Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/3130332e35312e34342e302f32322d3234203d3e20313333383139.roa
File:                     3130332e35312e34342e302f32322d3234203d3e20313333383139.roa (raw, json)
Hash identifier:          EFjpqm8knbBYVS8MEv0O0qPGBhbL6XcfULhYD/N81cU=
Subject key identifier:   FD:0A:9D:66:89:89:F7:38:08:3F:0D:E9:3B:09:D2:A4:18:4A:7B:9E
Certificate issuer:       /CN=6D4C6C2565E05B8B2B1A06BC5793873D43870505
Certificate serial:       3A4227F8FBA669FEE9DF23125C46D6889525C19D
Authority key identifier: 6D:4C:6C:25:65:E0:5B:8B:2B:1A:06:BC:57:93:87:3D:43:87:05:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4C6C2565E05B8B2B1A06BC5793873D43870505.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/3130332e35312e34342e302f32322d3234203d3e20313333383139.roa
Signing time:             Sun 03 May 2026 03:18:21 +0000
ROA not before:           Sun 03 May 2026 03:13:21 +0000
ROA not after:            Sun 02 May 2027 03:18:21 +0000
asID:                     133819
IP address blocks:        103.51.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/6D4C6C2565E05B8B2B1A06BC5793873D43870505.crl
                          rsync://rpki-rsync.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/6D4C6C2565E05B8B2B1A06BC5793873D43870505.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4C6C2565E05B8B2B1A06BC5793873D43870505.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:42:27:f8:fb:a6:69:fe:e9:df:23:12:5c:46:d6:88:95:25:c1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4C6C2565E05B8B2B1A06BC5793873D43870505
        Validity
            Not Before: May  3 03:13:21 2026 GMT
            Not After : May  2 03:18:21 2027 GMT
        Subject: CN=FD0A9D668989F738083F0DE93B09D2A4184A7B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:13:2b:7b:b2:c9:ce:77:f4:d3:d4:00:79:
                    74:7a:d5:19:9e:34:6c:7d:f3:c7:10:3a:df:25:aa:
                    4a:8e:51:e2:e8:f8:fc:48:ca:a2:be:43:e0:ce:8c:
                    0a:4e:03:42:65:0c:35:75:0f:21:82:92:bd:22:8c:
                    ef:75:91:04:d8:cb:1f:5c:bc:14:2e:ce:bd:e5:5d:
                    36:61:c9:90:c4:a5:83:db:50:8e:d0:cb:71:80:16:
                    55:07:32:0a:2f:a6:ee:a5:88:9f:7c:2d:77:c8:99:
                    b5:aa:fb:c9:8d:d9:07:29:46:92:50:f4:5a:50:fe:
                    3d:7f:cf:de:91:3e:87:59:24:91:b7:9e:82:08:75:
                    30:a1:8e:1b:e3:95:d3:9d:40:e8:3c:65:e2:09:e1:
                    56:c8:c9:ce:22:5b:12:6e:5d:14:50:24:fd:97:e4:
                    5a:f0:c3:08:1d:ef:8b:0b:b4:de:38:b7:92:78:16:
                    0f:51:79:ee:f1:fc:23:ea:c3:d2:50:c3:5c:b3:03:
                    f3:b2:74:d2:81:9b:e7:15:a3:42:1c:ab:f0:00:2f:
                    20:73:c6:01:d3:f1:87:e3:cc:e6:6b:56:a3:23:83:
                    5f:5f:cd:15:b3:87:39:5d:b8:85:21:74:66:87:dc:
                    dd:bb:1f:47:82:c2:88:a3:de:51:ca:d6:24:42:dc:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:9D:66:89:89:F7:38:08:3F:0D:E9:3B:09:D2:A4:18:4A:7B:9E
            X509v3 Authority Key Identifier:
                keyid:6D:4C:6C:25:65:E0:5B:8B:2B:1A:06:BC:57:93:87:3D:43:87:05:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/6D4C6C2565E05B8B2B1A06BC5793873D43870505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4C6C2565E05B8B2B1A06BC5793873D43870505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/3130332e35312e34342e302f32322d3234203d3e20313333383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:0e:d9:26:08:12:07:70:23:a4:a2:d2:a9:c2:f7:46:39:
         f3:03:e0:e4:f1:f0:a2:51:94:27:fe:ce:9a:3c:46:77:ff:a2:
         93:6d:23:be:79:96:70:7a:a5:49:95:cf:78:b7:52:f0:f5:0e:
         08:e5:91:0a:24:78:d5:43:fa:8c:22:2a:e1:76:f9:2e:70:62:
         9f:51:2c:aa:9d:ac:72:64:29:7c:45:ad:86:79:07:4a:d9:4b:
         6e:03:21:94:7c:0d:45:3a:48:f5:93:87:e6:d8:b0:ac:d7:75:
         8d:2e:13:d8:25:d6:05:51:25:91:82:d0:fa:90:ed:4c:f7:3e:
         d5:65:8e:82:84:29:f0:97:00:56:89:08:06:64:12:89:f9:12:
         ca:72:39:06:5c:22:2d:9b:34:a1:f5:df:7f:0c:16:37:53:d8:
         fd:95:9b:6f:af:80:e1:98:52:65:1e:53:f5:5e:82:60:ec:b0:
         26:ec:d8:b2:cc:88:bb:cc:61:11:a5:bb:9d:c8:21:93:80:c0:
         b9:e0:22:67:51:d8:2d:9c:90:8c:b0:51:06:c1:84:f6:fc:e4:
         0e:82:7c:89:4e:56:fc:ea:c6:f9:60:03:8a:43:a6:06:73:3c:
         61:9f:04:f1:6f:c1:26:6d:81:5b:fc:ed:3d:7d:a1:de:ba:7e:
         ef:a4:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:42 2026 by rpki-client