Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232322e302f32342d3234203d3e203338313438.roa
File:                     3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (raw, json)
Hash identifier:          4wluMrlK+jd2rPJTz82Wk6jGjGeMH7puimCIfaMcuQc=
Subject key identifier:   13:C2:E4:19:C6:46:4F:8E:D5:EF:E6:32:5C:B7:83:CC:0A:85:3F:2C
Certificate issuer:       /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83
Certificate serial:       77BE3E1C4C8F8C4327F40761D1D5A07FEDA66CFF
Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232322e302f32342d3234203d3e203338313438.roa
Signing time:             Sun 03 May 2026 02:15:04 +0000
ROA not before:           Sun 03 May 2026 02:10:04 +0000
ROA not after:            Sun 02 May 2027 02:15:04 +0000
asID:                     38148
IP address blocks:        103.30.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl
                          rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:be:3e:1c:4c:8f:8c:43:27:f4:07:61:d1:d5:a0:7f:ed:a6:6c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83
        Validity
            Not Before: May  3 02:10:04 2026 GMT
            Not After : May  2 02:15:04 2027 GMT
        Subject: CN=13C2E419C6464F8ED5EFE6325CB783CC0A853F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a8:1e:78:31:21:06:4e:70:85:ca:91:91:0e:
                    1e:28:65:01:12:98:e4:48:05:58:63:e9:bf:0e:25:
                    7e:d6:40:de:98:da:f1:37:ee:ca:38:16:7b:e1:bc:
                    bd:90:65:ee:4c:2f:70:2e:6d:04:21:08:95:9e:ab:
                    09:39:3f:24:c5:50:af:c3:30:27:ac:2a:b7:86:25:
                    bc:58:a4:6b:11:05:e9:1e:67:0f:0f:c7:e8:76:de:
                    8a:89:50:42:7d:3e:a1:82:60:0d:cb:d6:bf:f7:60:
                    81:44:7a:40:a1:1c:f9:f8:72:ca:9f:6a:f3:eb:f7:
                    32:bd:7f:7c:ea:61:bb:24:c5:80:36:33:7b:b6:34:
                    6a:94:bd:19:b5:8b:5f:4a:da:3e:27:98:da:b6:4a:
                    e5:8b:72:f1:fe:cb:ce:88:05:5e:2a:c1:d6:1f:cf:
                    fd:31:b0:e0:26:69:9b:87:32:00:1b:44:35:5c:cf:
                    f0:89:98:72:61:ab:b6:31:c8:30:a4:f4:35:84:14:
                    4a:80:5f:46:bf:26:d5:00:a9:e1:bc:ae:52:3f:67:
                    c9:fb:3c:35:a4:5a:47:c8:e1:be:39:f7:87:d2:0f:
                    74:cf:89:34:10:36:cc:ef:e2:92:20:13:97:06:89:
                    1a:4f:7b:48:db:e5:75:5d:a2:a3:56:10:39:c1:07:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C2:E4:19:C6:46:4F:8E:D5:EF:E6:32:5C:B7:83:CC:0A:85:3F:2C
            X509v3 Authority Key Identifier:
                keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232322e302f32342d3234203d3e203338313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a3:7d:34:9a:6e:ec:b6:e5:ce:8d:61:de:68:42:54:6d:a9:
         29:26:2b:74:fd:bd:f1:80:13:62:b1:0d:5f:29:d6:a3:1d:5a:
         75:31:5b:9e:21:5e:d8:4e:25:a0:a8:72:e9:38:9b:c3:2f:50:
         8e:d3:56:f4:a8:80:97:2b:5d:dc:19:13:18:6c:33:f2:fd:bb:
         4f:74:8e:48:7f:ed:b1:12:ad:fe:63:aa:c0:c8:d2:99:7c:6d:
         8f:6c:84:18:22:67:42:4f:c6:4b:a4:9a:99:d1:b0:f9:94:b0:
         19:3b:2e:a1:10:67:35:03:1b:42:02:9d:c1:d7:59:ed:c5:cd:
         24:5f:3f:23:2a:ab:da:8c:b7:cd:80:b5:6e:5a:94:4f:b4:bf:
         2b:4a:4d:d7:b7:aa:e7:9a:ee:f6:c5:29:59:c2:4b:b4:30:8a:
         f0:29:d0:1d:80:6d:4e:49:ca:70:91:87:3a:91:7f:ba:06:79:
         ec:2c:d2:21:6e:f5:85:1a:93:90:a1:d5:9f:b1:9f:7a:00:06:
         6f:85:c0:03:45:1b:a0:78:0d:c5:05:42:c1:a3:f0:99:60:12:
         2d:5e:a7:3c:67:bb:2b:46:16:28:b0:31:d3:94:15:13:33:90:
         8d:41:7c:45:7a:d5:a3:af:e8:51:e0:34:b6:fa:1b:94:99:02:
         6a:d3:f1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:56 2026 by rpki-client