Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa
File:                     3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (raw, json)
Hash identifier:          6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=
Subject key identifier:   2C:CC:43:D8:23:55:39:76:27:D1:54:CC:60:A8:D8:76:2F:2D:D5:C7
Certificate issuer:       /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463
Certificate serial:       107FD0086B067454B13B251BBE3F6A77609C0080
Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa
Signing time:             Sun 03 May 2026 02:24:12 +0000
ROA not before:           Sun 03 May 2026 02:19:12 +0000
ROA not after:            Sun 02 May 2027 02:24:12 +0000
asID:                     150470
IP address blocks:        103.51.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl
                          rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7f:d0:08:6b:06:74:54:b1:3b:25:1b:be:3f:6a:77:60:9c:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463
        Validity
            Not Before: May  3 02:19:12 2026 GMT
            Not After : May  2 02:24:12 2027 GMT
        Subject: CN=2CCC43D82355397627D154CC60A8D8762F2DD5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:6b:3d:37:90:d7:54:6e:b0:bd:bb:1f:ab:
                    64:d1:85:04:8f:56:e2:0b:ec:fd:e6:56:25:d8:f8:
                    7d:2c:a1:d6:6f:72:96:96:d3:47:46:2c:d5:95:a4:
                    55:72:03:d9:09:40:90:4b:73:d6:07:f2:f8:a8:f7:
                    01:9d:fd:14:45:69:e3:69:fc:23:f4:0a:9e:d4:59:
                    f1:27:96:bf:cb:ad:f9:2a:c7:de:46:00:b4:22:05:
                    b2:b8:f8:99:2c:03:5b:de:35:0f:35:8b:69:a8:d4:
                    bf:f1:6b:cd:07:4c:20:31:4f:53:9e:e5:a9:8c:d3:
                    b3:7a:8b:e5:5c:53:0a:aa:51:93:aa:db:29:0b:fd:
                    0b:a7:aa:db:d8:c1:e9:33:c7:46:c8:5c:46:9f:fc:
                    eb:67:aa:ce:0b:24:65:9c:06:ae:5d:d3:be:1b:50:
                    ed:28:56:84:45:57:38:21:83:6e:d4:88:ed:e7:8c:
                    bc:0d:23:9d:fe:8a:08:84:84:99:bc:96:d0:de:eb:
                    05:99:e9:20:a8:68:22:d4:63:91:4c:89:29:a4:7d:
                    15:a5:b3:fc:ca:79:53:6a:f6:c7:d0:8c:f2:fa:84:
                    84:ff:35:f5:e5:d3:ac:12:88:d1:c4:9e:d0:b8:25:
                    d9:2e:ff:94:aa:3e:0f:16:ed:01:69:27:f4:07:95:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:43:D8:23:55:39:76:27:D1:54:CC:60:A8:D8:76:2F:2D:D5:C7
            X509v3 Authority Key Identifier:
                keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:89:84:79:cb:e7:fb:07:41:b2:1d:7b:af:04:bb:ed:51:1b:
         cd:de:11:42:2e:a8:d5:f4:4e:85:ee:33:8c:54:6e:b7:7c:68:
         ea:51:60:87:98:ac:0b:33:f0:8d:e8:45:41:38:8b:f3:82:06:
         39:01:4a:2a:4b:5a:16:da:1d:04:75:fa:d1:fc:64:92:ee:53:
         68:1e:1d:a1:29:ab:7c:49:e1:8e:0b:9e:ac:7b:b1:93:cc:d3:
         1b:b5:bf:34:20:50:e7:4e:a8:15:51:f2:3a:29:0f:a0:48:cb:
         3d:bb:c8:ae:28:4f:96:32:8e:6f:e3:19:1d:8e:34:d4:84:e4:
         0e:f9:a7:49:da:9a:90:07:c1:ad:9a:0c:71:a1:8c:02:9a:7f:
         90:5c:7a:f5:5f:4f:4c:ee:24:dd:c2:1a:1c:8d:18:8d:38:35:
         ba:28:7b:a2:f7:cc:84:78:e6:af:18:cd:6b:6d:4b:98:c7:c6:
         79:3b:97:f8:57:aa:25:2c:7e:1c:20:2c:7c:a1:1f:9a:cd:44:
         af:41:2c:73:2a:fe:e0:7c:36:3a:c2:28:c0:1e:a0:00:2d:3b:
         99:67:45:60:e9:9b:66:d6:c7:14:c5:f5:9e:9b:77:df:4b:45:
         67:6d:94:9b:36:f3:2e:59:a4:bb:5d:33:01:28:f6:84:69:fd:
         75:a2:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 18:57:13 2026 by rpki-client