Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa
File:                     3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (raw, json)
Hash identifier:          VKlwIPdpyMpqk0maSmWSiVv4EZTH1WpK0M+m3jBjjUU=
Subject key identifier:   53:EC:BC:45:7D:BC:F8:22:79:BD:D2:34:30:1C:50:B1:28:F4:3A:EC
Certificate issuer:       /CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Certificate serial:       37A15D1D51CF400078C011545CBE63629CA44208
Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa
Signing time:             Sun 03 May 2026 02:59:26 +0000
ROA not before:           Sun 03 May 2026 02:54:26 +0000
ROA not after:            Sun 02 May 2027 02:59:26 +0000
asID:                     150959
IP address blocks:        103.116.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
                          rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a1:5d:1d:51:cf:40:00:78:c0:11:54:5c:be:63:62:9c:a4:42:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5
        Validity
            Not Before: May  3 02:54:26 2026 GMT
            Not After : May  2 02:59:26 2027 GMT
        Subject: CN=53ECBC457DBCF82279BDD234301C50B128F43AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:45:f4:57:34:4c:05:15:3e:b9:35:67:3f:
                    92:a2:fb:16:99:98:86:24:99:31:8b:3a:41:8b:f8:
                    5f:24:eb:ea:18:90:55:fe:d5:79:e7:79:07:ad:95:
                    4d:9a:66:b9:96:3c:ad:b0:1b:2d:1e:aa:4d:8e:77:
                    34:34:cd:fc:15:b8:10:2f:87:73:7e:b5:cd:69:5d:
                    9c:12:80:83:71:33:7c:04:54:53:e8:4e:85:9b:db:
                    90:e0:2d:40:29:e9:39:20:59:87:76:31:d5:f6:7e:
                    cd:9b:fd:74:2d:a2:12:22:39:ce:52:5d:78:2c:03:
                    17:e6:3f:45:e9:e8:51:0d:26:0a:83:98:d7:7d:ed:
                    26:02:71:f3:00:5f:97:05:ee:7f:0f:bb:87:d1:e5:
                    ba:4f:b6:06:45:a1:95:f1:ae:ae:78:e3:6b:e4:50:
                    ed:dd:18:4c:4e:09:5e:a4:25:75:b0:85:6d:49:ff:
                    33:47:ca:d3:43:96:45:d8:f5:2a:09:c3:8d:ac:23:
                    e8:63:2e:b5:9d:d8:61:09:90:34:51:4c:10:65:a3:
                    b0:6f:95:09:e1:4f:f4:43:dc:de:74:fd:87:69:6e:
                    e1:2f:6d:15:b6:e9:ce:a1:92:00:97:e6:68:42:a7:
                    2d:c8:45:f1:31:37:82:97:01:b5:8e:de:bd:f7:46:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EC:BC:45:7D:BC:F8:22:79:BD:D2:34:30:1C:50:B1:28:F4:3A:EC
            X509v3 Authority Key Identifier:
                keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:37:d3:9d:78:06:22:05:09:d5:37:ec:f2:a7:02:b1:ed:db:
         0d:df:49:45:38:6a:a3:56:e6:74:84:0a:55:86:77:5a:60:d1:
         30:88:c6:93:3f:e7:cc:15:63:a9:d0:6c:5f:2d:f8:b7:25:6c:
         9d:0f:50:35:2b:a1:1c:5b:41:19:96:a4:27:22:f3:8a:d2:94:
         f9:3f:04:3c:a3:c7:a6:94:3a:43:b0:d5:4a:76:c0:b0:e2:ab:
         0f:a4:0d:a1:ce:93:2d:f0:1d:e9:7f:cc:b3:40:d1:7b:07:ae:
         a1:fa:4b:db:73:5e:26:a5:a6:33:db:c9:3d:1f:50:bd:ce:86:
         94:17:cb:48:a6:ee:9f:68:0d:31:c1:e2:5c:6e:ff:4b:12:70:
         2e:3a:bf:54:1b:1d:cc:63:56:fb:e0:44:5d:7c:8f:ac:93:46:
         0d:66:96:bd:97:c9:c5:0f:c4:4e:08:c9:59:35:5f:9b:32:ba:
         c4:70:34:33:7f:df:54:74:f0:a6:01:81:a7:73:a5:16:54:6f:
         7f:e8:a4:c0:73:18:a6:ad:46:f1:4a:ea:c0:fa:65:81:d7:14:
         fe:83:3d:d8:6b:bb:e7:a7:fc:5c:db:31:95:0f:58:26:9f:48:
         ac:bc:9b:1f:4c:e3:cc:e1:ef:b1:8b:35:fd:e6:60:da:eb:f9:
         5c:e0:69:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:30 2026 by rpki-client