Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa
File:                     3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (raw, json)
Hash identifier:          c5ycRdkZmzicMcHlVxH8DNqWq6vMY1pMgkNwLRJ1u08=
Subject key identifier:   67:B1:87:8F:03:00:D3:E5:BF:1C:C0:AD:32:36:68:59:40:50:95:EE
Certificate issuer:       /CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC
Certificate serial:       1805AFEBDAB0A55F14C276893460D698877A546C
Authority key identifier: D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa
Signing time:             Sun 03 May 2026 03:13:49 +0000
ROA not before:           Sun 03 May 2026 03:08:49 +0000
ROA not after:            Sun 02 May 2027 03:13:49 +0000
asID:                     139951
IP address blocks:        103.79.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl
                          rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:05:af:eb:da:b0:a5:5f:14:c2:76:89:34:60:d6:98:87:7a:54:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC
        Validity
            Not Before: May  3 03:08:49 2026 GMT
            Not After : May  2 03:13:49 2027 GMT
        Subject: CN=67B1878F0300D3E5BF1CC0AD32366859405095EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:31:1a:97:ac:31:2d:15:f4:a4:a6:71:fc:
                    0c:cd:09:1b:27:1d:0a:33:5f:d7:99:9e:6f:e3:91:
                    c1:bb:ed:a4:7e:f3:5f:c1:d2:10:0e:8d:45:13:69:
                    1d:f8:e4:1a:9b:e4:2a:a9:00:36:47:f0:27:d0:f4:
                    e2:86:f2:d4:2f:4e:09:97:3e:6d:34:9a:7d:63:5a:
                    8b:23:13:70:e2:5a:96:7c:c0:57:f4:69:13:8d:b9:
                    76:a0:d9:9f:e6:69:3f:a0:58:44:fc:36:5f:06:8c:
                    47:08:c9:bd:d2:9c:66:f4:92:c3:ba:f9:f2:07:7b:
                    0a:99:e5:77:d8:e8:57:7c:e8:94:ef:d6:78:d7:0c:
                    20:c4:a2:69:ee:e6:81:29:5a:f9:02:cb:e8:0c:0f:
                    cb:8a:1f:cc:73:ba:6e:a5:c5:54:de:8a:08:b9:40:
                    7c:54:dd:7c:11:22:7c:c2:14:b2:69:e6:69:7a:9d:
                    81:ea:1e:b7:f4:80:04:c6:7f:e6:d4:bd:26:66:04:
                    3b:1d:72:89:b3:56:f2:8c:a6:05:46:39:b3:e2:5e:
                    7a:19:3e:20:92:1e:b6:f4:33:52:a3:26:69:fb:90:
                    85:33:ce:31:c3:de:31:8b:44:46:16:33:ed:a6:20:
                    c8:75:a9:59:23:01:f6:bc:4d:60:ee:f2:c9:9c:de:
                    75:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B1:87:8F:03:00:D3:E5:BF:1C:C0:AD:32:36:68:59:40:50:95:EE
            X509v3 Authority Key Identifier:
                keyid:D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:57:f5:66:2c:10:f9:24:99:f1:25:ce:f6:4b:38:ff:9f:af:
         c7:53:f3:f8:a5:f8:96:42:6c:70:61:fa:a2:34:9b:07:a0:d9:
         f4:6d:2b:e1:5a:25:92:c7:7b:ee:3f:5e:ce:21:3a:a1:32:79:
         3e:e9:e5:22:b7:99:5e:db:f1:17:50:a0:26:d1:d4:27:63:94:
         e2:a8:1b:ea:bb:a9:41:71:74:65:05:0b:df:b8:66:28:9f:51:
         07:c3:fd:84:19:f8:39:bb:5c:32:a9:d8:48:9a:8d:54:8f:d2:
         5e:89:3f:37:33:a0:7a:e8:19:39:e6:cb:94:16:8d:be:7b:d4:
         d6:91:75:e6:af:28:6f:17:a6:4d:6a:f9:20:6d:3d:05:4d:d7:
         52:7e:bd:26:fa:fb:c8:1b:75:f9:b6:49:35:7e:3f:f3:c9:ad:
         ad:47:87:43:1b:d6:fe:af:54:d4:c6:04:3c:01:13:96:7e:ec:
         85:d8:d9:47:3a:1c:94:ef:5e:2b:92:5e:f3:35:c5:ac:af:ce:
         21:38:4f:0a:e3:50:3e:69:70:5c:31:1d:4d:ef:b9:f9:c9:07:
         95:3d:d6:d3:f5:98:c8:aa:b7:59:e0:43:51:bb:fe:db:b2:4f:
         3a:04:26:2c:bf:6b:27:83:1b:6c:50:f9:5d:c0:02:dc:be:55:
         99:43:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:32 2026 by rpki-client