3:62:49:75:
                    1a:9a:b8:41:c1:7f:9f:3e:b2:41:c2:18:9a:1f:17:
                    37:26:d9:2d:56:aa:f9:48:71:25:d7:7d:56:c7:58:
                    61:aa:8a:32:01:aa:69:2a:ab:78:6f:da:62:4e:d3:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9F:F9:EE:3C:1A:0B:3C:0E:86:2C:9A:54:CB:ED:EF:DE:AC:69:E0
            X509v3 Authority Key Identifier:
                keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:45:ab:06:52:33:c1:54:7d:08:73:68:f3:f0:34:2d:da:b0:
         61:4c:ed:5f:74:89:45:8a:dc:db:a2:5c:ee:c2:c6:a5:65:b8:
         f9:97:07:af:6f:52:5d:9d:73:e5:ec:9f:32:3b:99:02:32:b7:
         f1:d3:01:8e:3d:61:9d:84:10:c5:38:fb:a2:dc:49:8e:0e:a7:
         d9:1b:a3:b2:92:5a:07:4b:3b:a8:a2:94:7a:9a:e4:b3:90:37:
         ee:ef:ea:bd:58:3a:5b:fb:4e:d0:85:f2:7c:f6:96:ac:90:66:
         a4:6f:60:ec:18:da:d6:1f:f5:0d:ab:8e:2d:72:da:b8:61:09:
         82:be:44:db:78:fc:b0:82:1e:c4:78:4c:e8:d0:3f:17:9e:ba:
         55:ff:db:1d:e1:f5:5b:d1:b0:47:ea:09:8e:24:a3:6a:a1:e2:
         d2:c1:c8:d2:f9:f1:03:2a:32:86:16:49:2f:8a:6b:8e:ca:03:
         de:9a:18:4f:56:e4:b7:a4:6e:88:48:76:aa:90:b8:a1:10:2a:
         21:99:ee:a8:03:3a:91:87:7e:a4:67:f3:b1:bb:65:29:f3:4f:
         c0:bf:36:f8:12:cb:d8:46:dc:3a:31:0a:20:d3:8d:41:f5:0c:
         51:d7:74:52:9a:91:8b:6d:0b:b2:88:97:e0:60:b5:dc:62:a0:
         3c:39:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:45 2026 by rpki-client