Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32342d3234203d3e20313333383131.roa
File:                     3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (raw, json)
Hash identifier:          nZpFFdv+h1rTWhfuw6ZS6/7x9CDvhNusGoKBRBaU3O4=
Subject key identifier:   95:C8:D8:2F:2D:93:AC:D7:F0:CB:55:57:76:1A:A5:AD:65:BC:34:CB
Certificate issuer:       /CN=7D748C9993BD612EB4DED86D78A542650C0739D2
Certificate serial:       7515615A3ABED6C99466D15BA131FCAFB64DF518
Authority key identifier: 7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32342d3234203d3e20313333383131.roa
Signing time:             Sun 03 May 2026 03:18:54 +0000
ROA not before:           Sun 03 May 2026 03:13:54 +0000
ROA not after:            Sun 02 May 2027 03:18:54 +0000
asID:                     133811
IP address blocks:        103.52.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl
                          rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:15:61:5a:3a:be:d6:c9:94:66:d1:5b:a1:31:fc:af:b6:4d:f5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D748C9993BD612EB4DED86D78A542650C0739D2
        Validity
            Not Before: May  3 03:13:54 2026 GMT
            Not After : May  2 03:18:54 2027 GMT
        Subject: CN=95C8D82F2D93ACD7F0CB5557761AA5AD65BC34CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:20:7f:80:8a:ad:d4:aa:ce:24:05:f4:09:
                    40:2f:1e:7b:c3:66:55:3b:f4:b8:82:73:f0:db:e9:
                    c9:03:9a:ec:9b:cb:af:cc:3b:3f:d6:16:68:09:21:
                    16:72:aa:f3:70:47:e2:d0:d5:31:87:8c:4f:4a:cd:
                    ff:72:b9:a8:e0:5b:77:9a:41:c7:29:7e:32:fc:30:
                    5f:00:b9:22:ec:5a:cf:4c:73:90:cf:96:a2:0f:11:
                    fa:e4:1d:a4:d2:a7:dc:79:c2:7d:e1:ec:e6:8d:f2:
                    75:e6:31:27:41:b0:6c:4a:36:6c:94:68:6b:77:65:
                    58:60:67:64:50:0c:53:95:84:2c:3e:3a:98:4b:c0:
                    b7:13:c9:46:5a:90:b9:0c:48:d1:22:03:62:9d:82:
                    7d:04:27:11:b2:6a:b1:09:25:d8:f0:04:19:de:1a:
                    7f:4f:de:ff:bd:5f:dd:ab:ff:0e:94:f9:9f:e9:2a:
                    d5:5c:f5:43:9b:49:5c:da:c2:78:0b:a1:55:77:f3:
                    99:44:48:68:af:fe:29:d5:30:a3:5c:3f:e8:97:a1:
                    4d:c4:0a:eb:43:c3:71:62:b7:18:89:53:f4:f2:58:
                    25:6c:9e:b4:2d:26:1f:1e:0e:d1:2f:26:44:41:6b:
                    cb:d8:67:e3:a3:c7:66:9d:eb:1d:e7:f1:36:d8:2a:
                    3e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C8:D8:2F:2D:93:AC:D7:F0:CB:55:57:76:1A:A5:AD:65:BC:34:CB
            X509v3 Authority Key Identifier:
                keyid:7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32342d3234203d3e20313333383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f9:25:16:16:99:d4:ef:dd:c2:16:71:f7:3f:9e:1f:80:4e:
         b4:24:f4:7e:c8:8c:3d:13:e1:fa:21:91:da:0d:53:d2:38:ee:
         fd:f5:99:b4:54:56:2c:b1:12:c7:27:3a:dd:e3:8f:c0:9e:14:
         f4:bc:f9:5d:ec:81:d5:f6:2a:b5:4f:18:7c:20:c6:14:61:7e:
         da:27:3e:a5:e4:eb:0c:0f:9a:85:2d:da:71:2c:f9:58:a3:c8:
         da:c1:21:39:ca:49:00:ef:81:c7:7c:dc:f7:83:18:86:53:dd:
         2c:78:b7:e6:5f:22:27:f8:b1:1b:e9:e5:c4:80:d5:e9:a7:2f:
         c5:d0:bb:d7:32:04:43:0e:dc:92:a1:ae:b8:9a:b3:c6:b0:90:
         1a:69:05:2d:e0:82:0c:f4:d8:fc:b3:59:e3:98:8a:53:b1:b2:
         13:4a:87:36:0b:1d:c1:45:4d:f4:88:11:24:c7:f1:7e:4d:82:
         08:90:71:5e:1a:62:2f:40:54:86:57:54:7f:d6:dc:e7:70:2c:
         e6:3d:ae:30:46:16:65:15:c1:ce:63:a4:bf:e6:c1:24:4f:dd:
         58:66:f6:62:77:69:31:92:ea:87:3d:4c:6c:08:f6:71:b4:e3:
         85:4f:c3:cc:09:d4:a6:60:2c:38:04:49:cb:59:ac:c4:5b:8e:
         04:1b:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:42 2026 by rpki-client