Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa
File:                     3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (raw, json)
Hash identifier:          96ge8Etcm2V6UZTk31GX2s/Ds/fuLYPEHIz1Z0SJfzE=
Subject key identifier:   B7:1A:8C:47:79:70:EF:7D:4E:C4:1E:5E:B6:4D:A7:CA:64:94:36:3D
Certificate issuer:       /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4
Certificate serial:       049F497C40997759BE182DC589A4BB2AC65EDB1F
Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa
Signing time:             Sun 03 May 2026 03:14:51 +0000
ROA not before:           Sun 03 May 2026 03:09:51 +0000
ROA not after:            Sun 02 May 2027 03:14:51 +0000
asID:                     149409
IP address blocks:        103.183.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl
                          rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9f:49:7c:40:99:77:59:be:18:2d:c5:89:a4:bb:2a:c6:5e:db:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4
        Validity
            Not Before: May  3 03:09:51 2026 GMT
            Not After : May  2 03:14:51 2027 GMT
        Subject: CN=B71A8C477970EF7D4EC41E5EB64DA7CA6494363D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:f6:5a:db:07:fb:45:07:37:d1:89:6c:8a:
                    38:71:53:44:13:b9:b8:b8:ed:bc:1a:3d:d6:5a:e2:
                    25:44:af:74:5b:f9:08:81:c9:67:82:ea:7e:10:f1:
                    9d:4c:43:d9:69:f5:53:bf:18:f9:1d:60:8b:7c:41:
                    3c:fe:f7:25:a4:7d:b9:16:39:7c:b3:f5:36:48:5d:
                    99:cf:2a:07:99:31:01:aa:87:57:04:a6:6a:c7:5a:
                    2d:3b:67:c6:46:b3:d3:4c:0d:9a:f4:d3:c7:8f:a5:
                    16:3a:b5:78:e1:9d:82:6f:7b:41:09:42:22:d1:ec:
                    09:b2:6e:6c:09:1e:c6:41:a1:0c:e0:f7:a2:c3:2a:
                    f0:98:b5:9c:5b:19:0f:24:33:78:bc:f0:bd:3e:a7:
                    fb:db:f3:53:7c:46:c6:d6:5d:01:ec:8b:a5:13:3c:
                    68:96:69:d1:40:d2:20:65:4c:8c:c5:76:2f:37:17:
                    56:1d:24:b2:bc:c4:cf:cf:4a:55:7b:09:36:03:ab:
                    15:40:09:4e:f2:96:11:c7:91:77:8c:78:81:29:96:
                    9d:d4:06:fc:a5:2b:7f:1d:80:90:9c:fe:5f:d5:ad:
                    c4:5e:63:5f:42:64:ed:6c:99:cc:57:cc:a7:24:a6:
                    df:0b:fd:ad:ee:1a:4a:77:06:3f:80:9a:07:80:7d:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1A:8C:47:79:70:EF:7D:4E:C4:1E:5E:B6:4D:A7:CA:64:94:36:3D
            X509v3 Authority Key Identifier:
                keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:f3:a5:d9:b0:4d:5f:19:99:b4:69:95:6d:57:34:4b:7c:ce:
         af:ca:38:f3:e7:f1:ed:50:98:3a:a8:e0:d5:fc:51:10:27:2d:
         d2:a9:25:ee:3d:23:77:86:f4:5e:e9:12:14:df:c7:c9:fc:9d:
         f3:36:94:fc:ba:8d:d7:c6:17:24:e2:48:20:71:31:b5:e5:70:
         b5:c2:66:29:26:13:4b:81:2e:77:ee:69:6f:98:52:2e:d9:e1:
         8a:ea:e7:34:71:e8:30:9b:46:d7:47:46:6a:8d:f3:26:35:33:
         79:6a:aa:99:df:ef:91:cb:8b:22:1f:23:6e:d4:22:33:e8:6c:
         92:ba:e5:62:22:d8:bf:01:95:9f:33:c3:05:71:15:5a:57:5f:
         35:c6:b1:32:cc:dc:f9:94:f4:f1:d9:a0:d7:f5:c8:a5:e8:6d:
         24:5c:76:c9:dc:36:67:9f:dd:6c:42:c9:e0:22:79:a3:9d:89:
         b9:11:a1:ac:4d:79:17:91:ca:b0:d4:80:07:82:b7:02:c0:ec:
         c9:cc:61:4d:71:72:01:28:59:a0:7a:53:c7:81:ce:cd:26:b7:
         17:9c:db:6c:b6:c1:8b:8a:78:df:ad:22:66:b8:52:dc:e8:3e:
         5f:c5:03:48:ca:9f:63:70:92:e3:19:89:91:06:83:ea:ba:9b:
         b8:53:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:02 2026 by rpki-client