Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa
File:                     3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (raw, json)
Hash identifier:          Hg16O8uPy51QSxKbXAXDL032sGsKwGBDZ0pP5uc2vS0=
Subject key identifier:   FB:58:91:ED:82:0F:ED:B1:1F:D8:F0:90:1D:1F:BB:32:96:63:9E:12
Certificate issuer:       /CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
Certificate serial:       1DD5967BE348CFB5BB68FBC6AF4A54C25EBB4DDD
Authority key identifier: 54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa
Signing time:             Sun 03 May 2026 03:13:42 +0000
ROA not before:           Sun 03 May 2026 03:08:42 +0000
ROA not after:            Sun 02 May 2027 03:13:42 +0000
asID:                     138087
IP address blocks:        103.125.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl
                          rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d5:96:7b:e3:48:cf:b5:bb:68:fb:c6:af:4a:54:c2:5e:bb:4d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
        Validity
            Not Before: May  3 03:08:42 2026 GMT
            Not After : May  2 03:13:42 2027 GMT
        Subject: CN=FB5891ED820FEDB11FD8F0901D1FBB3296639E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:f8:87:bc:33:aa:1a:7d:11:f5:76:57:b1:
                    23:15:bf:72:ec:e9:3f:53:87:86:8d:1f:0e:54:ca:
                    ef:18:07:87:c0:a3:39:f5:4c:b1:a9:53:9a:b3:97:
                    7e:16:82:8c:23:a7:8d:25:56:94:46:2a:5b:c6:1c:
                    d9:0f:cf:90:c6:55:65:3e:e6:77:92:e4:04:48:a8:
                    69:8d:3f:8b:a1:bc:ec:70:4f:f0:df:5d:ba:48:13:
                    81:3f:a4:f4:4d:47:65:a5:fd:3e:9f:d3:79:b5:8e:
                    50:8d:0d:66:47:f0:d6:fd:79:4f:dc:3f:67:70:98:
                    0c:c5:8c:72:5a:63:7e:15:ce:b5:6d:e7:17:35:d6:
                    bf:a7:e0:9e:bb:2a:d3:8a:85:3a:9d:1a:c6:20:1f:
                    06:7d:2a:c3:3c:60:e1:c4:67:1c:99:cd:02:04:70:
                    39:b7:2f:4a:0e:41:7f:8f:0a:35:ff:f7:da:c1:93:
                    37:2e:a5:0a:20:54:aa:ee:f8:7b:ea:ea:46:d1:71:
                    08:82:9a:94:d9:b9:ec:43:fb:a8:bd:b2:d5:31:60:
                    3a:6d:bd:63:d1:3d:9a:33:27:b5:a5:52:08:60:53:
                    1d:36:cd:8d:fc:0f:49:e7:38:3c:89:ff:83:8b:bd:
                    79:25:15:2d:0e:80:84:e0:c8:eb:44:fb:70:ea:06:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:58:91:ED:82:0F:ED:B1:1F:D8:F0:90:1D:1F:BB:32:96:63:9E:12
            X509v3 Authority Key Identifier:
                keyid:54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:72:5d:9e:05:6a:91:95:85:dc:24:e5:ee:76:42:a1:14:66:
         49:2b:ad:5a:ee:a4:d6:5f:40:e9:e0:9b:8d:9d:c5:1b:7f:aa:
         a4:3d:32:cc:91:49:0c:26:07:af:de:7c:39:45:46:81:d9:17:
         08:f2:14:8f:ba:cd:da:36:9b:d4:52:b9:cd:c8:08:6e:46:b3:
         74:a0:83:c3:f8:62:5c:7c:6a:7c:f0:f4:04:ac:4c:b1:fa:0a:
         29:be:cb:1e:be:a1:3e:90:df:77:02:07:05:88:67:29:f1:d4:
         bc:da:dd:21:b1:27:53:28:b6:74:6f:99:9f:af:ad:f5:36:4b:
         83:b1:b5:7b:89:53:69:9c:9e:ab:ee:67:e0:93:a5:1f:b9:6f:
         54:22:73:e6:ce:6e:44:e7:f8:56:dd:4f:82:43:aa:51:00:68:
         2a:50:f2:f2:86:f7:20:19:0e:de:f3:fa:2a:c8:a3:8d:dd:bc:
         e0:25:fd:b4:a0:33:e1:f4:f5:da:a8:c5:02:e8:e4:a5:77:25:
         42:d0:3f:fa:45:87:46:3b:b7:e2:38:4f:31:da:a3:ea:f0:16:
         62:08:b6:f5:cb:1d:3a:b2:29:18:af:3d:6e:0e:60:eb:64:9e:
         08:0a:9d:d8:cd:75:d9:cb:0d:e1:1e:57:89:a8:29:50:ca:ef:
         1e:d3:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:03 2026 by rpki-client