Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa
File:                     3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (raw, json)
Hash identifier:          QBz9jVg5iA4vI0m+M7MXqbx0KDdvReCXDCkg90gY1pM=
Subject key identifier:   75:2E:8E:A7:48:B6:1C:5B:52:D8:F2:CF:8D:BE:D2:B4:88:3C:58:3C
Certificate issuer:       /CN=35859E59642559AC99788C194ED55EB1548A2F1F
Certificate serial:       4F322ADF047ADE42D4CCE4E08DA31F1112D63368
Authority key identifier: 35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa
Signing time:             Sun 03 May 2026 03:15:34 +0000
ROA not before:           Sun 03 May 2026 03:10:34 +0000
ROA not after:            Sun 02 May 2027 03:15:34 +0000
asID:                     140478
IP address blocks:        103.154.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl
                          rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:32:2a:df:04:7a:de:42:d4:cc:e4:e0:8d:a3:1f:11:12:d6:33:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35859E59642559AC99788C194ED55EB1548A2F1F
        Validity
            Not Before: May  3 03:10:34 2026 GMT
            Not After : May  2 03:15:34 2027 GMT
        Subject: CN=752E8EA748B61C5B52D8F2CF8DBED2B4883C583C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:e7:d6:8b:9a:b3:0c:59:53:3f:cc:73:63:
                    bd:4c:79:55:46:04:43:59:54:b3:25:97:86:ea:9f:
                    b1:43:11:48:2e:c3:99:1d:e3:1a:bc:cd:63:30:bd:
                    70:da:f6:89:12:78:5e:cf:02:91:51:8b:2c:96:1a:
                    b6:f8:19:36:9f:07:2d:4e:81:96:38:86:e4:d4:09:
                    25:a9:4f:84:bb:d0:4e:7b:7e:63:30:28:5a:d6:10:
                    56:ec:85:9b:82:1b:18:17:ec:19:81:93:42:2f:ba:
                    42:ad:e1:a9:17:18:21:22:fa:7d:4f:94:5c:7d:6c:
                    76:d9:1e:2e:b1:cc:e0:2d:49:3d:15:8c:52:d4:4e:
                    78:f2:b3:38:75:c9:64:a7:55:51:25:26:02:51:2b:
                    d5:d2:43:4f:b7:42:a4:57:9d:68:ab:f9:b8:11:0c:
                    44:a7:4d:6c:39:49:ef:a6:78:06:d4:0b:d6:4d:e5:
                    48:50:35:e5:51:3c:9a:ad:35:ae:cc:02:ab:cf:dc:
                    b4:99:76:80:40:c5:69:db:c7:b0:7b:52:f0:11:08:
                    58:22:1e:8d:3b:15:af:f7:f8:22:dc:0a:75:c4:d6:
                    1e:41:07:9c:c9:6a:e4:f7:d9:af:d2:83:9f:0b:29:
                    9f:88:cd:ee:08:1f:c2:e6:e4:d3:36:bb:4d:b9:36:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2E:8E:A7:48:B6:1C:5B:52:D8:F2:CF:8D:BE:D2:B4:88:3C:58:3C
            X509v3 Authority Key Identifier:
                keyid:35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:5c:ad:b9:97:3e:e5:03:75:13:16:37:97:91:cb:72:f8:
         61:dc:15:8c:0d:d6:71:34:37:cb:4b:f2:b2:9b:37:93:fe:22:
         46:6f:df:63:de:7e:c2:8b:d9:96:aa:06:16:a2:7c:30:ae:06:
         2c:35:e3:ff:57:66:bb:99:59:ad:47:8f:19:9f:23:12:62:61:
         d2:de:42:29:f8:be:19:34:2b:ec:e7:94:d4:32:f6:e8:4f:34:
         b7:28:7b:5b:69:86:60:8a:2c:10:8c:0c:91:64:8e:cb:91:c1:
         43:ff:d8:f0:61:88:4f:8b:5b:e9:84:9b:da:15:0e:78:c5:0a:
         f9:32:a6:43:0d:35:e6:8f:99:d5:cf:ef:c8:f1:4e:61:4a:27:
         80:ae:5b:45:a1:47:b1:66:dd:bb:a3:42:f9:d8:c9:10:ed:b0:
         c7:fd:22:87:70:6b:35:19:fc:80:d6:7d:5c:71:a8:4a:39:83:
         a7:e9:1f:37:2c:52:95:10:ec:fc:41:0e:6a:9b:ed:21:55:de:
         42:44:e6:1a:a1:86:de:0b:e8:7c:6a:d1:e6:bc:ae:d6:4e:6b:
         ec:f4:f6:58:6d:1c:7c:a7:37:42:0d:71:c1:59:20:d7:85:ae:
         f0:18:71:88:a2:c5:15:a8:cc:e0:48:73:b5:b6:92:37:48:c9:
         82:7c:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:27 2026 by rpki-client