Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3234203d3e203538333831.roa
File:                     3130332e352e35302e302f32332d3234203d3e203538333831.roa (raw, json)
Hash identifier:          iKmDknm+sz9G+4ieO2jOHSbGQz1z9iCG43k/bYAHB3k=
Subject key identifier:   A4:DA:48:9A:37:DD:D2:CC:58:20:56:29:E4:15:FC:24:37:6B:74:3C
Certificate issuer:       /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
Certificate serial:       7655C8C140BD94ECEA34AC6F3B628AD59C7A22AF
Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3234203d3e203538333831.roa
Signing time:             Sun 03 May 2026 02:24:44 +0000
ROA not before:           Sun 03 May 2026 02:19:44 +0000
ROA not after:            Sun 02 May 2027 02:24:44 +0000
asID:                     58381
IP address blocks:        103.5.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl
                          rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:55:c8:c1:40:bd:94:ec:ea:34:ac:6f:3b:62:8a:d5:9c:7a:22:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
        Validity
            Not Before: May  3 02:19:44 2026 GMT
            Not After : May  2 02:24:44 2027 GMT
        Subject: CN=A4DA489A37DDD2CC58205629E415FC24376B743C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:8c:1a:1f:b5:1a:bc:1f:f5:6d:e4:a7:99:
                    c8:ca:19:0f:c7:d3:f4:7d:c0:ef:2b:85:6c:90:aa:
                    c9:9f:d2:f7:91:c3:8d:e4:a7:7c:de:1e:0e:30:79:
                    01:61:09:55:bb:91:9d:4d:91:9d:cc:de:24:2a:8c:
                    04:a2:f8:f3:2f:88:e9:7a:0e:4e:b2:85:25:cf:1e:
                    89:87:4f:a6:0a:74:bb:63:6b:f7:b9:98:a3:d4:57:
                    78:cd:61:4a:30:21:ab:4a:ae:0d:96:64:84:7a:1b:
                    1f:68:13:70:0c:25:00:fa:65:9a:62:59:28:5b:f8:
                    67:d1:bb:96:1f:c7:98:95:7c:2c:35:e7:51:5e:10:
                    1c:77:87:29:ff:9b:9a:13:17:b3:41:b6:58:99:22:
                    b1:79:74:ba:43:77:51:dc:f4:d4:15:48:e4:f0:35:
                    fe:1c:41:f0:23:18:a6:e0:d2:0e:60:76:10:21:6a:
                    f9:1b:40:ea:d7:af:a8:2d:a6:3e:06:52:be:ea:20:
                    a3:0b:43:e4:c9:ff:6a:12:d9:1b:f2:3d:5c:16:45:
                    0d:84:f8:1b:2f:fd:44:1b:f2:38:f0:a0:8a:36:34:
                    ed:7f:da:3c:da:8c:89:00:58:64:ad:e3:51:15:23:
                    fc:c8:19:c0:73:34:09:d9:33:44:9e:49:50:09:ce:
                    b2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DA:48:9A:37:DD:D2:CC:58:20:56:29:E4:15:FC:24:37:6B:74:3C
            X509v3 Authority Key Identifier:
                keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:3d:8a:63:da:92:90:b0:4b:95:26:3d:9d:27:ac:69:9f:a2:
         25:78:2a:7d:d8:ce:95:0e:f4:cc:c2:fd:38:a2:ff:d9:59:37:
         c2:5b:53:0c:dc:52:e1:af:0a:a5:68:6f:99:73:29:10:52:56:
         1d:cc:22:94:a5:68:58:c4:21:5a:4b:5a:b2:d5:9d:85:fe:de:
         1f:4b:42:b3:88:e7:9d:ab:c4:c1:ec:c1:81:b8:dc:a6:49:65:
         a5:8d:e7:b2:72:82:cf:4a:42:03:82:56:46:0c:e6:98:81:36:
         b3:8d:41:86:20:fd:51:a8:2d:9f:39:cf:89:54:43:1b:dd:0b:
         35:a7:48:d0:5d:58:70:01:9f:47:21:0c:b0:67:02:a4:fb:d2:
         e1:91:f9:27:8d:eb:1c:97:69:af:32:d8:1e:a1:17:1b:36:ef:
         af:f4:23:6c:9b:0b:e1:76:50:c2:9b:1d:6d:c3:b0:85:7d:fd:
         6e:25:f6:79:7a:70:b2:1d:77:bb:d2:90:2d:c2:67:45:72:75:
         d3:d3:8d:c1:79:42:d7:ac:8e:d0:07:b2:3e:15:8b:8b:6c:39:
         c3:a7:b9:f9:26:81:b1:2e:11:30:72:73:1c:cc:92:cd:9e:c7:
         71:4e:81:bc:2c:cc:00:80:c5:76:d3:80:81:bf:b8:89:c1:e5:
         05:d4:ef:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:05:16 2026 by rpki-client