Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa
File:                     3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (raw, json)
Hash identifier:          mSdi1JVXAeBd7ee4i/as65R8EvvnBWeaatN97ha7qSA=
Subject key identifier:   01:63:08:A8:E2:BB:F8:FA:2D:B5:AE:1F:83:3B:AB:8B:0D:15:1A:B7
Certificate issuer:       /CN=51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1
Certificate serial:       6CF96BE5E4628F6BC0EEEFAD1ABB1BC28E74760D
Authority key identifier: 51:A4:A4:22:44:B2:4B:46:5C:B9:F0:0D:B1:D2:F6:DE:8B:0D:0E:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa
Signing time:             Sun 03 May 2026 03:01:13 +0000
ROA not before:           Sun 03 May 2026 02:56:13 +0000
ROA not after:            Sun 02 May 2027 03:01:13 +0000
asID:                     151992
IP address blocks:        103.42.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.crl
                          rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f9:6b:e5:e4:62:8f:6b:c0:ee:ef:ad:1a:bb:1b:c2:8e:74:76:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1
        Validity
            Not Before: May  3 02:56:13 2026 GMT
            Not After : May  2 03:01:13 2027 GMT
        Subject: CN=016308A8E2BBF8FA2DB5AE1F833BAB8B0D151AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:6f:26:ae:29:2e:b0:ea:ec:86:18:ce:0c:
                    7f:7c:cc:9c:f0:44:09:8e:78:ba:d6:ac:7c:d0:72:
                    0c:4d:31:7e:c0:67:45:90:03:39:79:64:a5:9a:3f:
                    4d:48:99:34:b6:2c:c4:48:2c:3f:5b:f2:50:f9:4a:
                    94:f3:39:1c:be:ae:35:34:91:28:86:15:86:bc:c6:
                    fa:0b:e2:fa:02:5b:69:b7:a4:21:1f:f2:a3:8d:e0:
                    b5:69:95:f1:11:46:80:18:25:80:00:3e:2b:2f:65:
                    93:75:04:fa:92:e5:e6:9c:27:51:21:34:e4:72:84:
                    ab:e6:32:35:d1:52:fe:0d:7d:be:84:3f:45:03:79:
                    45:81:41:d9:ce:20:86:c6:19:96:2b:5a:be:90:be:
                    c3:d7:53:46:2f:9d:39:5e:72:d7:20:39:34:96:de:
                    28:bf:5c:a1:22:31:ba:66:44:61:c0:99:bc:66:62:
                    b8:41:60:b7:92:62:52:b0:9d:96:36:90:39:3c:b0:
                    cd:06:18:92:61:fe:ee:cf:3e:cf:11:01:c3:93:1a:
                    36:da:aa:93:ab:1e:0b:9c:b6:34:af:71:7a:bb:a9:
                    1b:40:21:12:ee:6e:96:57:0d:bd:03:1e:97:59:b5:
                    88:08:69:c2:c8:8e:66:3c:a7:60:3d:d1:0d:11:95:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:63:08:A8:E2:BB:F8:FA:2D:B5:AE:1F:83:3B:AB:8B:0D:15:1A:B7
            X509v3 Authority Key Identifier:
                keyid:51:A4:A4:22:44:B2:4B:46:5C:B9:F0:0D:B1:D2:F6:DE:8B:0D:0E:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:d9:1a:9d:09:ac:a8:1b:bc:e9:6f:48:7d:14:09:cb:b1:
         83:da:ac:94:49:13:97:80:2d:81:48:89:1f:ff:75:15:e1:59:
         9d:62:dc:6a:9e:0a:a8:53:2f:23:e3:42:a2:37:72:8c:e5:b8:
         87:1e:0e:7d:3a:29:15:1b:49:a1:19:b9:2f:57:3f:26:5c:b4:
         95:6c:0c:ae:b4:78:d6:93:c4:21:25:4e:11:8b:9c:77:ea:34:
         48:c6:94:49:52:4f:eb:35:ab:8e:64:6d:05:eb:7d:6a:09:d7:
         07:48:d8:2b:bb:34:39:e5:87:41:33:8f:fc:cb:b0:f6:27:60:
         38:50:46:ae:f5:20:e0:2c:0a:a2:a8:a8:4e:60:4b:83:f4:62:
         51:9d:59:03:b8:5d:74:54:a3:1b:65:34:fc:ea:c4:26:e6:4d:
         5d:96:0b:ac:72:c6:c5:54:c1:47:55:5e:d2:b5:57:0c:94:40:
         2b:f9:ca:f5:97:57:f2:49:fa:7c:12:90:42:5f:ca:8b:d5:51:
         7f:9f:11:18:af:fb:0b:70:bf:1b:1b:8f:d0:1a:46:a2:e0:b3:
         5e:1a:8d:fb:14:74:ca:87:50:be:11:7f:43:66:1a:c4:f4:a1:
         97:6b:88:27:30:76:69:97:d1:b6:7a:b0:ee:3b:56:73:73:80:
         f6:c6:80:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:59 2026 by rpki-client