Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa
File:                     3130332e312e35302e302f32332d3233203d3e20313432333532.roa (raw, json)
Hash identifier:          WkCdOFNVSI5rk7RbyP6H8qiF2D1vxHG5abEVefnC5z0=
Subject key identifier:   78:51:7A:EB:9F:10:CA:DF:EF:B1:4A:1E:0B:A6:C5:B9:81:6B:18:CF
Certificate issuer:       /CN=86E48412E2794F23453AA6C42466D4F6BB140BF3
Certificate serial:       01D710848241C66B882BB0F42A87FC52527AE0BD
Authority key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa
Signing time:             Sun 03 May 2026 03:01:33 +0000
ROA not before:           Sun 03 May 2026 02:56:33 +0000
ROA not after:            Sun 02 May 2027 03:01:33 +0000
asID:                     142352
IP address blocks:        103.1.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl
                          rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d7:10:84:82:41:c6:6b:88:2b:b0:f4:2a:87:fc:52:52:7a:e0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3
        Validity
            Not Before: May  3 02:56:33 2026 GMT
            Not After : May  2 03:01:33 2027 GMT
        Subject: CN=78517AEB9F10CADFEFB14A1E0BA6C5B9816B18CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:7f:1b:79:84:ce:c7:fe:ed:53:49:41:30:
                    c3:8b:c4:9c:3a:db:e1:cd:8d:af:b2:ae:9c:23:38:
                    89:24:2d:f1:fd:86:18:7d:c7:fa:36:0f:d0:aa:ef:
                    a1:f6:2f:a6:49:ee:0f:1e:3c:f9:80:27:31:f7:2b:
                    ce:7f:5a:ae:31:b2:7e:54:49:80:52:a5:a8:8a:3c:
                    5e:cd:18:f7:9a:83:0f:32:95:54:c6:c0:04:75:f0:
                    09:59:9a:17:89:9b:8f:12:81:a2:15:c4:69:50:66:
                    b3:ca:4c:15:6c:49:2e:fc:1f:77:36:71:e5:dc:53:
                    a3:98:b7:28:22:03:41:95:34:4d:99:5d:a1:78:c0:
                    6f:9e:36:d5:52:a2:08:20:55:b6:31:11:e2:69:2c:
                    22:32:67:76:84:fd:97:f7:f8:bc:1f:18:60:78:88:
                    5b:75:11:02:62:d9:f9:0f:72:42:5e:7a:08:66:1d:
                    88:9b:94:b1:48:45:95:55:61:58:52:70:cf:24:16:
                    63:4b:df:49:cc:40:72:d0:bc:34:9b:18:eb:4e:89:
                    ca:e3:84:ad:df:40:8f:f0:e2:26:fc:c7:ea:84:3e:
                    79:04:6c:61:fe:72:58:69:41:64:78:f2:ab:b7:54:
                    f4:0d:31:a3:f9:18:47:38:f1:f2:52:99:94:aa:b1:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:51:7A:EB:9F:10:CA:DF:EF:B1:4A:1E:0B:A6:C5:B9:81:6B:18:CF
            X509v3 Authority Key Identifier:
                keyid:86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:69:6d:03:3f:41:47:4d:46:30:1d:25:13:5c:5d:87:5e:
         08:5c:c0:52:8a:75:92:5c:24:b5:f8:50:22:ea:6a:d0:69:c5:
         9b:f5:9c:b1:83:d6:97:bb:a7:04:21:57:35:81:a7:1e:91:a2:
         5f:86:86:b2:1f:c6:72:b6:ab:1a:e2:c9:40:da:1b:79:fa:85:
         6e:ba:95:b6:1c:a0:e0:24:fb:e8:9f:9d:28:e1:3d:04:db:b2:
         d3:0b:e1:22:ba:88:44:51:24:3a:86:1e:8f:04:f9:2b:ec:85:
         c8:a8:37:e2:89:c7:c7:a5:70:2a:ce:25:67:08:7a:cc:90:65:
         53:8a:d5:99:42:0f:8f:70:f1:26:b1:eb:53:71:2e:40:8a:0a:
         0b:8c:aa:b4:47:c3:d8:fd:3b:8c:1d:ea:06:e1:16:37:06:e9:
         1f:8e:66:f0:e4:4f:9f:3a:d4:f2:86:d9:44:c9:dc:8f:25:54:
         a6:ce:7c:07:b9:6b:93:85:1f:e7:00:cc:85:e2:20:71:f0:22:
         26:e1:f8:cf:e7:e0:bd:29:9f:e0:43:36:06:53:72:ed:bf:95:
         29:10:d7:c4:42:66:58:9e:1c:6a:04:40:e3:d2:86:4f:6e:cd:
         5f:a7:db:c6:b9:7f:f8:a0:0e:37:32:7e:4f:1f:38:43:7b:87:
         7d:a7:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:53 2026 by rpki-client