Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa
File:                     3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (raw, json)
Hash identifier:          QhszDQbWemrtI4HXUWkUHZ8wzdInKO4JyVKFbfV5NWE=
Subject key identifier:   5E:86:05:7E:FA:14:60:92:14:C3:42:C5:2C:D2:0F:18:F1:A2:4E:DE
Certificate issuer:       /CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
Certificate serial:       299759B35B7B5BF650F9CD74686EA18A66C2A55C
Authority key identifier: 54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa
Signing time:             Sun 03 May 2026 03:13:42 +0000
ROA not before:           Sun 03 May 2026 03:08:42 +0000
ROA not after:            Sun 02 May 2027 03:13:42 +0000
asID:                     138087
IP address blocks:        103.125.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl
                          rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:97:59:b3:5b:7b:5b:f6:50:f9:cd:74:68:6e:a1:8a:66:c2:a5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
        Validity
            Not Before: May  3 03:08:42 2026 GMT
            Not After : May  2 03:13:42 2027 GMT
        Subject: CN=5E86057EFA14609214C342C52CD20F18F1A24EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:55:71:25:2c:1a:21:97:8e:6f:df:96:3c:
                    16:51:4a:8a:60:c9:d0:b0:64:b2:85:16:1b:ae:3a:
                    02:23:e2:c2:b3:ff:d9:cc:bc:ce:68:d4:cc:c1:86:
                    16:16:bb:fc:5c:1c:f0:15:85:9e:d7:ac:37:12:12:
                    ea:7a:dc:ee:ba:0e:7a:17:8a:ad:52:39:8d:9c:93:
                    9b:9e:ff:34:c2:3c:9e:29:a8:ba:a3:34:c4:5e:b3:
                    c8:d3:f1:e3:02:65:f1:62:93:47:b8:e0:d4:b9:0a:
                    0e:93:99:ec:51:43:73:0d:45:cc:79:01:b8:b5:d4:
                    34:3c:f4:f4:a1:53:cc:d8:91:b9:c2:1c:ac:78:5e:
                    ac:51:e8:ec:e4:07:2d:98:52:d1:77:6d:4c:2f:59:
                    05:f1:46:6f:7b:e1:4a:03:81:6a:14:69:00:c4:91:
                    33:a0:53:34:0d:ef:2d:83:ab:d5:51:70:40:b6:92:
                    50:e6:a9:71:27:4e:f2:b0:74:ba:c0:64:35:8d:1c:
                    b2:b0:ce:ba:56:4e:8a:e6:01:f1:22:0a:fe:0a:6b:
                    85:45:18:5f:0d:62:71:21:1d:32:d9:ad:b1:79:ca:
                    c4:5d:7c:d5:6c:30:50:39:8b:52:c4:f4:8b:d0:3e:
                    45:1e:07:2a:be:98:3c:20:f8:e4:44:42:29:87:97:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:86:05:7E:FA:14:60:92:14:C3:42:C5:2C:D2:0F:18:F1:A2:4E:DE
            X509v3 Authority Key Identifier:
                keyid:54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:39:f7:13:dc:e7:be:9f:e0:a3:bb:61:af:06:42:c7:9a:f3:
         36:48:db:98:38:cd:48:21:3d:14:ea:23:27:da:69:28:76:0d:
         61:4a:df:0c:0d:f6:fc:e0:49:06:ee:a5:47:08:f4:61:ef:e7:
         0f:9c:9f:05:05:52:c5:5a:e1:e0:7a:df:4c:27:c5:1a:7e:20:
         83:83:8b:fe:cf:cf:fa:16:99:c8:98:37:b8:c4:1f:3b:65:7c:
         20:e3:a3:8f:c2:7e:58:21:dd:09:62:1e:f6:00:3f:c8:92:f3:
         a6:b2:55:f5:de:dd:b3:ad:b8:b5:03:8d:d3:53:18:64:84:28:
         4e:fc:25:0b:3b:83:ed:3b:e1:cd:7b:1d:07:dd:36:34:d2:90:
         17:b3:1f:1d:9d:cb:0a:ba:85:10:c1:f3:14:47:59:0b:af:c0:
         e1:22:67:ef:1c:3c:61:a1:c7:56:a3:7a:b4:d8:c2:ed:ff:91:
         38:94:07:68:81:1c:40:3e:d7:4c:75:cc:ad:f7:af:8f:3a:e1:
         98:e2:b3:b9:23:47:1e:12:a2:c9:bb:71:db:70:00:fd:41:54:
         bd:ec:ec:55:dd:97:89:85:b7:67:e0:67:b9:9a:73:cf:5f:47:
         a0:d3:c3:1a:dd:2e:95:02:39:43:77:9a:15:55:1e:2d:0f:3e:
         56:e5:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:11 2026 by rpki-client