Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa
File:                     3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          gKWl4c7FQdp4tPgMGVABYRuitakyfACS20kjMIxhrq4=
Subject key identifier:   7A:19:A3:84:3B:B2:20:D2:C8:C7:5C:FD:37:FE:38:E2:82:81:7C:DA
Certificate issuer:       /CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9
Certificate serial:       08571CC9C15D52965948757F6E5C7C2F5FB172D2
Authority key identifier: EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa
Signing time:             Sun 03 May 2026 03:17:44 +0000
ROA not before:           Sun 03 May 2026 03:12:44 +0000
ROA not after:            Sun 02 May 2027 03:17:44 +0000
asID:                     131775
IP address blocks:        103.131.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl
                          rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:57:1c:c9:c1:5d:52:96:59:48:75:7f:6e:5c:7c:2f:5f:b1:72:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9
        Validity
            Not Before: May  3 03:12:44 2026 GMT
            Not After : May  2 03:17:44 2027 GMT
        Subject: CN=7A19A3843BB220D2C8C75CFD37FE38E282817CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:45:e0:bd:c9:42:13:c2:20:dd:61:2b:f0:
                    c7:3f:39:77:65:5b:56:50:f1:25:f1:e5:e0:21:68:
                    1e:cb:04:dd:a1:35:e7:d9:43:ec:fd:18:d6:67:15:
                    55:7e:00:5c:85:5a:fa:d2:ce:20:c6:10:63:f6:a6:
                    65:a1:40:cb:f5:b7:95:58:4b:e0:53:71:42:3d:90:
                    3c:e9:f9:db:b8:e2:e3:69:0e:88:01:9b:b2:53:46:
                    3c:77:b7:cd:09:86:24:9c:3c:66:8f:28:0a:e5:d0:
                    1c:3a:5b:9d:5c:fa:16:13:c8:92:75:cb:0f:f6:1a:
                    e5:49:4d:b3:f7:c9:77:56:ed:7b:a9:67:ec:ec:58:
                    21:44:9b:65:6f:e7:66:22:37:d0:cb:75:ba:ca:ca:
                    65:16:84:6c:92:b0:e5:f8:ef:36:7f:08:74:9d:44:
                    58:54:5e:4c:74:3d:97:ce:49:cf:38:cf:f9:9c:92:
                    18:21:c6:f8:af:fe:7d:f3:08:ba:dd:3c:66:ef:cc:
                    9d:ef:d3:55:e4:11:57:a6:41:8a:ac:d6:ec:33:a0:
                    c5:ba:06:ce:77:b7:32:85:00:44:79:be:09:ff:e0:
                    da:f2:df:1f:77:14:9a:49:6b:2c:c2:8f:37:4c:aa:
                    ae:5e:29:2a:d3:a0:7b:45:a5:69:20:60:28:20:39:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:19:A3:84:3B:B2:20:D2:C8:C7:5C:FD:37:FE:38:E2:82:81:7C:DA
            X509v3 Authority Key Identifier:
                keyid:EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:41:93:45:96:e0:7f:53:e9:c2:bc:2f:14:94:67:ad:41:db:
         67:0f:93:6f:6a:0e:67:5d:e8:c7:ca:69:aa:fd:d5:af:f1:ab:
         4e:69:bc:fc:ea:bf:7f:70:b5:91:a9:a0:39:8a:43:eb:70:e3:
         d0:9f:0e:d4:c1:04:cf:62:50:1a:9b:66:03:e3:0e:c1:93:c9:
         53:8e:46:ee:fc:e5:9e:59:46:90:65:b3:ca:b7:91:e8:e9:4b:
         91:ae:57:3b:74:d4:67:52:5c:e7:4f:11:11:dd:4a:6b:b3:03:
         5c:a2:78:1a:46:79:6d:c1:9a:b8:de:d5:2d:25:36:bb:b8:2b:
         4f:60:be:3a:fb:47:ab:c0:3f:68:4a:d7:50:6c:fc:5b:0c:17:
         99:5b:6e:8d:2e:fc:c5:56:c5:9a:4a:45:7a:82:e9:bf:ef:d1:
         c2:75:1f:3a:f1:ff:09:ca:53:31:48:9d:0a:86:98:57:75:ed:
         8e:66:fa:62:b4:82:98:f1:a4:b8:a4:22:2d:5b:76:7f:9b:7a:
         78:61:f1:6d:3f:b4:82:84:4f:18:d6:12:77:b0:26:d8:af:49:
         12:bf:eb:cc:c9:f9:c4:9a:4e:e4:f4:3f:7e:65:82:c4:5d:d0:
         fd:3a:75:43:57:63:a5:d5:59:d5:15:cc:f4:3a:af:1d:b3:dc:
         9d:83:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:04 2026 by rpki-client