Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa
File:                     3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (raw, json)
Hash identifier:          //BNbGEHF8EA4DRII1hDL8v8FS3Stqlu+4PQCjhVKuc=
Subject key identifier:   7E:27:32:F9:8B:83:41:F3:F5:87:94:33:49:0E:F1:B5:29:7E:F6:84
Certificate issuer:       /CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519
Certificate serial:       473CCECC537CDD62F552700AF8BA98E50FF2BA31
Authority key identifier: 58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa
Signing time:             Sun 03 May 2026 03:11:09 +0000
ROA not before:           Sun 03 May 2026 03:06:09 +0000
ROA not after:            Sun 02 May 2027 03:11:09 +0000
asID:                     150927
IP address blocks:        103.209.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl
                          rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3c:ce:cc:53:7c:dd:62:f5:52:70:0a:f8:ba:98:e5:0f:f2:ba:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519
        Validity
            Not Before: May  3 03:06:09 2026 GMT
            Not After : May  2 03:11:09 2027 GMT
        Subject: CN=7E2732F98B8341F3F5879433490EF1B5297EF684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:0e:37:fe:32:52:a2:a9:d3:7b:17:82:57:
                    36:e3:40:e3:41:f5:c8:54:e2:a1:ac:f9:b6:68:da:
                    01:0e:d7:69:fd:72:51:df:19:ae:9b:2f:4b:02:1a:
                    95:87:ad:1c:35:b8:0e:32:3c:5c:a3:2f:2c:bc:cf:
                    86:24:5c:43:ef:84:dc:a6:b5:cd:5d:71:04:cb:84:
                    69:13:a9:d6:48:be:e7:af:33:46:d2:2a:86:8c:bf:
                    73:2b:5a:ec:22:fe:a7:f1:fd:ba:de:a2:a8:04:1e:
                    ee:42:21:61:ca:ae:a1:5b:17:42:de:04:fc:58:1a:
                    a1:18:b5:a2:a6:e1:a1:8d:3d:23:4e:db:5d:3c:ac:
                    f0:ad:a4:90:b0:c4:be:a7:d1:01:fe:5f:b9:9b:e7:
                    a8:6c:58:c6:00:56:30:c1:ce:3e:4b:f5:ce:70:c4:
                    7c:f1:de:5c:10:fa:a8:1a:30:d0:79:5e:6e:ff:d5:
                    a8:d9:12:ed:00:af:ee:53:1a:b9:87:18:f8:a0:0e:
                    fb:04:19:fd:85:f2:74:c8:3e:77:93:66:fd:7b:4f:
                    62:97:d7:d4:39:8e:8e:e5:94:05:cd:47:90:03:42:
                    ba:1f:ca:58:9d:5a:ae:b7:8d:f5:c1:7f:56:2b:b4:
                    61:4b:bb:8d:f0:cb:8d:9e:dc:22:92:3c:05:91:f2:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:27:32:F9:8B:83:41:F3:F5:87:94:33:49:0E:F1:B5:29:7E:F6:84
            X509v3 Authority Key Identifier:
                keyid:58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:8b:f1:17:21:d6:47:72:d8:16:8d:02:0e:25:6b:07:87:24:
         d1:3e:4b:3b:90:8d:ea:56:a6:bc:2d:ae:c1:af:7a:a8:75:2b:
         1f:81:55:b2:9f:24:43:6c:bc:47:e6:be:c7:15:80:61:97:30:
         4c:e0:97:f6:b2:a4:80:74:81:7b:ed:29:54:2e:8a:d8:06:57:
         55:f9:3b:4c:3a:bc:67:1f:c8:04:c6:4a:7f:c5:b1:fa:ef:e7:
         61:30:fe:fc:9c:1a:63:ff:60:4e:c8:4f:c1:cf:a5:cd:b3:23:
         44:15:4b:70:ba:90:a9:7b:af:4a:dd:db:6b:12:41:b6:e9:86:
         2b:93:67:b7:f1:a4:0e:01:c7:6b:85:bb:f6:2f:0a:a0:b3:1b:
         f0:c6:66:14:b6:d8:b9:81:b0:e7:8a:85:41:96:7d:5e:fe:26:
         ff:05:50:f8:18:ba:99:4f:d1:52:43:ad:f4:f8:03:89:89:c8:
         6b:59:f7:7f:10:17:61:1d:95:17:48:b5:ce:e4:37:ed:d9:03:
         ab:de:e2:41:19:c4:a3:45:85:4d:f0:bc:74:f1:de:5e:17:2f:
         91:2f:6d:fa:37:3b:e6:0c:4b:c5:3d:94:42:b4:50:81:fb:92:
         45:2f:66:68:65:d4:8c:dc:7f:66:ea:dc:1f:bb:16:94:ef:f4:
         fa:ad:c4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:55 2026 by rpki-client