Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa
File:                     3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (raw, json)
Hash identifier:          cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=
Subject key identifier:   58:19:B9:53:59:5E:C8:D6:78:7B:D3:51:9F:66:76:3F:EC:ED:51:EB
Certificate issuer:       /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
Certificate serial:       0A5E491700661E852576DA25176580403403241C
Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa
Signing time:             Sun 03 May 2026 03:17:35 +0000
ROA not before:           Sun 03 May 2026 03:12:35 +0000
ROA not after:            Sun 02 May 2027 03:17:35 +0000
asID:                     133354
IP address blocks:        103.232.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl
                          rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5e:49:17:00:66:1e:85:25:76:da:25:17:65:80:40:34:03:24:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
        Validity
            Not Before: May  3 03:12:35 2026 GMT
            Not After : May  2 03:17:35 2027 GMT
        Subject: CN=5819B953595EC8D6787BD3519F66763FECED51EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:e6:ba:6a:7e:d8:0b:d3:54:ad:a3:ab:af:
                    76:cf:22:14:f9:cc:f1:53:be:e4:bb:76:cd:a7:71:
                    9e:17:cc:33:36:31:87:a0:c7:e2:9b:38:df:e7:57:
                    f8:77:ad:19:ab:1b:38:94:f0:85:83:5e:3b:9a:07:
                    10:a1:4f:6b:1f:1f:cf:c2:1f:23:6a:32:45:82:21:
                    5f:97:2a:22:79:44:67:f3:3e:fc:3d:79:57:cc:7e:
                    42:75:5d:20:91:f2:72:cf:54:bb:53:ec:60:f8:1c:
                    e1:d1:9d:de:0d:09:da:81:c5:7e:4e:a4:cb:e8:44:
                    af:7b:ff:49:38:38:54:58:bd:f4:82:7c:da:28:cc:
                    9b:95:4e:e3:a2:5d:ce:e9:49:17:5e:b5:f3:a3:20:
                    bd:30:74:ea:71:3c:ed:7b:31:49:ce:68:07:63:39:
                    bb:e6:b1:ba:2b:ae:6d:57:b5:50:f6:65:29:43:6d:
                    64:a2:bc:bd:d2:9b:27:1b:8e:fb:fd:ad:ac:80:cf:
                    11:2f:1f:a3:d1:1a:2c:13:c4:b6:20:52:61:82:ae:
                    bd:d2:39:4a:5a:8a:4a:df:f6:25:2f:91:75:34:fa:
                    4b:ab:fc:f4:8e:2c:87:e3:56:fa:87:20:94:1e:b2:
                    60:e0:73:a2:d4:52:7d:8f:a6:84:02:a0:b2:b1:5a:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:19:B9:53:59:5E:C8:D6:78:7B:D3:51:9F:66:76:3F:EC:ED:51:EB
            X509v3 Authority Key Identifier:
                keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:d1:32:e9:f4:02:aa:7e:b3:69:04:39:92:93:3b:86:53:f1:
         72:b4:32:70:69:4e:88:a6:35:9e:d4:b5:93:2e:6a:93:4f:ca:
         d7:1a:93:46:f2:8d:9f:a0:8b:61:5d:f4:28:6a:82:6a:b4:ad:
         d2:36:c9:6f:51:6e:1a:2b:27:a4:32:6b:0e:ca:72:63:ce:04:
         49:4c:d4:39:96:f2:18:28:2a:7f:36:3f:2f:6b:1e:ea:b3:97:
         3b:64:a6:4c:6d:dd:bf:5c:70:ba:a0:fa:de:30:95:be:d6:86:
         1f:95:83:b2:10:f6:59:51:79:ec:be:ba:f4:6a:63:54:dc:1d:
         34:e3:f6:ca:31:d6:d5:a0:f8:1a:f2:2d:35:a0:14:97:db:a0:
         78:79:24:c9:36:a2:a3:8d:2e:a5:e9:8a:2b:bc:6f:4a:85:77:
         45:01:56:a6:59:d3:a3:35:a2:10:ab:b4:85:69:b0:55:9f:dc:
         1d:bd:0d:39:50:ab:b8:69:b7:7c:64:63:3c:2e:2e:d4:42:02:
         27:4a:94:71:c0:ba:0a:69:b8:11:0f:cb:7d:dc:49:7a:78:50:
         07:5a:d1:a0:ec:60:de:2c:2a:05:c4:c2:92:2f:a8:1d:02:98:
         26:fe:fb:d0:69:91:cd:9b:94:91:39:53:d7:fe:31:c2:6c:33:
         01:9e:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:16 2026 by rpki-client