Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32342d3234203d3e203338313438.roa
File:                     3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (raw, json)
Hash identifier:          JJjFiNRoaXtW7r6WlFCed+2DZ0XR/8IciP9txj6h+7U=
Subject key identifier:   86:78:86:CD:99:3A:E5:9B:B8:98:C3:22:3E:3B:C4:7A:9C:80:8F:FC
Certificate issuer:       /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83
Certificate serial:       097C1B3D240EEEC2E2F3A075EAB7E1990ABD03F1
Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32342d3234203d3e203338313438.roa
Signing time:             Sun 03 May 2026 02:15:05 +0000
ROA not before:           Sun 03 May 2026 02:10:05 +0000
ROA not after:            Sun 02 May 2027 02:15:05 +0000
asID:                     38148
IP address blocks:        103.30.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl
                          rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7c:1b:3d:24:0e:ee:c2:e2:f3:a0:75:ea:b7:e1:99:0a:bd:03:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83
        Validity
            Not Before: May  3 02:10:05 2026 GMT
            Not After : May  2 02:15:05 2027 GMT
        Subject: CN=867886CD993AE59BB898C3223E3BC47A9C808FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:35:ef:4e:e1:38:f5:37:24:38:06:12:4b:
                    01:e3:40:43:0c:4e:79:b0:30:c8:91:91:c2:34:82:
                    be:5e:a9:c0:f3:d9:14:05:ee:35:f3:27:54:39:6d:
                    03:21:9f:58:75:92:1e:42:05:c1:ac:28:b1:60:e1:
                    32:d7:65:d7:d5:bd:b3:c0:a3:8c:83:0f:6f:b0:65:
                    3d:94:90:c5:0f:97:65:99:57:80:18:d6:60:fb:d3:
                    42:df:d2:75:ee:e0:53:31:5b:cc:52:86:b9:a7:30:
                    6f:6e:12:2f:dd:b7:b7:5d:1a:2c:63:6d:07:8b:3a:
                    bd:a8:4f:90:c4:35:e2:c3:5d:a7:33:c4:9f:25:91:
                    a2:c0:42:5b:75:ec:08:6f:8e:70:ac:0e:b4:1d:8f:
                    5c:07:17:0c:2c:41:7e:ec:55:60:b4:df:67:83:de:
                    72:cd:b1:46:3b:fd:4f:bd:36:6e:93:49:22:dd:dc:
                    f9:e2:e7:2c:dd:8a:93:80:ea:dc:e9:2e:02:ed:ae:
                    c3:69:83:9d:26:af:76:8a:33:43:b4:81:3b:4e:8c:
                    a9:4e:01:2b:ca:f1:27:97:72:7d:22:6e:d8:0b:d7:
                    ca:c9:c7:7e:3c:20:5b:12:b6:6d:a4:3e:b2:cb:4d:
                    f6:07:f0:6c:ba:94:ff:fd:48:5d:9f:f9:77:50:39:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:86:CD:99:3A:E5:9B:B8:98:C3:22:3E:3B:C4:7A:9C:80:8F:FC
            X509v3 Authority Key Identifier:
                keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32342d3234203d3e203338313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:4c:b9:a6:69:8f:0b:83:b2:b9:bd:57:15:7c:41:76:1e:d6:
         08:78:78:22:c6:fb:80:e7:7c:a3:72:e1:e2:fe:f0:20:1c:a8:
         9b:40:bf:15:14:81:94:2b:e2:9f:ee:45:00:6a:02:f1:19:1a:
         7c:51:a3:25:5c:17:a7:6c:d9:9c:f1:4b:6c:6e:71:73:6c:c0:
         58:24:9d:a6:60:bb:4e:b9:eb:73:a6:f7:78:b5:ca:3a:ab:d3:
         f3:4b:d5:3d:b5:03:5a:0d:fa:a6:31:8c:8d:e4:ce:56:ae:74:
         72:60:3f:36:0c:9f:eb:33:26:29:c0:e5:a8:56:c8:37:92:c2:
         37:87:81:ee:1c:32:e5:01:e7:fc:6d:88:65:f8:dd:06:a2:4b:
         8a:66:82:51:95:6b:ce:07:b4:0b:01:f8:65:41:f2:dc:3a:49:
         99:2d:05:f6:1e:01:d2:1d:7d:f1:52:e1:b1:1c:38:bd:d1:64:
         58:8a:45:be:be:73:9b:c0:82:cb:eb:95:08:23:9d:1d:86:65:
         b3:03:2c:e9:e9:52:c4:3c:ad:6e:15:8b:55:93:89:e0:b5:ad:
         5b:02:95:07:a8:23:30:f5:f6:91:f5:20:92:76:86:79:31:82:
         d4:b3:e1:c2:f1:fb:d3:97:bb:65:d6:86:8b:e9:21:49:0b:5d:
         19:6c:4b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:02 2026 by rpki-client