Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35312e302f32342d3234203d3e203538333831.roa
File:                     3130332e352e35312e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          jpiOTHzKh1vGnb3tSE/Xoje7GEL1N7x9x1Df56pKagM=
Subject key identifier:   59:0A:91:1F:08:86:52:C8:5C:75:53:2E:5B:88:DA:6F:B5:3F:64:42
Certificate issuer:       /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
Certificate serial:       15B17B5E57F357173B03D78AD45103474192CB2F
Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35312e302f32342d3234203d3e203538333831.roa
Signing time:             Sun 03 May 2026 02:24:45 +0000
ROA not before:           Sun 03 May 2026 02:19:45 +0000
ROA not after:            Sun 02 May 2027 02:24:45 +0000
asID:                     58381
IP address blocks:        103.5.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl
                          rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b1:7b:5e:57:f3:57:17:3b:03:d7:8a:d4:51:03:47:41:92:cb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
        Validity
            Not Before: May  3 02:19:45 2026 GMT
            Not After : May  2 02:24:45 2027 GMT
        Subject: CN=590A911F088652C85C75532E5B88DA6FB53F6442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:11:60:98:b2:29:34:c0:12:e2:ac:c4:62:3f:
                    45:07:56:cd:a5:39:44:1b:26:7f:b4:ee:a9:23:45:
                    c1:14:00:be:50:62:51:02:6e:42:1a:7a:a2:25:a9:
                    bf:49:67:b5:68:61:02:b5:7f:b9:f0:9c:5c:76:3e:
                    a6:f5:ab:fe:a4:4d:59:fb:05:74:a2:1a:14:44:63:
                    5d:ac:31:8d:75:0e:fc:18:2e:6f:2a:68:7a:02:2b:
                    3b:12:18:50:c9:96:6b:b5:15:8d:c7:1b:ec:36:89:
                    cd:94:a9:ff:a0:0d:f1:c1:c6:83:ea:df:d8:17:21:
                    b2:44:12:09:ad:18:6a:d7:f8:eb:4c:19:69:60:df:
                    b2:0e:d0:c4:a4:bb:aa:df:2a:af:70:ec:46:a1:c6:
                    e7:8c:b1:90:3e:19:d1:7b:ea:1f:54:23:78:9a:8d:
                    03:5d:43:a6:ac:6b:96:7f:7a:f9:a1:f3:58:8b:78:
                    c2:53:04:9c:48:81:77:ae:b0:7f:7d:34:22:a5:f3:
                    a3:e4:f5:9c:8a:ab:62:97:7e:91:6c:fb:4d:97:99:
                    ee:d9:c4:57:7e:38:e2:fb:16:58:ad:85:23:d6:08:
                    f0:e0:7a:0f:53:71:00:61:cc:9e:06:69:c0:d6:64:
                    af:e4:76:e8:f4:c8:ad:be:be:59:98:5f:73:ec:f3:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0A:91:1F:08:86:52:C8:5C:75:53:2E:5B:88:DA:6F:B5:3F:64:42
            X509v3 Authority Key Identifier:
                keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35312e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:45:32:8a:d9:2b:46:90:a2:96:a5:67:29:8d:2b:74:7a:c3:
         ab:85:54:68:06:f7:e9:11:42:f7:4e:fb:c9:da:f5:f0:64:fe:
         e0:20:a3:a4:28:8e:b8:23:b8:b1:a7:1b:aa:84:de:a2:b7:eb:
         1a:83:39:52:72:15:14:69:b2:00:6b:ef:60:9f:ab:41:a4:05:
         4e:a2:a2:66:9b:d6:6d:a7:29:69:43:6e:49:9a:21:39:d3:b5:
         1d:c8:2b:cb:7d:7d:b7:62:f8:f7:01:53:f2:f9:2d:38:99:c9:
         48:cf:b9:a7:70:04:83:ef:c2:07:2f:76:cf:c9:4f:3c:88:95:
         f1:7e:d2:43:93:3c:f0:f6:ce:f5:96:64:c7:57:13:04:21:e3:
         97:ef:9b:da:e1:bf:85:cf:17:72:74:85:ce:c2:45:ba:91:9c:
         6e:ff:31:e7:8c:fe:c7:95:e8:91:d0:a8:5e:aa:f1:a8:f0:80:
         dd:02:0c:72:91:73:b7:7c:23:2c:16:7a:92:83:aa:3a:32:96:
         0d:1a:e7:05:a1:98:92:3a:bd:68:5f:60:e8:94:d9:23:8b:28:
         3f:8a:65:48:c8:12:35:a1:fd:30:e8:43:6b:69:11:cb:f4:f3:
         e9:13:a1:e4:ba:56:4e:9c:93:8e:5d:3a:00:f7:bd:3e:f4:ac:
         be:50:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:05:45 2026 by rpki-client