Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35372e302f32342d3234203d3e203538343734.roa
File:                     3130332e32382e35372e302f32342d3234203d3e203538343734.roa (raw, json)
Hash identifier:          zR5IozhEoErSJoyA48okITB8A0oyrUPSif4Fq0MXC9c=
Subject key identifier:   DA:82:14:76:DB:2E:43:22:60:93:BD:6A:BE:33:F2:FB:00:C4:5E:DC
Certificate issuer:       /CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Certificate serial:       4CABB3A71DFAF7C9EFE9CDC2CF91508A2FA6BE3A
Authority key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35372e302f32342d3234203d3e203538343734.roa
Signing time:             Sun 03 May 2026 02:24:24 +0000
ROA not before:           Sun 03 May 2026 02:19:24 +0000
ROA not after:            Sun 02 May 2027 02:24:24 +0000
asID:                     58474
IP address blocks:        103.28.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
                          rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 21:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ab:b3:a7:1d:fa:f7:c9:ef:e9:cd:c2:cf:91:50:8a:2f:a6:be:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
        Validity
            Not Before: May  3 02:19:24 2026 GMT
            Not After : May  2 02:24:24 2027 GMT
        Subject: CN=DA821476DB2E43226093BD6ABE33F2FB00C45EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:84:a2:69:c7:22:7b:a3:db:43:2a:2b:a8:15:
                    cf:6e:a1:b1:d3:69:93:a0:b0:18:ec:54:2b:92:47:
                    62:e2:70:d3:2d:8e:d2:80:bd:30:67:ae:dd:ef:ca:
                    4d:a7:37:84:7d:d9:ed:40:e1:b9:85:dc:b7:2b:7f:
                    8f:25:b1:8b:f4:66:5e:7f:0e:22:4e:b6:05:6d:e8:
                    ae:f4:40:9d:e7:93:c1:bf:2c:ab:9f:7f:38:78:7d:
                    fa:eb:53:2a:1d:b1:3a:f1:3f:2e:c1:c4:a8:c2:a2:
                    3b:2c:5c:e5:38:f1:95:75:d3:ff:0f:cf:ff:9b:1e:
                    8e:a8:d3:be:64:d8:22:73:c4:af:b6:48:60:60:be:
                    52:00:05:21:6c:1d:0e:dc:cc:0c:bc:53:54:49:83:
                    01:4a:b7:42:05:30:8b:07:a0:be:30:64:1d:65:f1:
                    6e:d4:71:f6:fa:f0:ae:b3:f0:93:08:25:4b:31:c6:
                    64:ab:78:21:20:ff:3e:be:d0:d5:de:c5:d1:f0:fe:
                    f7:7c:74:a1:9b:b5:0f:13:44:57:6f:ee:fc:1d:04:
                    95:b5:c7:65:1f:bf:52:10:d9:0c:d9:dd:da:33:f1:
                    bf:4f:8a:82:ca:c0:14:28:45:0a:e5:27:0d:25:f1:
                    03:4d:a3:49:99:73:d7:82:33:f2:1c:bc:fc:b5:2c:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:82:14:76:DB:2E:43:22:60:93:BD:6A:BE:33:F2:FB:00:C4:5E:DC
            X509v3 Authority Key Identifier:
                keyid:8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35372e302f32342d3234203d3e203538343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:ed:ce:7e:ab:ad:ee:39:5f:1d:64:2c:eb:4b:76:aa:a3:ee:
         c4:62:f6:6d:e8:3f:f9:4f:96:6f:af:3c:9a:47:63:c3:da:01:
         5c:0c:5c:7e:f4:f9:ea:d9:7c:6a:c6:89:61:9d:dc:d9:70:f4:
         18:c2:fc:ad:84:57:a8:ed:32:ff:25:97:42:70:cc:f2:7f:91:
         47:8d:d8:a0:cd:59:ef:ad:56:d3:f4:46:49:1a:d6:9f:c8:27:
         36:8d:06:cc:46:c3:d1:42:9c:a7:11:04:16:c5:c3:df:2a:c7:
         f8:d0:f1:3d:d6:ce:ba:19:2e:09:d6:93:48:e4:99:39:69:ec:
         4c:10:a2:ee:8c:89:44:77:f9:f5:14:33:29:47:50:bf:21:57:
         84:75:da:cf:21:43:86:31:99:2e:b2:52:57:14:a0:96:ff:24:
         d3:af:e3:e8:06:de:0a:66:7a:31:f4:15:b3:d8:5f:d3:db:7e:
         d5:4a:31:4f:29:2d:c7:07:8a:b0:0e:33:9e:31:05:4f:50:fc:
         0e:5b:df:fa:d6:c2:f2:35:f9:96:19:2f:80:a4:a7:4b:3a:25:
         d8:ac:43:cc:37:f2:08:68:07:a0:da:1c:31:98:dd:ff:c8:6c:
         4f:61:6c:b4:a3:8d:f4:4f:b2:57:22:2f:d0:ce:1d:2c:ac:b8:
         e2:bf:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 13:02:58 2026 by rpki-client