Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa
File:                     3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (raw, json)
Hash identifier:          BXvqsO6iSfKRpGVTcA3lgegU5+BoEQFpp1XDGBFUqzU=
Subject key identifier:   E3:D5:EA:CC:4B:36:49:3B:C4:17:4D:43:70:55:09:B1:E5:F1:48:FF
Certificate issuer:       /CN=50B9458E73F930C6E4F38DC3931E6B27983D17D4
Certificate serial:       110285052EDDD0156129489E9EC066FADB26A4A2
Authority key identifier: 50:B9:45:8E:73:F9:30:C6:E4:F3:8D:C3:93:1E:6B:27:98:3D:17:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50B9458E73F930C6E4F38DC3931E6B27983D17D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa
Signing time:             Sun 03 May 2026 03:12:32 +0000
ROA not before:           Sun 03 May 2026 03:07:32 +0000
ROA not after:            Sun 02 May 2027 03:12:32 +0000
asID:                     59147
IP address blocks:        103.252.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/50B9458E73F930C6E4F38DC3931E6B27983D17D4.crl
                          rsync://rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/50B9458E73F930C6E4F38DC3931E6B27983D17D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50B9458E73F930C6E4F38DC3931E6B27983D17D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:02:85:05:2e:dd:d0:15:61:29:48:9e:9e:c0:66:fa:db:26:a4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50B9458E73F930C6E4F38DC3931E6B27983D17D4
        Validity
            Not Before: May  3 03:07:32 2026 GMT
            Not After : May  2 03:12:32 2027 GMT
        Subject: CN=E3D5EACC4B36493BC4174D43705509B1E5F148FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:53:c6:4a:ec:9b:05:da:c1:d0:de:53:1d:
                    7b:5d:10:be:f9:bd:01:b6:79:80:48:c1:06:2e:c9:
                    16:38:92:62:af:0c:a8:44:bb:02:b5:36:dc:d2:c9:
                    e5:d7:a1:b6:3d:fe:09:12:59:5b:99:41:1f:b5:3a:
                    15:b3:19:dd:99:a6:3a:a9:93:45:67:c9:a8:61:a7:
                    83:4a:50:9f:44:cb:2b:25:7d:d1:1a:6b:a8:84:cc:
                    cf:24:1d:38:7a:0c:3e:76:4d:63:b8:54:2d:e2:f1:
                    00:ca:95:b0:0b:ef:cc:b1:fb:b6:f5:da:5d:1d:7b:
                    4e:37:d8:57:d1:c7:a4:c5:ad:61:fa:0f:d1:a8:7a:
                    9b:be:d9:2f:cf:f3:3b:1d:9b:9f:fa:09:23:73:c7:
                    20:0b:35:25:c6:a0:05:3d:6e:db:c9:ff:4f:59:36:
                    36:8e:e0:7e:f3:e8:63:ca:60:7a:93:35:3a:53:10:
                    b5:0e:50:d9:56:02:d1:66:e8:4c:07:4b:3e:53:62:
                    14:12:f5:84:8b:a9:fb:47:87:25:dc:2c:16:57:e8:
                    22:0b:dc:e3:a6:13:dc:05:d6:85:97:d2:ab:b1:2d:
                    9d:2e:4e:55:56:35:c3:3c:b8:0b:48:a7:d0:43:09:
                    52:d5:e5:12:7a:e8:1c:b2:f2:9d:e8:da:39:d8:41:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D5:EA:CC:4B:36:49:3B:C4:17:4D:43:70:55:09:B1:E5:F1:48:FF
            X509v3 Authority Key Identifier:
                keyid:50:B9:45:8E:73:F9:30:C6:E4:F3:8D:C3:93:1E:6B:27:98:3D:17:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/50B9458E73F930C6E4F38DC3931E6B27983D17D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50B9458E73F930C6E4F38DC3931E6B27983D17D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:08:01:59:1c:a1:c7:26:65:2b:72:af:af:dc:1d:7e:cb:6a:
         03:30:92:a1:b0:62:7d:ae:c4:6e:32:82:34:d2:62:5a:d1:cf:
         8a:1b:6a:e1:91:a7:8d:78:3a:13:a4:54:8e:de:b3:c2:eb:bb:
         3c:9a:f2:f2:4d:cb:2b:c9:bd:e1:ec:92:55:77:e2:5b:5a:fe:
         0f:17:b7:97:2f:00:b4:cf:e9:2c:77:43:44:e4:8f:46:15:76:
         0f:48:1f:f8:f4:4c:42:b3:ed:3e:37:49:e7:c2:da:62:e3:11:
         db:1a:e8:6e:2d:1f:68:4a:ad:34:29:0d:ec:2b:76:32:64:79:
         c1:6f:8e:72:3a:65:7d:6d:a2:b5:e0:3f:f8:2f:10:12:c3:71:
         d9:16:b2:95:2f:95:8d:50:0c:a8:5e:32:7c:d3:c5:a5:1a:5a:
         f0:a4:91:50:1a:bf:07:c3:24:c5:b6:c1:14:21:53:aa:f2:0f:
         5e:8c:47:7b:ba:82:65:1f:e4:02:dd:51:f3:5c:b1:8b:1c:0f:
         4a:0e:6d:50:43:88:e6:46:85:54:84:85:2f:ab:d3:72:57:5f:
         5a:a8:88:d9:8d:2b:ed:98:60:c5:f9:61:78:91:6e:75:ba:ca:
         c1:68:ed:0f:e9:1d:f5:7d:f9:bc:15:15:5b:09:66:45:fa:49:
         0d:0f:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:32 2026 by rpki-client