Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa
File:                     3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (raw, json)
Hash identifier:          +HwPI5t9LV2JhVv1OMpumDZv5OfbCi5N5psEQEHPJ+A=
Subject key identifier:   0F:D9:26:D5:2B:CC:ED:F4:5C:FA:41:F5:2D:22:1B:82:EC:7C:47:06
Certificate issuer:       /CN=DA4C7EC09188922B406170208997DD586575FFB0
Certificate serial:       3320621990EF3C8DE7C52302773B06D8C108905A
Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa
Signing time:             Sun 03 May 2026 03:10:28 +0000
ROA not before:           Sun 03 May 2026 03:05:28 +0000
ROA not after:            Sun 02 May 2027 03:10:28 +0000
asID:                     150497
IP address blocks:        103.58.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl
                          rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:20:62:19:90:ef:3c:8d:e7:c5:23:02:77:3b:06:d8:c1:08:90:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0
        Validity
            Not Before: May  3 03:05:28 2026 GMT
            Not After : May  2 03:10:28 2027 GMT
        Subject: CN=0FD926D52BCCEDF45CFA41F52D221B82EC7C4706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:57:c8:f6:68:20:f6:93:74:00:8e:09:e7:
                    e7:ab:21:4b:54:5f:13:01:99:d0:2e:5f:d2:df:29:
                    c0:62:58:ab:3f:61:db:f2:bc:43:67:87:65:e6:e6:
                    4c:c5:4d:1a:1c:a8:1c:7e:05:7b:01:32:07:f9:5e:
                    0e:55:2c:3c:ab:1c:d0:b4:2a:fb:26:f3:fc:db:94:
                    40:28:38:bc:cd:62:b2:a2:4c:d8:fe:8a:8a:93:ae:
                    ef:26:32:73:a8:57:12:fe:22:f3:67:f9:e7:46:69:
                    e9:9b:5d:b1:d4:03:ed:e2:9c:96:1c:e4:02:9b:aa:
                    4b:7a:86:32:09:ad:d2:3d:06:d9:ac:54:cf:9e:c9:
                    98:2f:aa:00:b7:67:78:34:d3:dd:16:46:8b:d5:51:
                    3e:0b:a5:92:42:f2:83:62:26:d0:1b:c5:e8:d7:88:
                    5d:16:38:30:cb:7c:d3:b7:03:c4:52:1b:04:80:ef:
                    c9:85:31:24:5b:86:8a:19:45:e9:67:a2:95:a8:51:
                    b6:fb:6a:11:ca:5a:cd:2c:8c:f2:45:5d:3f:ad:3c:
                    aa:2b:bc:92:71:56:05:45:f3:0d:61:cf:6f:d3:3c:
                    8b:27:0e:e3:9b:93:d4:bb:0f:7c:04:3f:b7:c3:98:
                    48:0a:47:6a:d3:dc:ea:15:cd:0b:90:e2:62:95:a8:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D9:26:D5:2B:CC:ED:F4:5C:FA:41:F5:2D:22:1B:82:EC:7C:47:06
            X509v3 Authority Key Identifier:
                keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:22:dd:47:7c:d7:8c:df:56:a1:00:c5:af:44:8c:c9:23:ee:
         d1:09:a9:b9:82:c3:54:ee:c3:1c:3f:7e:e6:c9:74:e4:f7:57:
         c8:07:04:e6:6a:53:f2:c3:92:ed:5b:a1:4f:b1:68:c1:1f:1e:
         66:59:79:6b:08:84:47:aa:e1:e5:c8:cc:67:41:a3:7f:52:b1:
         c8:f2:9b:78:eb:79:97:74:ff:2e:58:d9:89:63:9a:b0:c9:ef:
         c1:d4:e5:4a:58:16:a8:76:9e:af:27:98:35:58:b5:1e:35:de:
         d4:27:ab:d4:d5:e1:e0:07:76:96:9d:2b:00:b5:8e:52:58:9e:
         d8:e8:d7:14:23:e5:67:68:b7:2c:6b:55:33:fc:58:7b:b8:29:
         ae:97:72:22:3a:af:1a:8a:57:da:3d:2f:1c:64:86:53:7b:f8:
         37:b2:d6:f5:34:ab:2c:02:bc:93:12:82:f9:eb:58:85:f7:58:
         95:8a:c5:09:0d:8d:b2:7d:ed:41:3d:23:24:c2:ed:8c:d8:88:
         ad:c2:99:4d:0c:d8:58:68:89:77:30:e8:51:e9:ee:0e:71:90:
         b9:f4:e2:9c:6a:27:d2:3f:2a:5d:55:68:54:3a:c0:05:89:ac:
         88:bc:25:1e:b5:98:ee:a1:2e:1a:28:9e:a2:4e:f5:e6:52:a3:
         bd:1d:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:29 2026 by rpki-client