Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35392e302f32342d3234203d3e203436303532.roa
File:                     3130332e32342e35392e302f32342d3234203d3e203436303532.roa (raw, json)
Hash identifier:          zFIO9wiF748rHmRcjoZ1ZZ07oJftCfa8w4TwQheX8tM=
Subject key identifier:   ED:1D:D9:C7:6E:02:B3:D7:F1:BF:E4:39:FB:02:2D:67:45:4F:6D:B5
Certificate issuer:       /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F
Certificate serial:       34A06D5924295B3008ADC55CD94B3F9027E0AE1A
Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35392e302f32342d3234203d3e203436303532.roa
Signing time:             Sun 03 May 2026 03:02:30 +0000
ROA not before:           Sun 03 May 2026 02:57:30 +0000
ROA not after:            Sun 02 May 2027 03:02:30 +0000
asID:                     46052
IP address blocks:        103.24.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl
                          rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a0:6d:59:24:29:5b:30:08:ad:c5:5c:d9:4b:3f:90:27:e0:ae:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F
        Validity
            Not Before: May  3 02:57:30 2026 GMT
            Not After : May  2 03:02:30 2027 GMT
        Subject: CN=ED1DD9C76E02B3D7F1BFE439FB022D67454F6DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8a:19:ff:f3:bf:3b:d3:cf:43:eb:e3:fb:2d:
                    6a:02:8c:c2:a9:c0:3b:13:d3:cb:1c:46:97:7d:e6:
                    f0:3d:ef:7a:f2:76:40:a3:e7:16:5f:af:f2:e8:fb:
                    99:70:fb:95:11:ec:5d:61:bd:f5:d3:e6:13:c0:9c:
                    c2:e7:04:97:46:43:b7:04:82:90:5b:1e:42:a3:f8:
                    f0:27:f6:ac:1d:38:2f:23:36:7e:a7:e5:7f:b3:8c:
                    e9:d6:69:76:49:5f:50:6e:2c:d0:74:d4:2e:8b:f8:
                    6a:74:ef:6b:7b:04:15:6b:9c:8b:a2:4e:56:01:ef:
                    ff:75:09:ea:29:5e:2b:c4:aa:a2:d6:7c:40:b8:29:
                    ff:32:a6:62:d2:2a:03:a9:0c:d9:53:21:d5:37:0d:
                    71:5b:6f:94:4c:0c:31:e1:70:16:b5:d7:31:05:1a:
                    1f:4e:93:93:33:fa:78:f9:cc:ad:43:98:b1:23:94:
                    e6:55:43:24:59:3b:c6:d2:2d:49:f6:fc:7b:33:9e:
                    20:1b:cb:c0:68:00:d3:a7:82:04:e8:f5:98:ac:c5:
                    d8:aa:6c:15:42:ab:83:3b:20:ee:8a:76:46:65:07:
                    45:3f:71:b3:0f:91:22:79:c6:18:df:6d:8a:23:b0:
                    7f:6c:f7:b2:04:2b:ce:ff:1e:7e:4d:9d:77:46:9d:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1D:D9:C7:6E:02:B3:D7:F1:BF:E4:39:FB:02:2D:67:45:4F:6D:B5
            X509v3 Authority Key Identifier:
                keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35392e302f32342d3234203d3e203436303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:71:21:64:e9:61:5f:67:6e:e7:9e:ac:c4:35:f6:27:0c:da:
         d4:f6:10:11:fd:98:07:88:bd:a8:f6:3f:89:88:97:c0:b2:9c:
         e4:35:d2:be:96:ed:19:8c:77:4f:3b:9c:57:14:69:7d:08:9d:
         47:b2:92:a6:14:df:eb:cb:c9:f6:68:04:73:bb:ea:ff:c5:42:
         d1:9d:05:e9:9b:94:50:10:8b:a5:89:c1:69:e4:52:fa:e5:65:
         16:ad:0d:ad:d5:a9:94:1c:5d:88:6d:ef:48:ce:3e:30:98:ac:
         5c:97:44:9b:fa:32:f4:8d:e5:53:a7:2d:da:01:51:73:f2:42:
         65:5b:4c:bc:31:d4:26:7b:e6:a1:6f:38:cc:2c:c1:6a:fe:03:
         e2:48:9d:7a:31:5c:00:f7:68:67:4e:84:a7:3e:8c:0e:6c:71:
         3c:52:6c:d3:ee:ee:60:2f:3c:60:c7:63:23:5c:51:6f:66:dd:
         ce:2e:39:d7:4b:df:ab:1f:fc:8b:d6:a9:21:23:fc:b7:1e:6a:
         81:e3:ae:f8:e1:4a:ba:86:fe:b6:b4:9d:06:d5:8c:bd:db:86:
         1a:20:65:4a:e4:97:71:41:be:36:f5:93:3c:c2:8d:a6:6b:09:
         71:f9:f3:7f:2a:f4:e1:ef:79:fa:f6:81:9c:54:ac:61:ef:f6:
         94:f7:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:56:43 2026 by rpki-client