Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/3130332e38322e39322e302f32332d3234203d3e20313336303532.roa
File:                     3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          oCDO+C8a0RrEJ6lxOXaK0sUnJXysyt3W9yTdznU1D4w=
Subject key identifier:   12:86:AC:7F:BC:77:9E:12:F5:A4:38:C9:97:33:3B:1E:18:D4:40:A6
Certificate issuer:       /CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496
Certificate serial:       39025F49AE64AD8E52AD3242BBCE90CAE6DCDB06
Authority key identifier: 5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/3130332e38322e39322e302f32332d3234203d3e20313336303532.roa
Signing time:             Sun 03 May 2026 03:18:17 +0000
ROA not before:           Sun 03 May 2026 03:13:17 +0000
ROA not after:            Sun 02 May 2027 03:18:17 +0000
asID:                     136052
IP address blocks:        103.82.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl
                          rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:02:5f:49:ae:64:ad:8e:52:ad:32:42:bb:ce:90:ca:e6:dc:db:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496
        Validity
            Not Before: May  3 03:13:17 2026 GMT
            Not After : May  2 03:18:17 2027 GMT
        Subject: CN=1286AC7FBC779E12F5A438C997333B1E18D440A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:2b:01:d4:81:8f:dd:47:f0:e8:be:85:ad:
                    3b:1d:ea:a2:14:1b:0e:51:d6:60:97:01:d7:c0:c5:
                    ff:0a:eb:d1:25:f1:cd:cf:50:bb:c9:b7:a0:b3:8a:
                    38:a6:16:42:0b:d9:72:d2:29:c7:08:87:b7:78:aa:
                    8b:32:eb:ce:7f:9c:64:cd:ff:3b:30:a2:df:8c:a5:
                    39:d9:f5:39:da:de:13:46:fe:36:e2:9b:f3:3b:45:
                    df:af:3e:8d:52:b1:2e:01:bc:51:08:bf:c2:66:f6:
                    bc:07:4e:81:3d:fc:1d:c7:cd:03:b6:03:2c:bc:9c:
                    ac:3f:01:d4:07:da:47:36:42:6b:db:c9:4e:13:10:
                    8d:18:f5:55:0d:e7:14:22:7e:07:22:e7:cb:eb:08:
                    98:d9:f3:af:40:41:ea:fa:00:81:62:d2:89:a2:35:
                    b3:6d:d8:e0:c4:45:f4:81:fa:fe:bf:a7:94:65:f3:
                    22:a5:40:68:42:1c:50:32:f4:73:32:a3:cd:43:ba:
                    ce:70:89:f1:c4:58:61:bc:62:8a:31:33:64:67:62:
                    4e:c4:47:0d:ec:d1:ec:8a:3d:5b:c7:2a:79:c9:1f:
                    03:7a:c3:70:7b:57:33:63:e3:52:5d:c4:79:b3:78:
                    33:22:f5:3e:a3:e7:cc:6f:b6:30:5e:50:2b:60:f5:
                    c7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:86:AC:7F:BC:77:9E:12:F5:A4:38:C9:97:33:3B:1E:18:D4:40:A6
            X509v3 Authority Key Identifier:
                keyid:5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/3130332e38322e39322e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:75:a2:ae:7b:c2:ea:23:75:77:b0:af:fa:4d:25:39:d8:ad:
         e7:15:87:41:bf:8e:4e:6a:00:6b:61:bd:da:d3:32:bf:38:f5:
         b9:6f:2f:53:a7:fa:16:b3:a9:41:32:bc:8f:06:5b:9e:25:d9:
         0d:8c:e0:e6:a7:a9:e1:e6:98:f1:fb:03:66:e4:20:27:8a:43:
         e4:e6:71:25:b5:39:1c:33:b5:7e:44:34:ee:b7:22:5c:d5:b3:
         e0:55:fe:d2:d9:dc:5b:a2:17:ae:76:49:44:36:d9:d4:96:c1:
         b2:46:31:b1:16:f3:cd:17:e9:b2:40:59:d4:12:be:86:08:25:
         b1:3d:56:d2:92:b9:99:5d:82:84:42:ca:03:0d:86:d9:a4:50:
         87:2a:da:33:14:0a:26:7e:a4:a7:04:31:e0:04:02:40:d4:c4:
         e0:f9:63:0d:55:08:df:c5:b3:94:3c:1e:8a:42:da:1c:32:23:
         ae:03:5e:fb:e8:e5:92:7e:40:61:ef:dd:a5:3f:ed:ab:80:90:
         b4:5b:c1:61:14:17:77:da:d0:a8:3c:70:c9:a1:48:db:f9:33:
         99:de:93:79:c4:d2:29:cc:7e:30:5a:12:64:c2:7b:4a:3f:57:
         b2:64:da:f9:a7:2c:17:ea:36:9c:99:e4:e1:33:05:17:60:df:
         54:96:7d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:13 2026 by rpki-client