Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32322d3234203d3e203436303233.roa
File:                     3130332e37352e35322e302f32322d3234203d3e203436303233.roa (raw, json)
Hash identifier:          DJNypGuOoUSV7gRXOo1mgps8RVz8MOoHDOMqtLjLggE=
Subject key identifier:   52:FD:94:26:6D:A2:B2:BB:3D:83:12:D9:5E:B9:EF:68:B5:8C:E3:75
Certificate issuer:       /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA
Certificate serial:       7F0768DCE205EBF8FE730BD7CB706DFF2A1A0DCA
Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32322d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:01:38 +0000
ROA not before:           Sun 03 May 2026 02:56:38 +0000
ROA not after:            Sun 02 May 2027 03:01:38 +0000
asID:                     46023
IP address blocks:        103.75.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl
                          rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:07:68:dc:e2:05:eb:f8:fe:73:0b:d7:cb:70:6d:ff:2a:1a:0d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA
        Validity
            Not Before: May  3 02:56:38 2026 GMT
            Not After : May  2 03:01:38 2027 GMT
        Subject: CN=52FD94266DA2B2BB3D8312D95EB9EF68B58CE375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:3e:5e:33:79:4a:e3:c9:9d:4e:87:d1:6f:
                    c1:7a:15:75:0e:2e:83:6e:14:96:69:ae:be:40:6d:
                    2d:f9:fa:1d:78:ce:ae:c4:7a:78:e3:a6:17:94:35:
                    a4:de:9d:60:bf:fc:2b:07:3a:57:01:70:6e:17:d4:
                    e6:c5:89:d0:2e:d4:64:88:40:c4:3a:63:2a:a8:9e:
                    5f:c5:d1:0f:aa:28:8a:cc:7e:29:09:9f:9d:57:3e:
                    e9:be:3b:fb:61:81:94:79:f1:62:1e:a7:76:31:ee:
                    a3:6b:39:f7:93:01:f7:12:81:be:e7:a0:dd:e4:8f:
                    07:f4:8f:f0:90:24:71:1c:4c:74:cc:66:bd:22:f1:
                    46:28:cf:9f:b5:44:db:41:14:bc:4e:d4:9a:76:e8:
                    b7:b7:dc:40:8c:f5:78:ed:71:82:b6:7d:ee:3c:10:
                    4d:1e:1d:bb:90:33:1d:7e:1e:55:01:90:0a:7c:de:
                    ce:7b:23:98:6e:75:10:7c:97:e6:a9:24:b6:fa:56:
                    54:98:a7:ff:77:c6:6b:8d:8a:a1:c1:27:22:6b:cd:
                    40:8a:75:1a:01:d0:63:f8:dd:87:ba:8c:7e:8f:56:
                    2a:b9:43:fb:c5:bc:4d:fe:0a:6b:4f:f3:fc:22:0a:
                    f9:88:aa:de:36:1e:86:76:0d:ea:79:66:f3:7a:1a:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FD:94:26:6D:A2:B2:BB:3D:83:12:D9:5E:B9:EF:68:B5:8C:E3:75
            X509v3 Authority Key Identifier:
                keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32322d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:db:ad:43:f9:3e:7c:c0:27:58:9a:64:c9:78:2c:09:1e:06:
         d4:33:17:7d:ac:4e:f9:a3:df:27:ac:b2:da:f7:3f:73:2e:9f:
         c0:16:d7:e4:39:99:bf:f7:71:0e:22:80:18:0d:56:9a:86:b0:
         53:ba:39:c6:89:b4:b2:ef:c2:82:14:b6:2a:8a:f7:f8:5a:56:
         f2:88:ea:43:20:49:6f:84:96:9a:e7:02:af:d7:7f:fc:b3:92:
         67:b4:3d:3b:36:1b:6e:26:d3:e8:14:25:51:0c:5e:71:3c:03:
         2a:58:19:af:a0:36:3d:1b:f9:97:d2:55:6c:e7:46:27:f8:65:
         cc:d6:79:6f:24:b0:8a:96:94:ca:4e:89:90:9b:ca:bb:2c:61:
         7c:19:a8:ea:c1:aa:51:de:76:9d:4b:db:28:02:8d:8e:47:d4:
         d6:d9:14:87:af:a9:d7:f3:ea:04:1f:07:48:52:8a:fd:85:89:
         ee:a7:11:7a:65:ae:10:d2:72:ae:6d:57:69:ee:21:1d:75:eb:
         a6:da:52:f1:61:76:0c:05:f7:64:6e:2f:2e:c4:87:2b:25:c7:
         19:70:c6:f6:41:69:2a:fb:f9:53:8d:bd:f1:b7:0b:4c:3a:58:
         1c:c8:6f:6e:59:35:be:10:c6:6a:9c:e7:51:fa:97:a2:83:03:
         56:13:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:13 2026 by rpki-client