Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32392e302f32342d3234203d3e20313530343837.roa
File:                     3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (raw, json)
Hash identifier:          zDvSDZMoY6Znb5y3IJOyYf9v6rjB8P6HkgrYk/e4IOY=
Subject key identifier:   5E:25:37:63:D2:A6:62:CE:98:F1:C5:84:6A:F8:ED:C8:12:9D:CA:6D
Certificate issuer:       /CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C
Certificate serial:       2FF32FECE62B24B108C4C7D1B09F7E3B1CAFBFF4
Authority key identifier: B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32392e302f32342d3234203d3e20313530343837.roa
Signing time:             Sun 03 May 2026 03:13:22 +0000
ROA not before:           Sun 03 May 2026 03:08:22 +0000
ROA not after:            Sun 02 May 2027 03:13:22 +0000
asID:                     150487
IP address blocks:        103.55.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl
                          rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f3:2f:ec:e6:2b:24:b1:08:c4:c7:d1:b0:9f:7e:3b:1c:af:bf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C
        Validity
            Not Before: May  3 03:08:22 2026 GMT
            Not After : May  2 03:13:22 2027 GMT
        Subject: CN=5E253763D2A662CE98F1C5846AF8EDC8129DCA6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9e:f2:cc:db:c0:88:52:45:fb:fb:71:da:fe:
                    bb:da:92:0d:f3:47:83:98:72:1e:9b:1f:f3:7f:6e:
                    d5:97:96:68:18:ea:a7:1d:1f:da:c9:fc:a0:6e:e3:
                    0d:9b:bf:99:ad:aa:32:75:d4:89:54:66:51:73:de:
                    09:3a:ec:f6:9f:b0:29:5b:20:99:c3:c7:dd:f9:7c:
                    98:60:5e:50:4a:0c:ae:29:69:db:fd:b0:11:b6:0c:
                    b1:fc:73:34:9d:45:a2:42:97:b0:bb:3e:4d:d6:d7:
                    0b:a5:00:e0:14:ca:f9:ee:bb:6b:84:95:e3:0b:ef:
                    f8:f8:37:39:2c:70:fd:bd:36:0c:eb:27:43:c6:e4:
                    e1:d3:64:c5:28:4c:22:92:38:db:65:e7:3d:22:25:
                    61:e5:65:47:59:a8:b5:c4:70:e9:9b:26:be:be:52:
                    2c:60:64:35:a3:a1:ec:b3:90:3e:83:3a:5b:10:f2:
                    46:6d:a6:a4:0e:b9:aa:6b:db:ce:ab:16:b3:61:69:
                    4d:93:22:03:23:2c:bb:cc:14:fd:bd:14:72:34:9e:
                    a8:77:63:6c:ec:bf:13:15:fc:99:b7:ca:8e:68:b6:
                    fa:9a:0c:f9:17:c6:91:fb:35:df:83:a7:e7:61:04:
                    e9:46:00:04:89:c5:55:7b:e7:1d:38:98:bf:59:90:
                    a6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:25:37:63:D2:A6:62:CE:98:F1:C5:84:6A:F8:ED:C8:12:9D:CA:6D
            X509v3 Authority Key Identifier:
                keyid:B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32392e302f32342d3234203d3e20313530343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:4b:fb:72:a0:72:ca:53:4a:75:f8:6e:60:14:c2:87:de:47:
         65:90:62:59:64:e8:a5:54:88:24:42:6f:54:0f:fd:8d:df:23:
         d2:3a:97:aa:85:74:1c:b2:d2:c3:ea:cf:fe:d9:53:9d:94:eb:
         fa:8c:91:60:92:3e:eb:81:36:a9:76:ff:e6:0c:46:ec:60:3c:
         38:37:8a:a5:ec:65:1c:1b:7b:66:bf:6d:59:1b:7d:8a:d0:f5:
         5e:b4:23:bc:25:90:11:27:3f:eb:bd:3d:2a:3a:7c:e4:2d:3b:
         a4:fb:d9:f1:d9:68:15:fb:cc:34:60:f1:b7:a6:47:d3:3e:98:
         a5:d7:aa:b6:d1:86:e8:b4:32:7d:08:28:64:c4:48:99:60:59:
         1d:9a:44:ea:ac:3b:e9:4f:de:12:29:73:03:89:78:b3:65:a2:
         1a:08:9f:1b:9d:73:25:65:8f:3b:b0:70:a2:b4:71:32:71:f1:
         14:d6:d9:aa:19:e5:57:95:c9:6a:df:33:8f:0c:b1:89:be:85:
         ac:11:31:32:59:ec:21:81:f6:dd:da:05:6d:80:e7:f3:10:fe:
         a5:c9:86:c9:b7:4c:31:bc:ec:de:95:c5:11:87:25:21:e4:06:
         55:98:5a:2b:52:c5:dc:11:63:11:39:2d:48:01:44:e1:c3:c5:
         7c:d3:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:51 2026 by rpki-client