Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa
File:                     3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (raw, json)
Hash identifier:          53bRIBjSwWo7fUHZf8q8wJM22KHC6YENy9XlgqItFdw=
Subject key identifier:   EF:22:4F:87:66:A8:11:85:A6:88:24:AC:42:0F:D2:A2:02:B3:1E:E4
Certificate issuer:       /CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
Certificate serial:       5A5E0AFA3E4FF016FECA8DB4FD3A2BA4786D3660
Authority key identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa
Signing time:             Sun 03 May 2026 03:19:31 +0000
ROA not before:           Sun 03 May 2026 03:14:31 +0000
ROA not after:            Sun 02 May 2027 03:19:31 +0000
asID:                     150483
IP address blocks:        103.54.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl
                          rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5e:0a:fa:3e:4f:f0:16:fe:ca:8d:b4:fd:3a:2b:a4:78:6d:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
        Validity
            Not Before: May  3 03:14:31 2026 GMT
            Not After : May  2 03:19:31 2027 GMT
        Subject: CN=EF224F8766A81185A68824AC420FD2A202B31EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8f:2d:fc:2f:9a:16:be:41:5b:22:f6:30:9a:
                    47:8f:a2:07:b8:5b:0a:70:b6:84:8c:e7:1e:40:25:
                    02:bb:c8:cd:60:7b:ba:22:77:52:1f:9d:c7:0d:bb:
                    45:44:db:45:c1:15:a4:0a:f4:b6:65:22:86:e9:fb:
                    f0:b1:b6:dd:39:c4:e6:24:3d:26:aa:03:c1:e0:32:
                    01:47:80:9c:9c:8c:03:a4:36:54:3d:20:27:17:de:
                    c6:9f:99:1d:c9:b4:42:bf:76:5a:a6:c0:fd:8e:aa:
                    4c:a5:f2:d4:e8:76:c5:b1:86:ee:e8:46:5d:86:a6:
                    11:28:3f:9f:4c:2d:53:96:3c:93:e1:e8:1d:e5:28:
                    b2:79:bd:62:cd:a4:32:fc:ac:20:e9:e2:7c:c7:22:
                    40:eb:b0:6b:5a:07:6e:a3:8f:ac:46:f3:b0:b6:82:
                    01:5b:af:af:0e:f0:dd:fb:cc:3e:be:c9:b1:39:8b:
                    cb:23:5a:89:23:77:a9:51:98:f7:0e:17:ec:67:68:
                    49:8f:a5:81:19:47:f0:8b:cb:3c:05:4e:ec:ff:88:
                    f8:27:6d:6d:35:b4:eb:00:88:0f:10:2b:65:f6:d1:
                    70:5a:b9:f1:12:dc:fd:ea:f1:33:3c:b5:2e:ad:01:
                    71:42:8a:b6:ea:56:4e:e8:0b:72:5b:0c:87:d7:4d:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:22:4F:87:66:A8:11:85:A6:88:24:AC:42:0F:D2:A2:02:B3:1E:E4
            X509v3 Authority Key Identifier:
                keyid:A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:fe:b2:26:06:6b:2e:c8:c9:d0:6c:12:52:b6:6a:17:d7:59:
         2b:f9:b3:15:86:4e:51:b8:ea:dc:44:b7:fa:c6:74:6e:f8:96:
         04:eb:8f:cc:a6:70:8f:d5:2f:df:c2:e0:1e:5b:92:74:7c:0e:
         99:d7:ae:25:f1:1a:49:2c:06:36:16:9d:d4:6b:bb:c9:a4:54:
         7d:ca:fd:85:30:7e:40:97:88:69:8b:8d:d4:24:fd:e4:b7:c0:
         b1:cc:76:ab:99:37:6a:73:c6:00:13:46:fc:da:2b:3b:32:e5:
         ca:b2:35:29:77:e2:7d:e5:68:d7:7d:d6:c9:0f:a6:fc:0f:66:
         45:27:f4:ce:c5:d1:8c:8f:33:07:d8:90:65:ee:ae:93:99:42:
         4b:ab:4d:3c:06:1c:e6:22:fd:73:92:4a:97:d6:b3:12:21:85:
         0d:34:4e:15:c5:a3:f7:a8:3b:66:4e:33:75:d4:ea:d9:ea:90:
         8e:7d:26:c2:bf:62:30:d8:b3:44:e9:51:57:5f:1f:de:51:55:
         7e:3e:ca:81:c4:6f:30:0b:2f:75:cd:b9:e4:b0:40:04:ad:f5:
         62:33:83:ce:a4:e0:d2:eb:8b:b6:e6:8f:23:59:08:f7:7e:54:
         5f:9a:8f:58:fb:82:7d:35:25:37:14:a1:62:9b:74:d6:73:e2:
         0e:45:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:25 2026 by rpki-client