Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa
File:                     3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (raw, json)
Hash identifier:          BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=
Subject key identifier:   0A:37:A3:30:AD:61:CF:E2:17:FD:FD:61:C0:66:BE:B2:88:6B:40:5A
Certificate issuer:       /CN=CD845730E45E4D531071D97C1EDC23DA378D662F
Certificate serial:       4038989E455BEF9FD8712BD21C63112237AC0205
Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa
Signing time:             Sun 03 May 2026 03:08:13 +0000
ROA not before:           Sun 03 May 2026 03:03:13 +0000
ROA not after:            Sun 02 May 2027 03:08:13 +0000
asID:                     137349
IP address blocks:        103.114.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl
                          rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:38:98:9e:45:5b:ef:9f:d8:71:2b:d2:1c:63:11:22:37:ac:02:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F
        Validity
            Not Before: May  3 03:03:13 2026 GMT
            Not After : May  2 03:08:13 2027 GMT
        Subject: CN=0A37A330AD61CFE217FDFD61C066BEB2886B405A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:9c:fe:f4:14:8a:38:f7:f6:36:85:c7:99:
                    b3:e9:0b:e9:55:4c:f9:fc:dd:82:e0:1f:77:f4:b4:
                    88:36:2a:81:13:bd:91:bc:94:8d:25:b8:ee:72:06:
                    38:a5:6c:aa:ef:00:c4:db:e3:77:f1:b0:71:bc:6d:
                    79:a1:75:52:a7:39:74:b0:7f:04:91:c8:c4:27:9e:
                    72:df:87:e9:fb:c1:f3:6c:76:e6:34:8a:3a:22:ed:
                    01:b1:1a:32:c3:3a:db:31:3a:48:8d:2a:47:83:0f:
                    3e:50:b6:a6:26:04:09:9c:47:c6:f4:c6:41:bd:a6:
                    97:19:ca:c7:15:6d:e8:22:ab:f9:6e:a4:c6:11:58:
                    35:15:de:6a:d7:e7:a0:22:b9:56:19:07:dc:4e:97:
                    c8:c0:27:e6:5d:93:5e:17:60:bf:b4:d1:10:f5:30:
                    40:53:8b:e9:77:e8:3f:24:63:db:e5:34:0f:cc:38:
                    e1:81:ac:a2:c4:cb:a6:dc:f3:30:ba:9d:56:9f:6b:
                    ed:fa:27:f4:c9:01:a1:83:59:d0:9d:eb:6d:f2:f1:
                    97:ba:d5:98:3a:c1:cc:c0:74:5b:e9:d9:dc:47:bb:
                    6b:d1:6e:90:88:48:ed:21:53:f3:d0:55:32:cc:18:
                    6a:6c:b7:3a:bd:ca:fc:aa:73:6e:20:a3:cf:ca:27:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:37:A3:30:AD:61:CF:E2:17:FD:FD:61:C0:66:BE:B2:88:6B:40:5A
            X509v3 Authority Key Identifier:
                keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:fa:a8:56:4a:dd:d0:47:74:76:ac:2f:ba:6c:c0:52:f4:6e:
         23:72:b5:fd:f5:f2:da:b0:66:2a:f8:5c:2f:30:90:ae:c9:ab:
         18:ab:03:c0:80:d1:04:3f:58:cc:f3:7a:a7:a0:1e:eb:4d:a5:
         75:1c:43:15:c8:54:14:20:b7:1e:6a:80:3b:9b:22:7d:9e:1d:
         96:dc:3f:46:16:77:4f:39:db:5d:04:cf:a8:ef:2f:8c:55:3e:
         55:17:07:87:a4:11:cc:86:80:6d:da:9c:53:a7:01:5f:8b:d5:
         18:f4:65:be:cf:90:a2:70:e6:8d:e7:8a:8e:d2:e2:64:db:b9:
         19:cf:31:e4:5e:94:8e:20:79:47:a6:ec:e7:f5:3a:1f:5b:55:
         fe:7e:97:13:40:3d:58:0d:07:6c:16:0e:c4:27:9b:af:85:1e:
         89:4a:73:4d:65:b9:1e:e0:68:e3:3f:5e:c5:de:be:9a:bf:e0:
         64:3b:a1:66:93:cf:8d:6e:6f:28:fc:dc:07:05:58:d6:b5:f2:
         b4:f4:61:b7:2d:36:60:60:35:58:29:d8:74:95:7f:b8:9f:17:
         5e:a1:df:d3:78:91:1a:73:6e:b5:58:53:85:a2:9b:dd:44:01:
         22:45:13:7d:ce:37:37:65:09:b1:aa:ad:c2:94:fc:2b:60:f4:
         12:85:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:05 2026 by rpki-client