Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa
File:                     3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (raw, json)
Hash identifier:          RqUjB86YVPgt7tRWRmn7/EkRMj2UXiSSsOWSw1LcnVs=
Subject key identifier:   41:A9:99:08:85:54:67:8A:21:70:90:3E:01:02:A8:17:3F:2D:42:88
Certificate issuer:       /CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC
Certificate serial:       205C0D17D83BC15387DF37CC8BECC6ACA3347609
Authority key identifier: D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa
Signing time:             Sun 03 May 2026 03:13:50 +0000
ROA not before:           Sun 03 May 2026 03:08:50 +0000
ROA not after:            Sun 02 May 2027 03:13:50 +0000
asID:                     139951
IP address blocks:        103.79.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl
                          rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5c:0d:17:d8:3b:c1:53:87:df:37:cc:8b:ec:c6:ac:a3:34:76:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC
        Validity
            Not Before: May  3 03:08:50 2026 GMT
            Not After : May  2 03:13:50 2027 GMT
        Subject: CN=41A999088554678A2170903E0102A8173F2D4288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:19:e1:30:37:ab:bc:0a:0e:77:5a:06:c6:
                    6f:b8:4d:d7:67:7e:b9:a0:36:18:be:68:6b:c4:81:
                    8e:4a:c6:5d:0b:5c:71:a8:96:6c:df:dc:d5:5e:92:
                    88:63:0b:b1:5e:75:ee:ad:be:b3:7b:de:89:5e:d8:
                    10:83:c1:00:38:92:55:26:68:bb:aa:48:9a:d0:85:
                    73:4e:c3:ea:f5:17:96:66:7b:ee:ff:30:f4:8f:07:
                    77:9e:91:b3:00:d2:f2:fe:45:59:89:52:57:08:8f:
                    b6:9a:97:c0:8f:df:3c:d9:61:f7:ea:98:e7:5e:c8:
                    5a:ec:4c:56:9a:c5:c4:08:95:a6:a2:9c:48:18:3e:
                    d4:cd:df:2c:62:41:ff:f3:b9:c6:a8:97:0e:14:d7:
                    77:b1:69:ee:51:e8:10:b4:3a:3d:24:d5:55:85:16:
                    31:ac:ed:57:3d:de:74:5f:bd:55:10:b5:53:9e:74:
                    5d:4b:98:4c:a2:50:69:d4:e2:79:9e:20:ec:a1:b8:
                    e9:1f:a0:90:a5:b5:95:25:79:0f:0f:c9:b4:22:95:
                    92:79:d8:2b:12:38:df:3b:12:51:fb:c4:80:03:d1:
                    61:69:23:7b:e3:59:5f:2f:05:f8:e7:79:8e:24:73:
                    78:3f:af:af:5b:7d:52:30:82:5c:38:bd:55:a8:66:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A9:99:08:85:54:67:8A:21:70:90:3E:01:02:A8:17:3F:2D:42:88
            X509v3 Authority Key Identifier:
                keyid:D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:1b:ad:4e:05:6b:97:2d:b0:a0:66:86:04:4d:d6:1b:a9:
         e5:7f:85:88:2b:5d:d8:41:00:01:79:b0:78:ed:f8:43:5b:3b:
         75:e7:ca:14:f0:0a:7e:12:ba:ee:84:07:ae:70:1c:73:b5:0c:
         a9:76:68:52:a5:19:d9:fc:56:e0:0a:a9:af:5d:23:c7:41:65:
         3a:22:e3:4e:fe:14:6a:97:e7:af:e1:45:9a:ff:55:39:b2:8e:
         34:26:7c:0d:4d:f7:91:ef:30:c9:97:da:af:87:de:87:d3:9c:
         5b:ad:75:ec:14:1b:2e:76:1b:b4:72:c3:9b:5f:91:48:9d:4b:
         0a:6d:fb:46:2b:39:5b:2f:7e:ff:6e:a6:68:73:bb:43:ba:bf:
         df:23:b4:10:51:54:b4:af:a9:a5:f7:8c:25:29:72:42:5f:eb:
         e3:a4:77:05:33:ec:fc:e0:dc:d5:c4:46:f5:3c:7b:81:97:45:
         60:88:34:7f:e2:53:4c:89:04:5a:54:d8:03:8a:8b:9f:29:c7:
         33:94:09:54:a6:09:4a:b1:4a:e9:da:06:a7:e0:84:52:62:c0:
         09:93:71:a1:5f:14:ba:82:7e:12:ac:1f:93:cf:c2:a5:a6:5f:
         5e:ea:a5:9b:7c:ea:92:fa:5b:1b:8b:a8:0c:a3:b9:6a:ee:39:
         24:44:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:51 2026 by rpki-client