Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa
File:                     3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (raw, json)
Hash identifier:          ozVN8Ju8BM0bHSAMy+0xQoZY1RHC1GTREWGzCCVL94A=
Subject key identifier:   E5:6D:F2:AD:D3:BE:92:48:90:FE:3B:51:E1:0A:F0:6D:1C:02:9A:CC
Certificate issuer:       /CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
Certificate serial:       3FC8336304D77E7C2C40D302605607956E8EB96A
Authority key identifier: 54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa
Signing time:             Sun 03 May 2026 03:13:42 +0000
ROA not before:           Sun 03 May 2026 03:08:42 +0000
ROA not after:            Sun 02 May 2027 03:13:42 +0000
asID:                     138087
IP address blocks:        103.125.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl
                          rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c8:33:63:04:d7:7e:7c:2c:40:d3:02:60:56:07:95:6e:8e:b9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
        Validity
            Not Before: May  3 03:08:42 2026 GMT
            Not After : May  2 03:13:42 2027 GMT
        Subject: CN=E56DF2ADD3BE924890FE3B51E10AF06D1C029ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:69:68:2b:cf:5c:f0:4e:35:fd:1e:cd:72:
                    79:59:f9:ff:2d:7b:c3:11:c6:c2:85:cd:ae:bc:ba:
                    4d:8d:f3:59:df:70:34:6e:56:7d:f5:a7:e9:d0:ed:
                    37:60:69:bc:aa:ca:26:74:9f:c3:fc:95:32:b7:be:
                    0f:1c:bd:35:49:a8:4a:60:32:2d:34:87:23:76:04:
                    0e:71:10:b1:fb:6c:c9:c3:19:c3:9e:86:bf:10:ef:
                    8d:74:81:64:1f:4e:0c:98:b6:74:6e:5c:50:9d:26:
                    5b:3b:0b:7c:99:96:68:5e:c1:94:a5:a1:2d:d9:0f:
                    11:53:d4:6c:5b:6a:8b:d0:a3:05:3e:97:a1:53:64:
                    9c:d1:63:66:0c:6f:5c:6c:fc:02:79:a5:5c:30:ef:
                    96:8d:d4:82:6a:52:5a:a7:b6:c2:6d:9e:e3:e5:2e:
                    97:99:91:37:3f:55:01:e3:94:6b:a2:8a:b9:ce:9f:
                    61:f2:c0:fb:01:8c:b0:52:02:b2:bf:fd:7f:b1:a9:
                    b3:d2:c1:3d:e3:e5:54:7a:5c:32:d5:d7:13:8a:92:
                    91:44:e9:47:d6:5c:49:fc:b3:36:67:15:89:7f:70:
                    d2:13:90:2b:62:06:fb:2a:69:a1:6e:c1:de:bb:16:
                    ef:73:2f:ec:8b:bf:af:75:76:b4:54:61:c2:02:9b:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:F2:AD:D3:BE:92:48:90:FE:3B:51:E1:0A:F0:6D:1C:02:9A:CC
            X509v3 Authority Key Identifier:
                keyid:54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:75:ce:3e:1e:10:5e:e4:bc:65:1f:74:42:2c:05:68:d4:13:
         69:39:3c:6b:04:9b:23:85:02:bf:9d:11:fd:74:4d:91:26:91:
         24:42:91:58:fc:4a:97:37:67:c4:37:4b:1d:b1:15:80:cc:e3:
         5f:d8:fa:8e:9c:a2:e1:df:6f:8e:b0:e5:72:64:38:9e:96:3a:
         dc:98:bb:56:f2:72:95:fb:4c:e2:cd:c4:d5:ea:c6:99:de:51:
         e8:7b:7f:a4:2a:56:6d:68:cd:f9:c0:24:1a:f0:0b:ec:3b:c4:
         8b:49:4d:d1:e5:4b:af:5b:92:7f:c9:50:b0:21:44:b4:c0:ea:
         c1:e6:75:00:21:77:5f:51:92:ef:00:a2:7c:9e:c7:43:a4:0f:
         4b:19:33:fe:1a:a1:07:8d:1a:c2:61:af:ff:e7:02:c2:e2:ee:
         63:09:62:aa:61:29:b5:af:93:30:cd:40:31:db:7c:e4:17:51:
         b5:ee:94:7e:e0:d6:b2:40:0f:64:25:91:ed:56:f8:20:90:20:
         7c:da:9e:a9:09:fe:ba:2b:70:2b:d3:58:ee:7d:74:3b:da:d7:
         ee:2e:0b:c6:e8:51:75:e6:72:c2:80:dc:55:32:24:ef:5a:5e:
         55:0d:9e:30:e6:03:5d:cf:a8:a9:54:0f:ad:57:14:ec:2a:96:
         89:c7:66:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:34 2026 by rpki-client