Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32332d3234203d3e203436303233.roa
File:                     3130332e37352e35322e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier:          +abOsadKcb3LKEaA+RDkJMcVrO6kctlKFBtfIfD4x0g=
Subject key identifier:   BF:E9:BA:A0:C6:6C:E0:99:B7:2A:DF:9C:59:8E:2B:4C:96:29:01:05
Certificate issuer:       /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA
Certificate serial:       4049E96F4FC1601CC0A4053DEBF56D9E99D506BA
Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32332d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:01:38 +0000
ROA not before:           Sun 03 May 2026 02:56:38 +0000
ROA not after:            Sun 02 May 2027 03:01:38 +0000
asID:                     46023
IP address blocks:        103.75.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl
                          rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:49:e9:6f:4f:c1:60:1c:c0:a4:05:3d:eb:f5:6d:9e:99:d5:06:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA
        Validity
            Not Before: May  3 02:56:38 2026 GMT
            Not After : May  2 03:01:38 2027 GMT
        Subject: CN=BFE9BAA0C66CE099B72ADF9C598E2B4C96290105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:d0:f6:b6:66:a2:8c:73:ef:64:bd:b2:a0:
                    1a:41:eb:c1:4e:de:70:eb:00:ca:47:59:3a:fe:ab:
                    5c:40:bd:5f:81:23:3d:5d:5a:06:69:ae:ce:b4:6e:
                    b2:05:07:70:8a:7b:19:4b:39:ae:78:e5:df:e2:ec:
                    52:fd:62:c4:b3:d0:91:03:c1:23:2a:4f:1f:d3:7c:
                    2b:88:52:2c:79:59:0d:3b:3e:3d:d2:06:d0:74:36:
                    1c:2c:3d:43:d8:c2:87:c6:2e:02:16:1b:b2:60:fd:
                    b5:3f:2b:8d:51:57:93:58:ba:31:03:a4:7a:5e:d2:
                    33:e6:14:14:aa:3e:0c:32:b6:04:dd:36:38:a6:88:
                    cf:d9:df:19:2c:3d:70:13:51:12:a0:45:08:68:90:
                    47:20:dc:d7:5b:a4:74:6c:7c:bf:df:64:ae:3c:55:
                    5c:a9:43:b1:8f:d4:b0:d5:b8:81:57:a7:86:ad:98:
                    25:ca:b3:9f:92:75:a0:69:49:3b:90:be:64:18:11:
                    14:b2:37:2c:bd:2f:b6:78:fa:70:26:0e:27:96:77:
                    d2:80:38:87:e4:58:62:95:c2:05:cb:76:66:0e:ce:
                    80:9d:fc:db:63:7f:9b:06:36:fa:bc:81:41:8b:fd:
                    f9:3c:d2:00:54:d2:1d:44:fc:8b:57:48:24:0c:e9:
                    ff:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E9:BA:A0:C6:6C:E0:99:B7:2A:DF:9C:59:8E:2B:4C:96:29:01:05
            X509v3 Authority Key Identifier:
                keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32332d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:3c:74:78:56:b4:43:e7:98:10:fe:dc:7c:0c:09:49:c7:5e:
         80:6e:34:f9:2f:34:78:5b:93:fe:e9:a8:9d:85:c2:d0:ec:e5:
         69:35:a4:71:f6:09:bc:67:e4:d1:ad:da:b1:73:42:fa:9e:de:
         35:0e:3c:a7:f7:7f:15:6b:a5:0d:10:4e:10:1f:ae:41:82:4f:
         bc:58:83:bc:bd:fa:31:6f:42:ff:5c:64:50:33:c7:bf:27:7d:
         6d:ef:be:c5:67:b9:8a:da:b4:a6:c4:6e:ba:cf:c0:7e:ac:bd:
         8e:d1:21:86:b7:82:1d:24:cd:0f:0d:55:35:bb:bc:c6:04:41:
         45:ec:ba:33:bc:fd:09:3a:23:51:ca:46:f4:d5:28:0a:33:c6:
         b5:a5:1c:1a:4a:b1:1c:08:e8:a0:66:b3:55:55:4d:0e:35:3b:
         c2:f4:f1:51:9a:37:ed:fc:a9:e7:43:fb:2d:4b:55:0c:de:bf:
         c6:5b:ea:dc:a8:2b:19:a7:a7:56:15:c2:27:45:8f:ae:6e:60:
         fc:2b:97:0c:9a:b4:29:dc:fa:73:49:10:19:5f:09:b9:58:13:
         25:88:5f:a5:6a:54:f1:a4:ca:47:c7:1c:8c:55:65:e6:6e:ea:
         71:28:75:5c:47:48:fe:dd:81:f7:e1:ed:20:48:98:70:05:43:
         3e:ad:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:00 2026 by rpki-client