Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa
File:                     3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (raw, json)
Hash identifier:          qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=
Subject key identifier:   40:7A:D9:42:65:35:75:55:DB:95:9F:FC:D8:A0:9D:EE:D5:D2:F3:03
Certificate issuer:       /CN=CD845730E45E4D531071D97C1EDC23DA378D662F
Certificate serial:       248881648944843BB9CD2B9857F03A6B01CC5D03
Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa
Signing time:             Sun 03 May 2026 03:08:13 +0000
ROA not before:           Sun 03 May 2026 03:03:13 +0000
ROA not after:            Sun 02 May 2027 03:08:13 +0000
asID:                     137349
IP address blocks:        103.114.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl
                          rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:88:81:64:89:44:84:3b:b9:cd:2b:98:57:f0:3a:6b:01:cc:5d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F
        Validity
            Not Before: May  3 03:03:13 2026 GMT
            Not After : May  2 03:08:13 2027 GMT
        Subject: CN=407AD94265357555DB959FFCD8A09DEED5D2F303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:80:6b:d3:37:c5:f3:e1:14:4f:49:40:5f:
                    ae:ba:74:a0:61:03:d4:ce:2d:f3:b0:e2:62:88:84:
                    2a:95:9b:da:14:03:3d:03:f4:24:59:74:47:ca:e7:
                    11:f1:17:fa:6f:60:38:77:56:bf:30:d5:90:ea:d4:
                    19:2c:26:0f:ac:91:f4:1d:db:c2:40:7d:04:7a:f4:
                    9b:e6:22:07:66:97:6b:c4:b5:fd:3b:42:53:08:22:
                    78:45:da:b8:9f:bb:01:39:bd:f2:d3:35:3b:2b:cc:
                    b5:b9:d1:36:15:34:96:d5:43:14:9c:d1:f4:ee:92:
                    f3:4c:c2:45:8e:dd:e4:e4:2f:f6:60:7a:16:8a:81:
                    7a:1f:c3:3d:bf:11:e7:55:4d:19:7b:01:04:49:04:
                    1c:23:20:58:cb:8b:96:50:92:e0:59:be:97:25:c2:
                    c6:3f:d6:bd:80:e8:4c:2f:20:bc:2a:e4:b9:25:c5:
                    27:eb:47:84:6a:15:fc:bb:e5:ee:c5:4e:c8:32:23:
                    b7:cf:a5:93:c1:7e:50:c3:22:8b:f9:be:3a:64:6f:
                    90:3b:09:96:94:38:67:b3:7b:a2:32:7e:18:ad:99:
                    00:2d:e2:40:c7:fb:fc:6f:df:b8:8f:3e:bf:e7:c1:
                    02:23:aa:65:e4:ab:70:94:e8:ad:b5:96:3b:97:b7:
                    9e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7A:D9:42:65:35:75:55:DB:95:9F:FC:D8:A0:9D:EE:D5:D2:F3:03
            X509v3 Authority Key Identifier:
                keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:74:05:fb:05:23:37:56:37:05:44:78:51:41:4d:68:3b:c5:
         41:d0:10:0b:02:9f:be:f4:5f:51:75:90:3e:e3:96:47:4a:58:
         6e:3c:44:1f:70:1b:76:a3:07:9e:46:81:07:77:56:b5:5c:a6:
         10:8f:5e:97:34:2e:9e:b3:c9:61:2c:ce:3e:10:fb:2f:ff:30:
         2e:9d:c4:ae:7f:90:de:27:de:c0:c9:25:01:60:c6:6c:a3:77:
         52:9d:41:d0:e4:38:9d:5d:87:54:ca:ca:5f:08:61:0f:76:c4:
         ae:49:9b:23:4a:4e:7f:0f:bd:91:10:0a:91:b8:15:55:17:73:
         1b:4c:bf:cf:b8:a8:bb:df:8f:35:97:b0:9c:8a:b2:62:d6:6e:
         18:6b:d4:55:24:c8:5b:3e:86:b0:36:ce:d5:58:a0:ee:b7:83:
         b6:08:63:2c:6a:e4:31:1d:47:96:e9:fe:74:63:7e:dd:07:19:
         8b:f6:a6:5c:a3:bf:1e:c8:ce:17:20:3a:c1:03:0b:6f:d4:50:
         46:92:95:1f:9b:ce:c6:b5:a4:e0:02:09:64:bf:58:91:24:ea:
         87:51:40:bf:5c:66:20:5a:3b:3d:1a:f9:06:af:38:65:d1:65:
         14:f3:42:ac:97:98:59:04:d6:24:94:51:6f:30:ef:93:61:2e:
         a3:40:e1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:42 2026 by rpki-client