Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa
File:                     3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (raw, json)
Hash identifier:          q/Jj/zrp2NwM8IIT1jpznDIyeMNRphvyuUe6dMIZGio=
Subject key identifier:   F8:4E:06:EC:5C:4D:78:F1:E7:60:25:D0:1B:5B:6F:F5:6A:09:E9:3D
Certificate issuer:       /CN=57444F1BEEDF846BC1D17397D3B43CD4D4BAD885
Certificate serial:       7E6B2AA9661A9B1F63026B17BFB649264A2E2F7D
Authority key identifier: 57:44:4F:1B:EE:DF:84:6B:C1:D1:73:97:D3:B4:3C:D4:D4:BA:D8:85
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa
Signing time:             Sun 03 May 2026 03:01:32 +0000
ROA not before:           Sun 03 May 2026 02:56:32 +0000
ROA not after:            Sun 02 May 2027 03:01:32 +0000
asID:                     151535
IP address blocks:        103.245.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl
                          rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6b:2a:a9:66:1a:9b:1f:63:02:6b:17:bf:b6:49:26:4a:2e:2f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57444F1BEEDF846BC1D17397D3B43CD4D4BAD885
        Validity
            Not Before: May  3 02:56:32 2026 GMT
            Not After : May  2 03:01:32 2027 GMT
        Subject: CN=F84E06EC5C4D78F1E76025D01B5B6FF56A09E93D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:b5:6c:05:f9:55:fc:48:bd:bb:7f:1d:ff:
                    fe:2d:4c:88:8d:76:58:db:61:2a:c9:2f:d2:be:26:
                    fc:85:9f:72:6c:5c:f7:57:0f:22:ac:e9:4b:a6:c1:
                    e6:d7:e6:06:fd:1f:e1:e3:15:f6:b2:03:1d:13:f6:
                    1e:d8:84:c1:90:d1:01:70:ff:21:61:40:c0:82:ab:
                    db:b3:b8:3b:0a:fa:56:8c:4e:e5:89:89:f4:0b:13:
                    5a:27:b5:cd:8c:a3:37:1f:05:f1:1a:d9:05:a0:d3:
                    fe:32:b6:29:e0:69:b0:33:cd:ff:3f:ed:96:41:95:
                    7e:24:8b:5c:19:46:15:42:30:24:63:f7:5f:52:2e:
                    c2:e9:77:bf:10:a8:64:88:4f:65:85:02:af:ed:0d:
                    b3:88:a0:25:5a:f7:2e:08:2a:17:52:a4:ce:69:a3:
                    dd:b1:d8:fb:d9:b6:84:fe:26:33:89:15:9f:32:a8:
                    21:af:f3:83:da:7d:31:6a:e2:8d:77:86:9e:17:86:
                    07:14:43:e7:36:a6:9b:1b:83:39:cf:cb:e7:9d:c8:
                    80:cd:af:a7:ef:46:10:f4:0d:6b:61:a5:1e:80:57:
                    76:dd:32:01:09:1d:a9:a8:51:e7:13:32:19:06:43:
                    c3:bc:0e:d7:36:6f:6e:9d:60:c2:1a:30:72:79:79:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4E:06:EC:5C:4D:78:F1:E7:60:25:D0:1B:5B:6F:F5:6A:09:E9:3D
            X509v3 Authority Key Identifier:
                keyid:57:44:4F:1B:EE:DF:84:6B:C1:D1:73:97:D3:B4:3C:D4:D4:BA:D8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:91:65:5c:85:9c:e5:d0:39:51:97:77:67:70:8e:d4:c2:64:
         db:1b:45:c9:30:e5:b8:a4:eb:3f:5d:d6:3b:6b:60:84:de:46:
         6d:40:71:1a:39:ac:37:d6:66:e4:63:42:05:4b:87:a1:73:1f:
         60:99:5d:3f:ec:02:8c:7d:5b:1c:32:ad:ae:3a:32:8d:1b:e8:
         a6:24:c0:5d:08:54:70:f7:ae:ee:c6:d5:de:02:7f:60:30:29:
         78:ce:91:06:3e:19:77:fd:d8:ec:eb:29:cc:64:34:4d:a7:85:
         96:71:77:06:6e:f6:71:a8:b2:33:ba:30:44:85:de:48:8c:f5:
         84:8f:d1:11:62:0d:d1:be:73:f0:be:79:b7:e8:58:68:d1:f4:
         fb:17:ce:27:77:3f:aa:74:a0:a8:fb:c0:fe:59:b2:62:e8:7a:
         0d:20:00:eb:bb:e2:b0:d8:fd:4e:ac:de:de:36:8c:71:d4:cb:
         af:ee:ed:b4:98:64:46:64:91:a7:d0:61:87:62:f3:60:6f:65:
         e2:8c:0b:f5:d6:2d:b4:64:f9:9d:af:6f:59:c8:3a:14:f7:df:
         f5:2e:61:c5:de:85:a2:6f:5e:71:f6:6b:30:e2:af:b4:fc:6a:
         99:07:20:ea:ee:bc:fa:45:21:24:b3:a4:fd:49:bc:9b:03:22:
         d6:c0:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:00:50 2026 by rpki-client