Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa
File:                     3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (raw, json)
Hash identifier:          xmvWaWfjNKDhF9wV2zyd95rOJuZaxI0jNJxaKNSrXSI=
Subject key identifier:   1F:A5:51:36:63:A3:FC:AF:29:36:43:80:61:D3:AB:0E:8C:BD:3A:71
Certificate issuer:       /CN=51F28FDA0EA4620C617F32218CB294E10169884C
Certificate serial:       594FDCA4B095083EDFFC70D48528E8E190DABDD5
Authority key identifier: 51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa
Signing time:             Sun 03 May 2026 03:06:58 +0000
ROA not before:           Sun 03 May 2026 03:01:58 +0000
ROA not after:            Sun 02 May 2027 03:06:58 +0000
asID:                     133799
IP address blocks:        103.42.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl
                          rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4f:dc:a4:b0:95:08:3e:df:fc:70:d4:85:28:e8:e1:90:da:bd:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F28FDA0EA4620C617F32218CB294E10169884C
        Validity
            Not Before: May  3 03:01:58 2026 GMT
            Not After : May  2 03:06:58 2027 GMT
        Subject: CN=1FA5513663A3FCAF2936438061D3AB0E8CBD3A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c8:85:eb:4b:78:35:48:41:4f:74:d2:8a:8c:
                    50:1c:1a:d6:41:32:f8:f9:a6:b3:e7:00:56:05:55:
                    1d:ab:a2:bd:79:c9:2f:17:26:53:5d:bd:05:b3:de:
                    93:37:86:c5:f1:f0:29:1d:62:99:07:78:dd:33:9c:
                    3f:63:1d:95:cb:17:16:e7:50:9e:e4:4f:cb:73:70:
                    8d:2b:a6:58:e8:23:bb:b7:fa:47:9e:6d:c8:1f:66:
                    d1:f2:9f:d5:9f:b5:f8:8f:d0:a7:04:6d:47:78:a3:
                    e4:d8:52:80:15:e5:c4:c6:2b:f5:f4:7c:37:09:ec:
                    2b:6d:01:0d:4d:a8:19:c6:aa:18:d2:b1:17:35:9f:
                    02:4c:3b:9b:30:82:1f:36:a5:7a:65:e9:10:13:de:
                    9f:73:8b:9a:a7:9e:07:ad:95:10:25:c9:2f:f1:13:
                    75:6d:27:4f:f4:70:df:01:43:a7:ae:b3:d7:8b:2d:
                    51:b6:13:ac:9b:88:3b:b3:4c:b5:77:48:3e:72:db:
                    bd:71:e6:96:a8:44:c2:2a:06:33:61:d0:f9:99:ae:
                    11:96:36:41:bf:2c:86:0a:85:01:d7:ae:09:ba:8e:
                    32:10:a4:4e:23:af:c7:1f:b4:8e:e2:e9:c7:d6:f3:
                    cb:21:9a:9a:05:c2:0d:db:08:be:87:2b:0a:59:95:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A5:51:36:63:A3:FC:AF:29:36:43:80:61:D3:AB:0E:8C:BD:3A:71
            X509v3 Authority Key Identifier:
                keyid:51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a5:09:05:b4:8a:6a:1d:9d:45:01:ab:94:4a:1d:38:86:da:
         aa:31:de:d0:54:74:6f:68:60:0e:a3:fa:a7:a8:a1:dc:42:fe:
         b2:0e:51:30:32:bc:cf:a9:38:b1:5b:0a:2c:ed:ab:20:5c:af:
         4b:18:90:24:39:b7:ff:b5:f2:f8:f8:02:17:7e:70:d0:28:ff:
         82:45:1c:15:9e:1e:53:29:70:f0:9c:f2:92:5b:ea:a9:18:b7:
         5c:00:67:8e:8f:02:aa:0c:8d:24:24:41:ab:a4:25:01:a2:40:
         24:5e:2f:c0:2b:f7:23:af:d4:ca:ba:53:70:a6:27:94:7a:9f:
         53:dd:32:ad:79:0e:b3:f3:e8:87:9e:a6:58:b0:93:93:2e:80:
         1a:2d:65:24:79:9a:a1:33:eb:0d:d7:1e:9a:59:13:48:7b:fc:
         79:9b:95:fd:fc:73:01:57:ac:18:9a:b3:59:7c:53:0f:e0:18:
         e8:77:d5:1f:ed:5b:7b:cf:f1:6f:68:96:db:2f:03:12:ce:c8:
         80:6e:36:58:69:2e:c5:90:5d:c0:de:5d:12:d7:1b:b3:82:5c:
         13:fe:ec:29:3b:73:2e:93:16:26:d8:68:fb:1d:fc:c2:a3:e4:
         82:58:02:f0:e7:cc:df:6f:77:6c:39:75:22:5e:11:7c:16:08:
         b8:35:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:17 2026 by rpki-client