Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa
File:                     3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (raw, json)
Hash identifier:          mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=
Subject key identifier:   EB:3C:C1:26:BC:BC:50:BA:65:44:50:C5:24:22:47:29:1D:2B:B7:86
Certificate issuer:       /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
Certificate serial:       57818C3ADCCC1D9D0CFAC334B0052A7921CEC4D0
Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa
Signing time:             Sun 03 May 2026 03:19:42 +0000
ROA not before:           Sun 03 May 2026 03:14:42 +0000
ROA not after:            Sun 02 May 2027 03:19:42 +0000
asID:                     152057
IP address blocks:        103.164.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl
                          rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 20:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:81:8c:3a:dc:cc:1d:9d:0c:fa:c3:34:b0:05:2a:79:21:ce:c4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
        Validity
            Not Before: May  3 03:14:42 2026 GMT
            Not After : May  2 03:19:42 2027 GMT
        Subject: CN=EB3CC126BCBC50BA654450C5242247291D2BB786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:4a:ad:de:6e:52:47:c6:1e:0a:13:53:a7:
                    a3:51:0f:61:9d:1d:b2:08:95:da:05:37:df:29:b3:
                    88:86:4a:f2:dd:f2:eb:55:7f:a0:ab:4b:c2:82:b6:
                    0c:e1:48:f7:94:42:82:02:83:3c:d2:66:cc:f4:77:
                    45:c6:b1:08:8a:3b:eb:2e:f0:dc:ab:bb:24:4c:e1:
                    72:f0:99:56:f7:84:af:2d:9c:9b:81:05:fe:d2:e8:
                    aa:a9:6a:ad:53:19:85:ba:c3:e7:0f:ec:d4:4b:fb:
                    59:3a:24:ce:57:28:a8:8f:dc:0e:b5:0a:25:b7:f2:
                    f8:f3:ad:e9:e1:d9:ee:c5:52:0c:da:3b:51:f0:f4:
                    cc:4b:73:39:2b:26:70:34:55:dd:7d:50:99:61:09:
                    83:03:5c:06:f3:f7:06:8a:13:c3:93:eb:99:86:3e:
                    20:34:ad:3a:b7:91:a8:1d:f3:9d:f6:c9:3c:f6:a9:
                    3e:c6:8b:15:3d:c3:a9:04:e1:23:97:47:ce:79:db:
                    75:40:26:e1:c5:3f:b3:8d:3c:2b:9d:6d:11:29:4d:
                    4c:79:2c:a0:80:5f:f7:d4:9b:cf:ad:e5:67:ce:d9:
                    06:61:a7:d3:ff:59:8d:6c:cb:72:01:0f:61:06:8e:
                    34:99:4e:f7:90:5f:c8:0e:18:3d:fc:df:37:e9:00:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3C:C1:26:BC:BC:50:BA:65:44:50:C5:24:22:47:29:1D:2B:B7:86
            X509v3 Authority Key Identifier:
                keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:d3:c5:fa:3e:38:a6:8b:fc:3b:a7:a9:14:72:57:44:38:75:
         92:ff:bd:74:3a:2e:6c:7a:53:d5:e9:6d:6c:91:5f:f2:9d:58:
         e9:38:0c:56:e2:8f:11:3e:4a:f1:a8:97:d5:5a:09:f7:f9:42:
         e7:4a:45:b7:94:a1:85:0f:b3:a4:78:ab:6d:d8:65:b4:1d:6c:
         67:7b:d5:93:c2:ab:fa:54:8e:11:92:db:f9:9f:a6:cf:7e:33:
         9a:68:d0:e8:53:3b:ff:1e:3c:e1:c2:8b:da:41:ef:28:a2:70:
         dd:be:85:b3:08:16:eb:3e:e6:e7:d6:a8:7e:75:0b:f3:ab:c8:
         f2:50:bb:20:1c:c2:e5:66:c1:9c:43:ab:c4:51:e1:c1:b0:c6:
         50:0a:76:a2:fc:98:c5:33:7b:c9:0b:cd:24:53:77:18:fb:c6:
         3f:f9:31:a2:5a:2e:a4:3c:71:8a:00:c6:22:bd:9e:7e:47:4d:
         09:9b:4b:80:9a:89:bd:da:9b:34:0b:7b:2c:da:a9:e2:b3:f1:
         9d:39:25:6b:8f:e2:f2:69:6e:ee:02:90:98:42:ce:55:e7:23:
         46:12:ef:87:26:9f:c2:46:b0:3d:a0:b6:41:a4:8f:0b:06:39:
         98:5e:50:54:54:e9:cc:90:ad:b3:d7:ed:fa:cc:c5:71:21:8f:
         c4:47:34:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 08:10:18 2026 by rpki-client