Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa
File:                     3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (raw, json)
Hash identifier:          pf1zgGEHpfn1H78lzdIyJ+7RwP4PRuY4T6Xp4PahUm8=
Subject key identifier:   7E:5C:97:A4:AA:FD:78:AA:33:9F:CF:23:8B:E9:47:C9:4D:AB:CD:AA
Certificate issuer:       /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4
Certificate serial:       3946B9BA85C92B481EF69C6408D8E8F5B2CF020C
Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa
Signing time:             Sun 03 May 2026 03:14:51 +0000
ROA not before:           Sun 03 May 2026 03:09:51 +0000
ROA not after:            Sun 02 May 2027 03:14:51 +0000
asID:                     149409
IP address blocks:        103.183.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl
                          rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:46:b9:ba:85:c9:2b:48:1e:f6:9c:64:08:d8:e8:f5:b2:cf:02:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4
        Validity
            Not Before: May  3 03:09:51 2026 GMT
            Not After : May  2 03:14:51 2027 GMT
        Subject: CN=7E5C97A4AAFD78AA339FCF238BE947C94DABCDAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cf:17:1a:08:8a:71:6c:36:67:30:b8:b3:e1:
                    b0:7b:7a:59:fd:e6:6a:59:e6:42:7f:27:0a:49:d3:
                    ad:42:f1:04:fe:a8:ad:70:92:fa:a7:95:0b:b6:00:
                    cd:0c:2b:a2:15:ed:0f:7b:92:11:2e:ae:38:2d:cd:
                    36:2b:10:2c:ce:1d:1d:2d:5c:c5:91:93:89:d3:6b:
                    aa:d5:61:f1:16:d2:27:e5:90:1e:d8:58:28:b9:73:
                    2c:87:82:16:c2:56:71:32:4d:8f:80:c0:44:bb:de:
                    12:bc:48:5c:69:f5:07:f7:f4:12:43:69:4a:5c:c2:
                    b9:3a:11:8a:a0:70:89:d7:2c:fc:87:d6:af:67:40:
                    5e:67:3b:72:0e:46:f5:22:c1:fe:12:31:5b:2a:8a:
                    33:9c:80:ed:37:ff:75:5c:eb:da:ce:82:b8:98:ab:
                    13:e2:42:cd:6d:f5:85:3a:b1:ef:10:f1:c8:d9:7a:
                    e6:b0:e9:d2:88:c2:f3:70:cc:6c:22:3f:61:b8:8b:
                    bc:35:96:00:3e:6b:34:c3:7f:53:b3:b9:cb:ce:99:
                    06:e1:1f:44:8b:c8:c7:92:9a:2f:69:63:0b:ea:2b:
                    04:0b:0b:0a:86:3f:df:12:67:ac:d6:27:cc:4f:af:
                    5c:dc:67:cb:7b:06:f3:a9:ed:b5:8a:39:ce:a2:74:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5C:97:A4:AA:FD:78:AA:33:9F:CF:23:8B:E9:47:C9:4D:AB:CD:AA
            X509v3 Authority Key Identifier:
                keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:d0:72:5d:69:91:82:c9:1e:2e:4f:ba:54:8f:e6:4c:9e:
         7a:17:8f:9a:7d:6c:4b:af:b2:dd:29:27:7e:1a:b0:98:dd:8d:
         89:a1:a1:70:2b:23:9a:a3:35:8d:0a:c0:c9:c2:7a:13:d2:9a:
         ab:4f:91:aa:a8:b6:9d:c7:c4:8f:c1:36:6e:e9:4f:29:3f:34:
         4e:ca:91:82:2f:00:23:df:a0:93:67:83:22:b2:e8:dd:98:60:
         bd:b9:ac:d9:bc:a4:64:8d:95:ea:5c:cb:0f:c6:b6:22:f8:cc:
         c0:1f:f2:39:95:bc:53:9e:23:d1:c3:73:f0:03:30:a5:e9:c8:
         a7:f1:16:29:05:11:0a:d0:2d:e4:7b:30:e8:a8:19:76:c6:8f:
         8a:53:e2:b1:c8:3f:75:1c:de:29:41:66:35:44:03:bc:00:a9:
         95:0c:0e:f5:94:7e:26:95:61:97:5c:ac:82:3e:c3:d4:f6:f7:
         99:23:75:f4:1a:27:7e:39:3e:1b:94:47:07:5b:a2:d7:44:a1:
         a0:7f:59:c1:98:b9:19:82:71:11:be:39:68:d4:b0:14:31:b9:
         59:c6:bb:1c:50:19:fe:2c:0d:82:ca:53:24:c1:40:73:80:4a:
         28:2c:2d:74:e1:e2:77:b0:64:26:ce:5d:e2:90:4e:a9:40:68:
         fb:c1:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:20 2026 by rpki-client