Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa
File:                     3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (raw, json)
Hash identifier:          eTmPN3t/PaM9CQFDKpglxNKRVsgYw16hoKgfbTOHlZI=
Subject key identifier:   AA:FC:B4:85:84:A2:03:3B:1E:FC:26:97:4E:BF:74:5F:02:6A:2A:0F
Certificate issuer:       /CN=585117D9F8A558479018DDF94830A5C4C66BA76D
Certificate serial:       43EB5894A31372E3944885A421C7503EE74BFA26
Authority key identifier: 58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa
Signing time:             Sun 03 May 2026 03:18:31 +0000
ROA not before:           Sun 03 May 2026 03:13:31 +0000
ROA not after:            Sun 02 May 2027 03:18:31 +0000
asID:                     133835
IP address blocks:        103.58.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl
                          rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:eb:58:94:a3:13:72:e3:94:48:85:a4:21:c7:50:3e:e7:4b:fa:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585117D9F8A558479018DDF94830A5C4C66BA76D
        Validity
            Not Before: May  3 03:13:31 2026 GMT
            Not After : May  2 03:18:31 2027 GMT
        Subject: CN=AAFCB48584A2033B1EFC26974EBF745F026A2A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:77:02:03:28:b4:91:c4:73:d2:eb:f7:d0:97:
                    96:f2:b3:e1:25:c6:9a:9e:0d:12:8c:ab:74:7b:91:
                    a3:a6:b2:8d:d7:e0:db:88:a8:a3:52:e0:79:ab:71:
                    fc:00:e4:60:43:5d:d5:9c:8f:d5:d0:17:29:8e:30:
                    56:b9:24:0d:22:7e:8f:3b:8f:1d:6b:6f:9e:4e:9d:
                    35:46:d2:c4:e0:3e:55:88:df:09:fd:6a:4f:5f:9f:
                    61:90:56:48:13:4f:f4:d6:e1:f4:c4:d4:aa:f8:69:
                    c2:d2:8d:1a:50:ed:db:cc:05:f0:c5:2e:dc:f9:c7:
                    4a:4e:11:ee:e9:3b:75:76:b5:c2:60:02:e4:b8:28:
                    0f:22:0d:5e:80:b0:a9:93:5f:1a:87:c3:2e:d5:7a:
                    b5:5a:78:ac:22:0c:97:08:2e:66:0d:53:aa:92:d2:
                    f5:2d:b2:92:5e:04:9b:57:12:e3:77:b2:6a:5d:68:
                    22:20:db:08:c4:e8:cb:c8:95:43:98:4d:b4:25:56:
                    2b:de:70:b5:65:6f:18:fd:3a:ac:11:9f:49:86:0b:
                    ef:1e:d2:0b:3b:e6:0f:92:42:fe:e0:d1:dd:6f:86:
                    db:d1:5c:bb:15:b8:a0:6d:51:15:98:c7:15:5b:11:
                    c2:d1:79:37:b3:d9:cf:ca:e8:8b:34:be:a0:0a:a5:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:B4:85:84:A2:03:3B:1E:FC:26:97:4E:BF:74:5F:02:6A:2A:0F
            X509v3 Authority Key Identifier:
                keyid:58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:34:0b:f7:79:80:ba:8e:3a:5b:5d:45:bf:f4:5b:95:b6:e7:
         cc:be:68:64:87:c3:62:35:1e:a9:fa:e1:72:6d:74:12:19:2a:
         2c:a4:f0:05:12:45:ab:02:6a:9d:5b:39:ff:48:93:3e:c2:93:
         c6:2d:3b:3a:86:f6:e6:34:32:66:63:37:1f:ff:e0:fb:c5:82:
         c1:1b:f1:47:24:b3:fc:a6:f1:ed:7b:e0:da:e2:6f:dc:d4:bd:
         77:41:5d:b3:7e:f9:19:37:b7:c1:12:6a:a5:d7:8a:0e:fb:22:
         f1:fd:ba:c7:b7:46:f9:19:11:c9:fa:bb:fc:51:bc:b0:33:68:
         d6:f7:0c:db:bd:e1:00:e8:1e:48:24:5d:59:1b:c0:9e:4f:41:
         16:55:10:d7:38:e8:c0:57:42:37:f4:5b:7d:0e:9c:b2:bd:54:
         c0:ea:a2:ec:5c:eb:c5:32:42:27:5c:d6:57:db:34:bd:82:9f:
         60:87:e4:7b:5a:3e:b0:1f:92:1c:68:b1:02:be:58:50:cf:04:
         46:ef:e4:23:09:7c:28:3a:93:5d:fe:8c:19:00:f8:c7:97:85:
         7b:08:7f:b8:08:16:d6:f4:ab:2f:02:20:57:e1:df:97:e8:04:
         2b:05:ed:18:13:88:0c:b6:dd:b8:2b:9f:00:3b:7a:26:f9:5d:
         fe:0d:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:14 2026 by rpki-client