Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa
File:                     3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (raw, json)
Hash identifier:          TH1xxKIpC/iys3VyCm1mmUpDcchr21F0tjGUobHxDDI=
Subject key identifier:   E0:1D:CC:C5:0E:81:60:B3:CC:0E:6F:7A:2A:19:E0:6A:B0:B1:CA:8F
Certificate issuer:       /CN=8557597ED1797691974B01C1D7D410DE0468CB64
Certificate serial:       397A1BEF67FDA726125BFAF86937E005A4AFD5C8
Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa
Signing time:             Sun 03 May 2026 02:46:47 +0000
ROA not before:           Sun 03 May 2026 02:41:47 +0000
ROA not after:            Sun 02 May 2027 02:46:47 +0000
asID:                     210537
IP address blocks:        103.195.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
                          rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 22:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7a:1b:ef:67:fd:a7:26:12:5b:fa:f8:69:37:e0:05:a4:af:d5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64
        Validity
            Not Before: May  3 02:41:47 2026 GMT
            Not After : May  2 02:46:47 2027 GMT
        Subject: CN=E01DCCC50E8160B3CC0E6F7A2A19E06AB0B1CA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:7e:97:47:35:b0:91:20:0a:d5:81:d8:f8:
                    f3:9b:2a:02:52:af:4b:f3:35:4c:af:80:ef:5d:19:
                    62:0b:9e:5b:dc:e0:f1:48:64:8c:a6:00:da:d0:d6:
                    ff:ef:51:04:6e:35:f6:0a:0d:32:87:be:a7:9c:5e:
                    be:22:90:cf:b4:40:f5:cc:c2:2c:df:50:d6:4d:07:
                    be:78:10:02:2c:38:46:b9:5b:71:d4:18:f7:df:0d:
                    39:9f:6a:4d:c6:10:63:fc:b2:5c:ae:fa:69:8c:d6:
                    a0:e4:1b:99:00:2d:41:1f:72:df:1a:76:bd:7c:33:
                    37:cc:c7:27:a9:7b:25:0a:9b:21:e0:f8:3c:68:37:
                    d5:0c:13:e2:21:4c:f3:1a:fc:62:46:6e:89:2d:47:
                    91:0c:a2:d8:a4:4a:ff:a6:92:0d:b3:97:a8:70:6e:
                    1b:23:e6:59:6d:d2:2d:89:3f:6d:1c:ce:2d:6b:5f:
                    c5:ec:d5:fc:39:1e:b3:0d:e1:14:58:1f:c2:e1:15:
                    4e:30:a5:78:44:7b:52:1b:cd:8f:02:61:4e:12:20:
                    02:bb:38:7d:fd:f2:80:cf:36:b7:29:bc:e7:f6:e0:
                    88:67:74:01:fd:9c:b5:c0:c5:88:e5:72:cb:15:45:
                    84:3f:c9:f4:6c:7f:14:f6:44:18:6f:25:51:2f:41:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1D:CC:C5:0E:81:60:B3:CC:0E:6F:7A:2A:19:E0:6A:B0:B1:CA:8F
            X509v3 Authority Key Identifier:
                keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:3d:31:5d:32:8c:18:c9:85:62:ec:ca:d5:dc:5b:a2:93:16:
         dd:02:f3:12:31:32:93:2c:ee:27:b3:fd:30:82:35:cb:8b:11:
         0e:7d:cb:d4:d5:fe:31:3d:f5:f5:41:03:e4:91:68:c9:81:fc:
         4b:54:5c:78:a4:83:5c:91:9d:e9:62:26:2e:f0:0e:ae:1f:7a:
         c8:7d:74:92:10:df:74:d0:37:58:80:36:28:4b:39:ee:00:8f:
         78:5d:22:f9:fa:68:ff:36:68:57:99:6d:ef:bb:61:b4:46:14:
         48:e3:e3:b6:c8:94:3b:e3:1e:81:62:b5:00:95:35:09:82:95:
         85:f4:a5:55:d5:bc:32:bc:0f:7d:45:67:9e:bb:3f:85:bc:8d:
         11:16:38:2b:4f:55:77:58:5b:90:ae:0f:a1:ad:33:cc:58:30:
         c6:c6:e8:2e:89:e3:cf:12:35:eb:72:10:28:9e:4a:1d:e5:85:
         47:a3:ec:77:b9:87:df:c5:b6:c1:ba:5c:23:17:95:70:ae:ac:
         43:5b:b0:61:c5:7d:be:81:59:8a:b1:ca:72:0f:c4:ed:16:00:
         bf:35:cc:5c:f1:a6:20:75:ce:e0:96:bb:71:b2:1e:de:86:bc:
         ad:e3:c1:93:a8:08:03:85:94:10:7b:2e:19:b5:ad:88:a7:d5:
         d1:aa:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:31 2026 by rpki-client