Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa
File:                     3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (raw, json)
Hash identifier:          33LnlHX83Q2q59r6fCI9rPsueF6un1klMkDVi2WEctI=
Subject key identifier:   21:1D:D6:3A:2B:10:37:3A:22:81:65:89:0E:1F:D3:B3:4C:F3:33:67
Certificate issuer:       /CN=50B9458E73F930C6E4F38DC3931E6B27983D17D4
Certificate serial:       4CDC9034DF4530C90E03337D5908FD091563D5FB
Authority key identifier: 50:B9:45:8E:73:F9:30:C6:E4:F3:8D:C3:93:1E:6B:27:98:3D:17:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50B9458E73F930C6E4F38DC3931E6B27983D17D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa
Signing time:             Sun 03 May 2026 03:12:33 +0000
ROA not before:           Sun 03 May 2026 03:07:33 +0000
ROA not after:            Sun 02 May 2027 03:12:33 +0000
asID:                     59147
IP address blocks:        103.252.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/50B9458E73F930C6E4F38DC3931E6B27983D17D4.crl
                          rsync://rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/50B9458E73F930C6E4F38DC3931E6B27983D17D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50B9458E73F930C6E4F38DC3931E6B27983D17D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:dc:90:34:df:45:30:c9:0e:03:33:7d:59:08:fd:09:15:63:d5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50B9458E73F930C6E4F38DC3931E6B27983D17D4
        Validity
            Not Before: May  3 03:07:33 2026 GMT
            Not After : May  2 03:12:33 2027 GMT
        Subject: CN=211DD63A2B10373A228165890E1FD3B34CF33367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:47:95:30:ae:4a:a6:f6:62:bb:e3:df:04:
                    19:0c:2d:2b:41:79:51:fd:30:9a:ca:ad:81:7c:34:
                    27:69:b0:6e:e7:32:10:8c:aa:d7:ec:38:0a:aa:b2:
                    39:8d:3a:19:1e:e2:82:9c:97:2d:2b:84:f4:51:d3:
                    cf:80:39:78:06:8a:ed:c7:2e:59:39:b9:0b:27:f3:
                    83:e0:db:af:0a:f6:8f:74:a2:02:64:ba:b3:6c:dc:
                    72:5d:6d:4f:9b:c4:1a:22:1b:d6:e1:05:78:01:ce:
                    b8:b9:56:6e:5f:50:8d:4e:1c:df:7d:bf:df:f1:98:
                    e0:2c:d2:29:53:e5:78:3c:58:56:8f:91:73:a4:29:
                    8d:4f:4d:1c:73:cc:ed:0e:43:2d:93:27:2a:e1:fc:
                    33:2e:43:57:79:9a:46:33:ac:27:a0:79:fb:56:a4:
                    ce:1b:ed:15:c4:7f:e4:6c:19:aa:4e:a8:18:53:38:
                    70:e7:c8:f5:cd:ad:6a:9d:48:a8:a8:26:95:6c:6f:
                    a4:4e:c8:a6:63:6d:4d:34:5b:a6:97:dd:51:b9:08:
                    d7:2d:89:5f:3a:b8:f2:8c:54:a2:5c:37:6f:5b:90:
                    98:bf:fc:06:ff:31:7e:13:ba:d0:f1:72:62:ef:56:
                    c0:c0:20:c6:20:1c:81:f8:cd:89:3c:14:cc:e3:a8:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:D6:3A:2B:10:37:3A:22:81:65:89:0E:1F:D3:B3:4C:F3:33:67
            X509v3 Authority Key Identifier:
                keyid:50:B9:45:8E:73:F9:30:C6:E4:F3:8D:C3:93:1E:6B:27:98:3D:17:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/50B9458E73F930C6E4F38DC3931E6B27983D17D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50B9458E73F930C6E4F38DC3931E6B27983D17D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:01:a7:7d:d2:f0:af:c1:18:05:5c:43:fd:98:50:28:41:c7:
         27:02:04:d8:e2:2d:31:6f:04:78:73:84:1d:dd:87:b3:e5:1a:
         91:fa:2f:c0:ed:a6:71:c7:2d:7a:c6:0a:a8:91:be:e5:73:9c:
         4c:bf:41:6c:b9:37:25:52:20:ca:ef:43:06:b6:c6:8c:23:87:
         03:64:57:9d:c7:41:a0:43:32:8e:b9:bc:50:5f:11:0b:ba:81:
         1e:bc:a6:a0:da:64:5b:b4:d0:07:57:46:e2:fe:a7:04:ff:0b:
         51:19:bb:03:36:ef:3a:bc:46:9e:a4:48:a7:22:33:9a:8f:2f:
         8a:c4:dc:b6:a9:2c:4b:d7:aa:0b:ca:1c:bd:13:f1:f4:0d:dc:
         fb:45:a0:ec:a2:62:7b:d1:76:40:d9:2f:18:ff:c5:a7:bf:a0:
         80:38:46:2c:d5:a7:85:56:46:6c:37:ce:82:5b:d9:86:3c:bd:
         2a:da:a9:4f:a3:14:84:f0:0f:be:d0:6c:9a:cd:2d:b6:bd:69:
         0b:7f:74:7e:c7:3d:40:02:c8:e6:19:d6:e0:d0:9c:24:20:56:
         3e:5b:5b:07:93:90:86:b8:b3:ab:b1:93:91:35:34:f9:22:15:
         91:fb:3d:04:d9:60:9d:6a:88:f3:45:12:fe:a3:35:bb:64:98:
         29:9f:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:18 2026 by rpki-client