Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa
File:                     3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (raw, json)
Hash identifier:          LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=
Subject key identifier:   80:19:CE:82:6B:63:92:3F:AB:5A:3D:5E:97:04:48:A6:3D:F1:0D:8C
Certificate issuer:       /CN=5A5DD73D891416196AA5239D921D189D149B622B
Certificate serial:       0F38FABFD89DD284114CA6D3D430C72C9D6AE8C6
Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa
Signing time:             Sun 03 May 2026 02:12:32 +0000
ROA not before:           Sun 03 May 2026 02:07:32 +0000
ROA not after:            Sun 02 May 2027 02:12:32 +0000
asID:                     58495
IP address blocks:        103.190.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl
                          rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 21:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:38:fa:bf:d8:9d:d2:84:11:4c:a6:d3:d4:30:c7:2c:9d:6a:e8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B
        Validity
            Not Before: May  3 02:07:32 2026 GMT
            Not After : May  2 02:12:32 2027 GMT
        Subject: CN=8019CE826B63923FAB5A3D5E970448A63DF10D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:8b:5a:f4:b7:a6:97:56:5f:7b:1f:b6:95:
                    a3:ea:ba:74:6f:98:cb:05:00:d3:be:17:0c:dd:77:
                    75:84:ec:31:45:80:d8:dc:a3:6d:34:6d:e9:97:95:
                    a3:51:d4:0d:d1:ca:cb:47:e1:12:5e:76:d5:d3:b1:
                    f4:51:40:04:c2:84:2c:5f:02:60:03:ae:a9:61:29:
                    eb:ac:44:a3:d7:3c:6b:56:e7:48:ed:67:31:b7:56:
                    b3:94:ff:da:d7:cd:31:8d:84:39:94:ee:2d:b1:5c:
                    d4:49:0a:52:d1:45:dd:39:8b:9c:fa:ee:18:0e:6c:
                    1a:3c:f2:21:71:4b:a3:db:7b:d2:1e:43:2c:fe:b5:
                    a2:ef:8a:7b:32:19:45:6f:87:17:82:97:63:1d:fc:
                    08:fc:8d:c8:81:4a:cc:e8:7c:e7:06:52:23:dd:3e:
                    11:09:87:9d:85:d5:cc:38:87:1d:eb:ff:7b:8c:8c:
                    0c:28:25:b8:95:8c:1c:10:07:f6:27:e1:a0:a0:e6:
                    92:a9:3b:94:40:60:ab:bf:b7:9b:bd:93:75:16:6c:
                    75:a2:e9:e0:25:8d:38:06:35:43:bb:bb:16:ae:3e:
                    64:84:fd:4d:06:61:0d:52:8b:49:d1:7f:4d:9e:66:
                    82:89:37:f1:51:ec:74:2d:4f:bf:4f:6e:e4:10:17:
                    9b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:19:CE:82:6B:63:92:3F:AB:5A:3D:5E:97:04:48:A6:3D:F1:0D:8C
            X509v3 Authority Key Identifier:
                keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:7f:da:40:63:f0:01:a2:8b:5b:5d:04:8b:94:75:ac:9f:2f:
         2b:cd:a0:86:29:95:39:c4:bc:47:03:52:da:06:9e:69:d6:59:
         3d:51:09:6c:61:ab:1d:2b:23:dd:20:db:25:63:33:ea:89:fd:
         ac:45:0a:be:bd:6b:f3:c2:ed:8a:81:1d:6b:48:88:cc:f4:d4:
         60:1c:3b:5f:84:07:03:43:f9:92:0e:62:e3:b4:ca:a4:be:39:
         11:7d:76:40:8a:e1:70:d1:69:f8:0a:ee:98:28:76:6e:ac:60:
         b9:4d:06:59:a0:d1:c6:a8:a9:a0:2f:23:35:e5:c6:52:61:c4:
         72:3b:23:df:3c:d4:14:b3:5e:b5:b4:29:de:3c:34:ef:f9:40:
         53:23:34:6a:04:7d:b8:da:21:f3:00:51:29:74:1e:5b:24:44:
         fd:0f:85:18:ac:77:a2:fc:d8:22:5e:71:b4:82:dc:96:3c:fc:
         03:36:22:8a:cb:a6:01:3d:17:a9:ac:df:ab:fb:70:9d:6a:2b:
         be:19:82:32:78:dc:b3:bb:4a:4a:83:4e:f1:b7:ac:61:8a:4c:
         f5:38:11:2e:92:0c:03:c2:b6:b8:af:5f:06:7a:29:b5:ec:38:
         38:78:9e:20:84:09:d9:88:6b:2e:4a:15:bd:f8:94:9b:bf:3e:
         5b:9d:80:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:25 2026 by rpki-client