Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e32382e32312e302f32342d3234203d3e203536323536.roa
File:                     3130332e32382e32312e302f32342d3234203d3e203536323536.roa (raw, json)
Hash identifier:          Nexvolg3a9KYuxAOmszuVwqwMOBphtNqyIx9bMVtJwI=
Subject key identifier:   51:5E:45:5D:A8:0C:CA:29:02:29:2F:2B:60:83:DA:6E:E2:5A:88:17
Certificate issuer:       /CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
Certificate serial:       13E02D42F7E25B1F897049334FF6CBCB4EC6634B
Authority key identifier: EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e32382e32312e302f32342d3234203d3e203536323536.roa
Signing time:             Thu 02 Apr 2026 03:00:01 +0000
ROA not before:           Thu 02 Apr 2026 02:55:01 +0000
ROA not after:            Thu 01 Apr 2027 03:00:01 +0000
asID:                     56256
IP address blocks:        103.28.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl
                          rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 20:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e0:2d:42:f7:e2:5b:1f:89:70:49:33:4f:f6:cb:cb:4e:c6:63:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
        Validity
            Not Before: Apr  2 02:55:01 2026 GMT
            Not After : Apr  1 03:00:01 2027 GMT
        Subject: CN=515E455DA80CCA2902292F2B6083DA6EE25A8817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:e5:0d:77:c8:33:69:41:38:65:36:cf:73:
                    45:8d:1c:5b:a2:bb:f6:9e:c0:6c:b5:89:18:5d:fb:
                    b4:3c:c7:c6:da:04:de:21:28:fa:74:42:7f:9c:71:
                    57:79:1d:86:d9:f9:d5:ea:cf:b4:3c:6c:2d:74:1d:
                    ee:a0:c1:26:7b:5f:47:4d:15:36:3f:0a:38:46:ab:
                    44:c6:7d:d8:96:36:87:e8:69:0b:c8:51:22:65:69:
                    d0:ab:24:58:f6:0c:0c:f8:f7:54:a7:a7:07:f2:4e:
                    ce:60:8a:6b:37:34:4a:3a:7c:1b:61:e2:36:50:56:
                    7f:b7:68:da:65:94:8e:4f:f3:9b:2d:53:9e:14:8a:
                    36:9e:60:03:e8:86:2c:3e:65:1c:c1:9a:7e:52:ec:
                    4b:40:97:7c:f1:43:85:e7:c0:4c:8f:73:3d:30:b3:
                    37:10:78:a7:fa:69:af:8b:e3:e5:7a:92:90:05:a7:
                    71:f7:43:2b:41:54:c1:f8:17:b1:e6:94:6f:32:f1:
                    4b:dd:96:de:a9:2d:cc:d3:e3:70:3d:68:77:6d:0e:
                    85:65:79:97:ea:2f:a0:07:ac:93:69:ad:20:c2:dc:
                    ed:af:40:25:b9:8d:1a:70:05:d9:37:c5:89:d3:aa:
                    66:52:c4:fd:6a:3b:47:07:6a:07:44:88:7c:35:75:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5E:45:5D:A8:0C:CA:29:02:29:2F:2B:60:83:DA:6E:E2:5A:88:17
            X509v3 Authority Key Identifier:
                keyid:EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e32382e32312e302f32342d3234203d3e203536323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:62:ed:a4:48:e1:10:e6:2b:9c:6e:ec:9f:94:74:9d:25:35:
         25:b8:ae:45:5e:64:d1:92:fc:de:de:bb:b4:eb:b6:7c:a0:59:
         a1:07:d0:52:28:0a:a4:8e:0f:98:51:82:f1:2e:d9:03:0d:31:
         58:65:7a:3e:81:83:72:be:b8:a1:80:fe:bb:39:56:e1:01:25:
         16:b4:16:4a:4e:33:1f:96:6e:0c:ff:a4:32:e5:7e:97:59:4a:
         84:77:4e:bd:44:c0:b0:38:50:07:10:30:18:2a:a6:4a:0c:9a:
         8d:eb:84:a8:8a:bd:3c:5a:13:16:2b:0b:cc:b4:e1:ff:53:32:
         c5:a7:5d:ab:59:50:df:08:6a:4f:72:38:a8:80:53:d0:34:6d:
         80:c9:82:19:ec:e3:78:32:ee:50:ed:2b:f6:5b:5a:91:7e:90:
         b2:b0:15:83:37:b0:24:e1:1f:f9:8a:c2:6e:c1:a4:aa:21:3f:
         73:d2:f2:e7:a4:5c:fe:0c:06:5f:53:b0:58:01:46:6c:7d:8e:
         64:df:43:e0:3f:42:36:19:31:75:e5:93:4b:57:ca:a9:b1:32:
         63:5a:ac:93:21:ef:36:0c:8f:58:05:56:ec:c0:d6:75:ab:ac:
         1d:63:c3:32:2a:a5:35:9d:33:94:45:45:1b:6b:f0:84:ab:4c:
         87:cb:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:06 2026 by rpki-client