Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32332d3234203d3e203435333035.roa
File:                     3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier:          0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=
Subject key identifier:   51:FD:DF:AF:C8:ED:2A:38:69:9F:C8:34:05:9C:5D:0B:4A:51:4E:03
Certificate issuer:       /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4
Certificate serial:       280C23CA15E776A2493BCBA9B84E466E0C3C45D7
Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32332d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 03:05:38 +0000
ROA not before:           Sun 03 May 2026 03:00:38 +0000
ROA not after:            Sun 02 May 2027 03:05:38 +0000
asID:                     45305
IP address blocks:        103.51.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl
                          rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0c:23:ca:15:e7:76:a2:49:3b:cb:a9:b8:4e:46:6e:0c:3c:45:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4
        Validity
            Not Before: May  3 03:00:38 2026 GMT
            Not After : May  2 03:05:38 2027 GMT
        Subject: CN=51FDDFAFC8ED2A38699FC834059C5D0B4A514E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7d:57:3f:de:3f:51:1b:4d:13:14:ce:b6:83:
                    bf:15:c5:d2:05:41:d9:d4:ec:a9:33:22:89:44:64:
                    6b:81:60:89:c8:73:02:b5:74:43:78:bf:94:2b:95:
                    e0:79:fc:cc:9f:33:e3:b6:ac:61:1c:bd:34:93:54:
                    27:95:e6:41:98:6c:85:27:50:06:c3:ff:08:0a:84:
                    f2:ac:2f:b6:f2:86:97:c9:70:f3:36:1b:26:21:de:
                    a7:35:9d:bb:38:53:ff:41:0a:40:9f:d7:17:98:ff:
                    e4:7e:89:40:99:f1:1f:87:f0:d2:b0:60:c4:62:e0:
                    20:42:46:96:56:cb:bc:02:94:52:24:0e:ec:b9:f7:
                    f4:16:4b:84:d8:85:4c:13:5a:91:8d:fc:f5:ef:ec:
                    a4:90:c3:36:1b:8f:35:67:6e:b0:fd:a6:36:64:8b:
                    33:03:83:2a:6e:d3:d2:6f:c0:bb:b4:2b:35:d4:14:
                    56:71:6c:b0:11:69:fd:10:4b:21:e7:20:00:08:9b:
                    07:b5:de:58:d0:06:b7:20:4f:e5:8f:15:f4:f4:42:
                    c0:40:00:25:29:ba:6d:c4:e4:1d:1a:d7:cc:1a:49:
                    d2:da:5d:68:c5:5c:6d:cf:eb:8c:8e:48:30:86:92:
                    aa:9c:63:08:fb:91:ab:d1:bc:a2:be:1f:21:bc:1d:
                    dd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FD:DF:AF:C8:ED:2A:38:69:9F:C8:34:05:9C:5D:0B:4A:51:4E:03
            X509v3 Authority Key Identifier:
                keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32332d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:e1:44:7d:01:e2:af:c9:b0:b6:71:25:ad:00:a6:bb:58:5a:
         98:9f:e2:c1:17:66:2e:73:0c:dd:14:0b:17:5f:ee:fd:1f:70:
         67:66:97:a8:25:b6:e9:da:fc:59:e9:37:14:89:36:16:7e:98:
         96:e3:28:f4:c1:52:ee:f1:a0:ea:c0:62:cf:4d:82:ea:32:8a:
         69:06:c7:ba:3f:e3:93:c1:c2:d8:ef:d4:4c:1b:59:61:79:00:
         1d:d9:47:0c:d3:41:ba:b8:41:64:68:2a:70:4d:ae:c5:c5:16:
         3c:a3:c3:e9:c1:91:f6:51:e9:35:9c:dc:9a:88:20:37:c1:56:
         93:75:9f:80:3c:4b:c1:b2:db:e6:d2:9f:fa:6f:ba:72:f4:b8:
         5d:c4:02:b3:e0:0b:0e:97:fc:d4:03:d4:62:c0:71:a4:4e:34:
         83:30:8a:e4:95:7c:0e:5e:c3:ab:dd:a3:c6:b4:15:d1:a1:e3:
         cc:e8:d0:a1:a8:b9:14:b9:73:81:19:e1:1c:f2:cc:dd:60:3e:
         7b:ef:91:19:46:a2:26:a3:8b:c1:ee:d6:25:ba:b2:46:d1:9b:
         a4:c0:b1:1e:c7:f7:29:91:74:d2:52:d6:5a:e9:c3:e3:66:aa:
         8b:57:78:97:03:8d:40:b3:8d:42:e4:e1:f8:9e:0f:e9:10:a5:
         88:47:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:48 2026 by rpki-client