Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa
File:                     3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (raw, json)
Hash identifier:          W77EgJV2LrTum+AXobDiJMY0VCB5QZlN1pW9AzTxaMA=
Subject key identifier:   51:A3:BE:CA:74:6B:20:C8:F3:F0:86:46:22:D7:4F:7A:62:01:C5:16
Certificate issuer:       /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Certificate serial:       761615E548B67AF3359A3CA43BE3B0A936BB5206
Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa
Signing time:             Sun 03 May 2026 03:00:22 +0000
ROA not before:           Sun 03 May 2026 02:55:22 +0000
ROA not after:            Sun 02 May 2027 03:00:22 +0000
asID:                     135444
IP address blocks:        103.235.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
                          rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:16:15:e5:48:b6:7a:f3:35:9a:3c:a4:3b:e3:b0:a9:36:bb:52:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
        Validity
            Not Before: May  3 02:55:22 2026 GMT
            Not After : May  2 03:00:22 2027 GMT
        Subject: CN=51A3BECA746B20C8F3F0864622D74F7A6201C516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:5e:08:90:8c:b5:a0:75:b5:24:00:38:a5:
                    52:ce:f5:5f:42:94:9b:89:6a:8b:1b:d2:43:47:33:
                    81:2e:19:d7:1e:e0:f8:74:e5:3f:91:ce:28:43:b5:
                    8f:88:0a:7f:c7:e7:d8:e1:79:4d:63:41:e1:a3:c6:
                    bb:21:cb:65:76:f4:dc:54:b2:7b:3a:b4:15:c3:ce:
                    4e:e4:62:1a:1d:63:77:ff:47:cb:9b:5c:41:0b:65:
                    10:c2:e5:46:2b:bc:bd:4f:1a:6e:0e:a9:01:88:bd:
                    56:bb:32:6b:19:54:bd:30:95:75:17:ee:e4:7d:2f:
                    35:1e:9e:24:b6:45:4d:23:31:2a:a7:2b:f4:42:00:
                    81:83:a1:aa:e0:c1:50:f0:d4:04:38:ca:db:f6:1a:
                    a8:14:12:1b:fd:ee:cc:ff:22:21:10:93:2e:5e:c7:
                    92:9c:a2:8e:9f:47:56:3f:bd:dd:f3:e0:ce:d9:69:
                    fe:67:95:09:ef:04:09:cf:39:a4:6a:07:4e:50:b1:
                    21:0a:d0:34:e2:c5:c6:ae:20:8a:26:c1:2f:16:5c:
                    62:e3:22:a4:53:97:f6:ca:e6:27:03:90:57:a8:8f:
                    68:1e:e0:ae:ef:d0:42:f7:f4:1a:aa:97:a7:87:84:
                    0d:25:cd:63:62:29:10:b8:d2:7e:9b:97:33:e3:19:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:BE:CA:74:6B:20:C8:F3:F0:86:46:22:D7:4F:7A:62:01:C5:16
            X509v3 Authority Key Identifier:
                keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:e3:c5:08:40:6c:5c:16:23:a9:19:70:49:35:5f:c4:74:27:
         0c:4c:a4:16:f9:f9:94:43:d9:80:fd:99:2e:64:d8:a0:85:99:
         2d:5a:63:e1:b9:ae:d0:60:22:f4:0c:04:70:61:a2:28:f3:44:
         b3:d7:d5:2a:6a:a3:3d:60:87:2b:e3:49:82:08:17:90:07:f4:
         9b:2f:f0:d4:77:c5:7b:12:61:c7:b8:f6:8a:f5:8b:6f:15:99:
         62:af:d1:fb:0b:82:23:68:18:77:8c:81:52:c5:a7:59:f8:4b:
         de:6c:9e:1a:9a:1d:f3:05:b9:64:d3:54:c4:7f:98:34:3e:e3:
         ff:5d:27:1b:78:8d:58:60:3a:81:6c:88:f6:c5:11:92:c0:1b:
         f1:01:79:36:18:4f:84:51:7a:17:18:3c:54:41:60:c8:f6:68:
         41:71:7c:8d:32:dc:f6:9d:b5:6d:9a:da:ab:15:e9:59:af:96:
         8d:df:39:4c:0f:cb:da:4b:31:39:2f:e9:0a:48:a1:3d:49:23:
         1c:65:22:94:d9:f5:f5:e5:15:23:9a:a6:3f:9e:a5:fc:78:03:
         16:67:1c:de:3a:a3:a8:84:98:86:fa:36:6f:3c:4b:2c:73:2c:
         58:cb:c6:b2:5b:2e:f6:5b:2d:bd:f3:2d:d4:7a:37:1c:ef:3e:
         a1:e4:30:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:34 2026 by rpki-client