Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa
File:                     3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=
Subject key identifier:   A7:62:25:4F:87:65:F2:D7:9E:F8:C5:FE:E2:0A:94:D3:47:67:0B:DB
Certificate issuer:       /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4
Certificate serial:       5AF835BCAC497E6484A93BEE423720486C56DE22
Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 03:05:38 +0000
ROA not before:           Sun 03 May 2026 03:00:38 +0000
ROA not after:            Sun 02 May 2027 03:05:38 +0000
asID:                     45305
IP address blocks:        103.51.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl
                          rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f8:35:bc:ac:49:7e:64:84:a9:3b:ee:42:37:20:48:6c:56:de:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4
        Validity
            Not Before: May  3 03:00:38 2026 GMT
            Not After : May  2 03:05:38 2027 GMT
        Subject: CN=A762254F8765F2D79EF8C5FEE20A94D347670BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:50:fe:3c:3d:74:1b:b8:6b:77:5b:b4:5e:
                    4c:60:c6:6f:d1:2e:2f:d0:b9:db:da:33:c2:98:d6:
                    97:d4:17:ce:b2:85:54:1c:72:ea:9b:9f:22:91:ed:
                    0a:a3:48:54:5e:26:b8:94:9c:4b:2c:de:cc:f3:6b:
                    0f:64:c4:dc:01:bd:66:b2:80:a2:94:2f:2c:bd:e1:
                    80:e1:05:e7:4b:1b:50:86:fb:c1:d9:76:dd:f0:26:
                    ca:5a:e6:72:1f:8d:2a:7a:9a:4a:54:3a:80:04:e0:
                    97:36:a9:17:46:2d:bf:14:88:b6:0b:78:c9:44:f7:
                    c8:b9:0b:65:97:77:89:4f:d3:33:7c:e0:13:f2:95:
                    e9:e4:16:e1:34:62:6c:af:a2:31:8c:de:f0:14:8c:
                    e9:97:47:d4:b2:44:fd:ec:29:ca:9f:b5:c5:3c:85:
                    59:bd:93:e7:46:9a:6a:ff:38:29:b1:e8:28:9f:01:
                    b0:8b:b9:9d:ac:25:7b:6d:6d:04:88:46:fe:9f:6d:
                    5c:15:dc:49:95:84:5c:be:d5:ed:a3:27:2e:81:4c:
                    b7:2e:53:99:ab:01:c5:72:62:69:27:51:0e:7d:5e:
                    86:10:e5:b3:ea:7a:79:11:7d:8f:37:fc:1e:78:7a:
                    33:0f:52:9e:d8:67:ce:c6:87:66:8c:f4:67:88:56:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:25:4F:87:65:F2:D7:9E:F8:C5:FE:E2:0A:94:D3:47:67:0B:DB
            X509v3 Authority Key Identifier:
                keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:21:29:2d:3e:56:86:4d:50:c3:6b:48:44:ba:78:3b:c2:15:
         bf:6a:c4:dc:ea:22:f3:18:11:5c:4b:f4:61:9d:96:50:ff:eb:
         07:48:22:46:e2:9e:2d:3a:4f:bf:f0:3d:2f:29:a1:0b:05:b7:
         1c:5e:ff:0c:8e:e6:d9:6c:74:ca:16:45:50:56:d0:99:d9:24:
         b6:6a:2b:b3:b4:5a:92:57:07:c8:0e:fd:c0:d0:7c:ff:42:fa:
         5b:51:bf:e3:f1:7d:c3:0a:6e:3a:3d:5d:f6:0c:c0:d8:f7:4b:
         da:d7:37:51:f6:2f:df:ee:19:83:61:fb:e0:fa:5a:63:10:aa:
         21:d6:77:8e:07:6c:6d:42:0f:22:54:5a:37:14:0f:12:f0:91:
         64:32:c3:c8:a3:a8:e0:14:58:f5:01:d3:8a:b4:d2:aa:0a:cd:
         c1:53:23:3c:32:a4:97:05:8f:1a:42:c0:bf:15:d3:3e:43:e9:
         03:5e:85:37:e6:75:64:d3:45:b4:15:56:e4:ff:c7:c0:db:89:
         fc:e5:db:f6:9a:86:49:3d:a4:96:11:e6:8b:78:46:47:ff:2a:
         02:2f:34:a6:db:90:21:15:39:5e:15:aa:dd:f0:94:23:6f:08:
         42:1d:ac:5f:5d:ec:4b:22:cf:d6:95:a4:e1:72:dd:53:0d:0e:
         9b:9e:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:17 2026 by rpki-client