Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa
File:                     3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (raw, json)
Hash identifier:          cwLPRSN2w6mZj3tlDvow1ecrXm+F+7b6N36wRKhpvIw=
Subject key identifier:   F6:48:2C:42:51:DB:E7:4A:05:5E:B6:36:57:51:2C:58:37:8D:C7:E9
Certificate issuer:       /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1
Certificate serial:       0354CFDB7DFF74C9AA042FDFAC9B7CF308E01A6D
Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa
Signing time:             Sun 03 May 2026 03:03:25 +0000
ROA not before:           Sun 03 May 2026 02:58:25 +0000
ROA not after:            Sun 02 May 2027 03:03:25 +0000
asID:                     151592
IP address blocks:        103.52.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl
                          rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:54:cf:db:7d:ff:74:c9:aa:04:2f:df:ac:9b:7c:f3:08:e0:1a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1
        Validity
            Not Before: May  3 02:58:25 2026 GMT
            Not After : May  2 03:03:25 2027 GMT
        Subject: CN=F6482C4251DBE74A055EB63657512C58378DC7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:68:3b:ca:03:4b:70:4a:87:61:52:41:a7:
                    c9:d2:47:b1:40:17:31:be:34:9b:34:f4:85:e5:bf:
                    75:81:00:68:a7:3d:e2:d8:e9:e4:c4:be:79:4e:c0:
                    60:81:4d:22:6b:0b:7b:49:2a:0b:99:d5:1f:1a:c2:
                    f9:4f:86:ea:0d:b3:23:c2:69:90:21:d0:ee:9c:71:
                    26:18:b5:09:a3:12:2f:36:0d:af:6b:2b:17:5a:f6:
                    4f:46:b8:be:88:01:fc:78:e0:57:4d:90:b5:9e:0a:
                    1a:f2:e4:a3:f2:b5:9a:14:3f:cf:b2:35:58:76:f2:
                    36:bc:62:7f:94:c9:f3:1c:6d:8f:a5:91:09:b9:f2:
                    c2:e8:00:86:65:b9:27:b0:4f:bc:59:9d:8d:ad:81:
                    ae:0d:a7:e8:fb:7f:0e:16:d3:b5:99:17:c5:9d:df:
                    ad:be:53:74:90:0d:27:9a:00:20:ce:54:b0:47:83:
                    c0:c0:07:29:7c:ac:d1:6d:f1:87:c0:6d:f4:59:49:
                    d9:e4:d7:42:41:34:f1:6a:7f:fe:5a:5a:6f:b9:13:
                    50:b0:7c:21:76:be:5d:a8:88:e0:78:af:8c:b1:a6:
                    36:42:61:b0:8e:f8:fb:a7:8f:bb:18:95:d4:fb:10:
                    27:50:33:44:33:c7:51:d3:56:5e:67:e6:31:2c:6f:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:48:2C:42:51:DB:E7:4A:05:5E:B6:36:57:51:2C:58:37:8D:C7:E9
            X509v3 Authority Key Identifier:
                keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:b0:90:d0:b5:e1:70:2b:64:24:5d:02:b3:3e:57:ef:46:1b:
         ec:32:22:76:18:44:b5:72:1b:4d:f9:d8:d6:bd:e6:4c:79:e9:
         d0:9e:3d:75:43:23:8c:fc:66:94:f5:a9:68:5f:71:6f:76:45:
         ba:04:79:cf:b9:e1:f7:59:c3:1e:64:3b:8b:2a:d6:20:e4:61:
         59:62:04:88:14:7c:bb:86:87:ea:7e:71:7c:d2:3d:33:4c:0a:
         98:6e:23:1e:ca:32:0b:ff:81:0a:41:8a:b8:bd:38:13:f5:e6:
         19:10:2f:b7:58:4b:42:0e:0b:6f:1d:fd:36:29:26:d3:94:ef:
         16:47:11:02:c3:86:b0:6f:c4:31:d2:ac:fc:d6:f5:22:14:cb:
         95:b1:05:4a:69:2a:33:8d:b0:81:13:5d:93:43:0a:68:53:89:
         f9:9a:00:35:58:9d:6b:93:8d:26:9a:37:57:06:97:61:8e:50:
         57:bc:5a:a9:d4:73:78:4f:b1:6a:c1:ba:f1:38:df:e4:9e:0e:
         53:66:bb:04:2b:5a:da:3d:08:79:88:e4:d8:ba:3c:d5:1a:0b:
         1f:90:12:5e:a1:1f:46:24:a7:8f:0f:09:a4:12:2e:26:f0:02:
         c1:c3:b1:f5:ba:75:70:6b:df:98:56:bd:29:0d:f3:08:05:89:
         5c:c8:19:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:48 2026 by rpki-client