Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa
File:                     3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (raw, json)
Hash identifier:          BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=
Subject key identifier:   D6:C8:44:10:BF:52:5B:8A:08:33:E3:B9:2B:2F:6A:4B:C6:40:C2:65
Certificate issuer:       /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61
Certificate serial:       2EEFEE0828B2BC56A60E8CCAA37A9468E4D3C900
Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa
Signing time:             Sun 03 May 2026 02:39:29 +0000
ROA not before:           Sun 03 May 2026 02:34:29 +0000
ROA not after:            Sun 02 May 2027 02:39:29 +0000
asID:                     136873
IP address blocks:        103.105.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl
                          rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ef:ee:08:28:b2:bc:56:a6:0e:8c:ca:a3:7a:94:68:e4:d3:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61
        Validity
            Not Before: May  3 02:34:29 2026 GMT
            Not After : May  2 02:39:29 2027 GMT
        Subject: CN=D6C84410BF525B8A0833E3B92B2F6A4BC640C265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:9a:cf:78:49:d5:b5:d1:42:04:81:29:75:
                    6c:62:02:6c:55:5c:d2:07:7d:6a:51:62:7f:78:7b:
                    5b:17:cb:97:bb:c8:24:1e:5f:a0:c4:4c:76:cd:04:
                    f9:24:20:52:39:4f:d8:cd:ef:9d:a5:3b:b5:06:33:
                    8b:67:ea:a1:55:fa:52:be:b3:f6:de:f8:f9:94:d5:
                    b1:bc:65:3e:e2:61:d7:29:bb:0b:c6:6d:2f:fa:f8:
                    a1:ed:4a:6d:a7:0a:89:d5:c0:99:18:2b:2c:ff:8a:
                    87:e7:23:78:ba:4f:3e:0c:15:83:d3:bb:86:51:db:
                    74:a7:0e:ec:82:e7:e9:a5:de:6b:ff:ae:13:71:36:
                    6e:dc:ba:d5:d9:23:34:a4:4b:54:d0:be:b4:13:41:
                    34:bd:7f:0c:d8:12:47:93:dd:8e:1d:87:4b:93:75:
                    32:e1:77:f2:7a:6d:dd:e9:f9:71:2d:7a:2a:9b:10:
                    74:84:fb:2e:cb:90:f6:d7:a1:ac:6e:0c:13:cf:c8:
                    ae:1a:ff:0a:af:46:98:ec:18:40:5e:78:cf:1e:9f:
                    ae:b2:71:e3:ab:81:32:cd:31:80:41:61:2a:81:14:
                    b8:7e:3f:f9:8b:10:79:c6:c6:36:bc:15:9e:09:96:
                    e7:a2:d9:bd:c7:d4:18:2f:ee:f2:6e:99:27:ec:87:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C8:44:10:BF:52:5B:8A:08:33:E3:B9:2B:2F:6A:4B:C6:40:C2:65
            X509v3 Authority Key Identifier:
                keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:cb:04:2b:29:3d:bc:fe:fe:90:96:38:96:3f:a0:af:b4:df:
         54:f3:06:14:ed:b7:c8:23:84:bd:ba:6d:97:38:ef:f7:c0:83:
         aa:b2:39:48:d7:6e:88:35:fc:32:b3:61:97:dc:27:63:0d:a9:
         a6:f3:55:5a:d6:d0:08:7e:c8:f4:0c:f2:f0:be:de:32:ca:42:
         ef:98:54:46:4d:e1:d0:4e:dd:62:86:f4:47:9d:10:b6:de:14:
         64:ca:be:86:f1:49:c3:25:d9:00:f2:d2:f0:2c:a0:7a:ba:ff:
         29:35:67:bc:8c:ad:11:39:49:10:5f:8b:ec:09:ed:1e:91:50:
         ac:fa:89:08:df:e5:76:90:81:93:05:84:71:f1:4f:d6:45:92:
         dc:b9:42:46:05:09:c1:a1:8b:98:2b:5a:8c:29:6a:7a:57:ee:
         0b:e0:d4:95:27:e1:89:94:bd:71:99:7e:47:92:0e:2b:1f:f9:
         08:9e:a2:ea:62:45:b0:2f:ec:77:20:73:fa:28:f7:7b:85:02:
         a7:ee:9d:be:bb:90:f4:43:cb:e0:2d:77:e2:5a:11:13:aa:06:
         6e:7c:c8:17:7b:35:e7:31:9c:5b:35:e9:db:e9:92:aa:13:38:
         b8:47:60:1a:34:29:4c:d6:ec:db:75:f3:e4:52:3f:49:ee:47:
         9d:a0:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:29:44 2026 by rpki-client