Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa
File:                     3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa (raw, json)
Hash identifier:          1X7ytOOeZ7baYbrptPG956jTOlJu9VRB/BLTjRkOU00=
Subject key identifier:   95:CD:8D:94:B6:B7:FA:28:F5:1E:DD:7F:FF:C7:29:6F:3C:35:0B:E7
Certificate issuer:       /CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8
Certificate serial:       328BE9DB5742D4439D0F96F4647FF6CC4CD3F562
Authority key identifier: C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa
Signing time:             Sun 03 May 2026 02:13:42 +0000
ROA not before:           Sun 03 May 2026 02:08:42 +0000
ROA not after:            Sun 02 May 2027 02:13:42 +0000
asID:                     150958
IP address blocks:        103.81.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl
                          rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8b:e9:db:57:42:d4:43:9d:0f:96:f4:64:7f:f6:cc:4c:d3:f5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8
        Validity
            Not Before: May  3 02:08:42 2026 GMT
            Not After : May  2 02:13:42 2027 GMT
        Subject: CN=95CD8D94B6B7FA28F51EDD7FFFC7296F3C350BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a6:73:5f:88:83:0f:e5:79:a7:d5:3e:d3:32:
                    b4:a2:fc:b7:aa:28:19:1e:eb:3b:d1:50:3e:ac:3d:
                    f6:5a:d2:ea:12:b3:17:f4:b7:60:4d:d8:40:38:01:
                    59:33:b8:ca:38:f9:22:81:f1:f5:10:ca:2c:8b:92:
                    82:7d:52:29:92:7a:03:51:07:ad:b1:4e:63:d3:48:
                    a2:48:70:50:d4:96:76:cf:8d:d8:ca:2f:db:7a:3c:
                    b5:1f:9c:f3:0a:db:32:9b:fc:d5:e6:cb:eb:aa:00:
                    a5:cc:d3:33:85:e1:1f:ae:fa:af:02:17:46:3b:4a:
                    c6:ef:31:28:16:a1:75:7c:0c:21:fb:13:53:bf:06:
                    6a:02:ba:42:28:ca:d3:f7:f9:44:22:0b:b2:84:f3:
                    bc:78:9a:d9:28:81:f9:c6:73:c2:da:9a:1e:36:89:
                    aa:a4:2a:35:96:13:a1:af:76:04:04:86:59:f8:e7:
                    17:54:28:26:6e:6c:df:7b:55:59:e2:bf:e8:52:3b:
                    61:0e:70:15:31:89:7e:b2:d2:5f:7e:34:3d:a4:36:
                    6f:8e:e2:71:b7:46:d1:f6:3e:85:d6:af:0c:51:47:
                    53:e8:46:ee:09:bb:5b:76:a3:18:27:e0:75:d6:cd:
                    9f:cc:aa:65:b4:d1:47:06:3c:7b:86:ab:f8:6c:e5:
                    a9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CD:8D:94:B6:B7:FA:28:F5:1E:DD:7F:FF:C7:29:6F:3C:35:0B:E7
            X509v3 Authority Key Identifier:
                keyid:C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:31:d4:f0:d8:b3:de:51:69:1b:b9:3a:6e:d1:c8:6e:7b:3d:
         d7:08:7d:f5:a4:82:13:b9:16:7a:98:2e:f1:9d:04:54:02:35:
         f9:8d:49:b6:a6:74:7c:ba:a9:a8:50:db:f3:b1:e5:f7:b3:2f:
         8f:5a:12:56:49:d2:42:74:46:2d:31:eb:15:f8:36:40:87:a9:
         27:f0:73:bc:9b:06:b2:30:fa:58:59:2f:43:45:25:2e:e7:8a:
         92:0d:31:d3:36:27:01:f0:9c:45:f7:54:33:2e:a3:02:22:b9:
         52:ff:22:ba:00:59:04:11:fe:cb:bc:97:d6:45:c8:a9:a5:a1:
         ee:0e:c5:d1:fc:df:11:8f:7f:73:31:35:7b:34:38:46:69:23:
         31:60:e0:b0:b3:8a:e3:d9:59:ec:6b:8f:a8:20:ce:83:d8:e7:
         53:49:43:ae:bf:00:20:f3:b8:aa:73:36:8a:b2:32:ae:fa:0a:
         3a:f6:be:b6:65:ad:15:d7:b3:83:2d:a3:c6:45:cd:cf:44:39:
         a6:6f:a9:0b:d0:03:9a:0b:f5:c1:f5:18:2c:ed:86:97:9d:6d:
         4a:04:3f:79:76:d3:6b:ec:2b:08:ba:96:d8:74:6d:26:77:db:
         9c:3e:47:12:1b:f2:85:17:26:13:a2:50:27:fc:6f:94:36:6c:
         a6:28:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:19 2026 by rpki-client