Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa
File:                     3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (raw, json)
Hash identifier:          h90BkET+/WSsd4aMo6p6IL1g5zcgBmIrDGAfqtEac3U=
Subject key identifier:   DA:5C:B8:0D:6F:46:E3:38:0F:1A:A8:BF:F2:6E:F3:FC:5C:AB:C0:58
Certificate issuer:       /CN=51F28FDA0EA4620C617F32218CB294E10169884C
Certificate serial:       369FE00E248C7C180E87F8E315D28A590B11650F
Authority key identifier: 51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa
Signing time:             Sun 03 May 2026 03:07:01 +0000
ROA not before:           Sun 03 May 2026 03:02:01 +0000
ROA not after:            Sun 02 May 2027 03:07:01 +0000
asID:                     133799
IP address blocks:        103.42.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl
                          rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9f:e0:0e:24:8c:7c:18:0e:87:f8:e3:15:d2:8a:59:0b:11:65:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F28FDA0EA4620C617F32218CB294E10169884C
        Validity
            Not Before: May  3 03:02:01 2026 GMT
            Not After : May  2 03:07:01 2027 GMT
        Subject: CN=DA5CB80D6F46E3380F1AA8BFF26EF3FC5CABC058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:0a:e6:58:4e:2b:bc:8b:19:34:2e:e6:a8:
                    01:99:59:ee:f9:67:b7:dc:ef:5b:f1:bf:8e:5d:e9:
                    9f:10:78:48:e9:7d:41:45:4e:8f:3f:d3:b3:98:4c:
                    90:64:ef:3e:84:a8:f6:41:8e:f0:d4:e5:f6:95:4d:
                    6c:40:88:5a:b1:06:ce:40:bb:67:40:9a:2d:0e:c7:
                    e7:47:48:73:70:31:7c:c8:fb:95:04:75:2f:88:16:
                    74:64:a9:4f:67:c8:d4:e1:f8:4d:e7:89:57:f8:3b:
                    b6:63:d7:76:22:7c:33:71:09:93:62:e6:c3:14:be:
                    37:80:c0:4d:88:76:fa:e9:e4:42:82:53:3a:83:8a:
                    78:df:d0:5f:60:e8:5f:6c:b3:a3:b7:8c:41:7c:cf:
                    3a:50:9e:92:bf:6e:7f:9d:1c:29:5c:a9:73:4f:09:
                    96:01:65:44:2a:ac:6b:d9:17:63:6f:59:d6:18:ea:
                    c9:90:2e:7d:f6:bf:f4:a3:c4:9a:f0:ac:e3:48:7a:
                    85:47:2f:8d:b3:5a:8c:bb:b6:33:e1:c5:49:75:64:
                    4a:05:57:4b:22:f0:f3:e3:34:48:bd:51:4c:58:78:
                    43:79:34:63:ec:f9:7e:ee:c4:6e:dd:c6:19:b6:18:
                    6b:47:5c:3b:90:a1:e2:ad:9b:ba:2e:8e:a1:f9:08:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5C:B8:0D:6F:46:E3:38:0F:1A:A8:BF:F2:6E:F3:FC:5C:AB:C0:58
            X509v3 Authority Key Identifier:
                keyid:51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d9:b1:f2:f5:33:25:18:8e:a5:f0:7f:01:1a:e1:11:27:62:
         c5:a2:12:71:fc:69:01:e2:6e:20:dd:e6:da:7d:fe:d2:c9:1f:
         c4:f2:ec:1d:0c:e5:d6:1f:73:89:b8:df:34:c0:25:95:41:10:
         d3:5b:31:d3:83:50:dd:c5:c6:44:91:63:9a:ff:1c:26:a5:36:
         88:2b:8a:e4:b2:3b:43:50:b1:a3:05:54:79:ba:5a:29:aa:40:
         da:29:c7:3e:0c:94:3e:ef:3c:96:c5:1c:51:a4:6a:b5:5f:02:
         01:85:95:4b:aa:ed:18:cc:63:57:a8:f1:f1:63:af:15:55:2f:
         be:96:02:97:ae:4a:d2:d6:a6:f7:e1:6e:fb:00:ec:57:27:af:
         87:5e:35:4b:cf:f3:21:09:e2:97:7b:31:72:3c:69:33:31:0c:
         00:4f:0d:be:5c:83:2b:31:71:bd:b1:f8:97:5b:9e:43:f5:83:
         88:85:48:a6:70:38:6c:ac:87:57:ee:3e:e7:a6:13:e6:d2:e5:
         b8:e3:4b:4d:35:bd:2a:44:58:9b:2d:9e:90:8c:59:33:e9:77:
         22:44:63:35:71:99:68:4e:f5:cd:bf:31:e6:93:32:7b:b5:f4:
         c9:7b:4d:18:bc:14:3e:9c:03:ed:71:e8:78:7a:77:66:a0:91:
         74:a6:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:52 2026 by rpki-client