Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32342d3234203d3e203436303233.roa
File:                     3130332e37352e35322e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          bhTSyHeOO7MNF7IUduF/l9R7lDRw35+ZvVs7q9knSB8=
Subject key identifier:   0F:51:6B:92:AF:95:2B:77:99:2F:32:F9:A5:8B:66:B0:B3:E2:37:0C
Certificate issuer:       /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA
Certificate serial:       587EB56D432CFF5AE4339AF13D3294FA5836E9FC
Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32342d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:01:37 +0000
ROA not before:           Sun 03 May 2026 02:56:37 +0000
ROA not after:            Sun 02 May 2027 03:01:37 +0000
asID:                     46023
IP address blocks:        103.75.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl
                          rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7e:b5:6d:43:2c:ff:5a:e4:33:9a:f1:3d:32:94:fa:58:36:e9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA
        Validity
            Not Before: May  3 02:56:37 2026 GMT
            Not After : May  2 03:01:37 2027 GMT
        Subject: CN=0F516B92AF952B77992F32F9A58B66B0B3E2370C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:65:f5:3b:3a:1c:ba:24:7d:c0:09:7d:04:ca:
                    9b:99:f2:57:80:05:b9:20:c0:c2:a3:9f:cc:8b:e1:
                    86:bf:5a:a6:83:43:01:21:fe:0f:e4:84:2d:97:b6:
                    d8:2c:66:0d:26:92:35:27:47:15:b9:e7:33:89:27:
                    3a:a1:22:ec:34:a0:5f:65:29:98:b3:2a:16:1f:57:
                    5b:d1:22:a7:08:c3:54:ec:5a:f5:aa:2d:bd:f8:2b:
                    d7:c0:48:15:f2:eb:d3:db:79:32:5f:ce:b3:2d:62:
                    66:72:50:f3:2e:d9:27:e8:38:c5:fd:94:d4:41:6c:
                    9b:c1:9b:98:22:73:f6:99:d7:97:99:d7:13:ca:4d:
                    64:76:00:b8:16:f4:02:16:5b:67:e0:d4:c1:90:4f:
                    30:9e:8c:c5:74:22:53:3d:05:41:39:b4:07:97:0c:
                    8d:e1:05:e7:6a:e6:07:1e:9e:3b:63:07:01:db:05:
                    b3:d6:9b:6e:61:d9:2e:0c:96:2f:8c:bc:06:27:ef:
                    de:1e:58:f8:db:6e:40:6a:71:48:0b:1b:0b:41:74:
                    f8:23:24:d6:30:8a:92:72:26:9c:71:9e:c0:27:c0:
                    aa:e3:fd:8f:11:c2:e7:f7:9c:75:03:b0:b4:a6:cf:
                    d6:ff:7c:72:b5:25:42:aa:a8:55:69:68:30:12:df:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:51:6B:92:AF:95:2B:77:99:2F:32:F9:A5:8B:66:B0:B3:E2:37:0C
            X509v3 Authority Key Identifier:
                keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:03:53:2d:d9:06:9d:7d:83:42:2e:a1:1b:04:7a:ea:80:9c:
         9d:14:c0:cc:c9:7a:34:63:fd:10:c2:0f:8f:7e:60:1d:b2:fb:
         65:82:7d:4f:c4:a9:f6:dc:a8:82:e4:db:36:b8:11:7d:6d:3e:
         d2:6c:51:5e:8e:4b:de:c8:1a:84:ae:f4:fa:04:fa:19:14:a3:
         ea:f4:ab:84:07:10:68:5e:b2:1c:c6:ad:a9:55:94:ab:ea:27:
         64:7f:c7:89:f4:d0:2e:a5:36:65:ea:b3:1c:33:c5:92:a7:59:
         53:81:70:1a:ca:ea:8a:ef:7a:92:32:60:b7:e6:13:36:0e:ff:
         f4:e9:45:83:36:aa:18:f0:e8:65:97:f0:d4:74:09:30:5b:3d:
         7d:29:51:45:13:41:ef:34:fd:30:cb:65:61:fa:25:06:17:57:
         f3:12:61:24:c2:26:9d:cc:5d:aa:a1:28:72:ff:ed:3d:bf:2a:
         45:7d:f1:94:89:7b:ee:43:8c:2d:35:ee:15:34:2f:65:e1:61:
         4e:07:f8:18:d4:01:ab:86:55:cb:b9:0b:e2:37:e5:de:f5:0c:
         ce:03:27:68:cd:5f:dd:7d:88:8c:68:f4:35:ca:f9:52:32:86:
         e1:ec:0f:80:09:e4:bc:6d:ee:fd:ab:7d:34:87:a2:12:2d:7d:
         c6:02:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:34 2026 by rpki-client