Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232332e302f32342d3234203d3e203338313438.roa
File:                     3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (raw, json)
Hash identifier:          qdqJ7c5Hmo5/x5QxaNzAn2E9rlL9+lJv31VY+Z/Gpyo=
Subject key identifier:   63:A9:A6:1A:4D:BF:1E:CC:10:49:F7:E4:89:B3:D6:63:F5:E3:E8:33
Certificate issuer:       /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83
Certificate serial:       118BDDA4C8005A1344DAF2F50395365FC6591B36
Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232332e302f32342d3234203d3e203338313438.roa
Signing time:             Sun 03 May 2026 02:15:04 +0000
ROA not before:           Sun 03 May 2026 02:10:04 +0000
ROA not after:            Sun 02 May 2027 02:15:04 +0000
asID:                     38148
IP address blocks:        103.30.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl
                          rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8b:dd:a4:c8:00:5a:13:44:da:f2:f5:03:95:36:5f:c6:59:1b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83
        Validity
            Not Before: May  3 02:10:04 2026 GMT
            Not After : May  2 02:15:04 2027 GMT
        Subject: CN=63A9A61A4DBF1ECC1049F7E489B3D663F5E3E833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d7:db:87:43:8d:68:90:23:f9:89:36:47:43:
                    a9:07:e3:ff:8a:9b:56:18:1f:3a:42:71:2f:c4:a9:
                    94:7d:f2:9b:10:8e:9b:66:9c:62:e5:32:5c:2a:36:
                    63:6c:66:8c:55:0b:69:9a:9b:ce:40:dd:fa:8b:c9:
                    67:21:43:52:d6:b3:b8:a0:74:f5:b6:c9:18:29:44:
                    79:8f:3c:a7:57:63:d3:d5:7b:3c:77:4b:96:43:e6:
                    6e:12:4f:4b:49:54:ef:d7:5b:02:f3:8b:4b:11:ae:
                    bf:e4:c0:ec:45:97:90:be:e2:7f:d0:ef:a5:76:b5:
                    65:52:e2:c2:eb:8d:db:ab:5a:43:5a:2f:f6:a1:e0:
                    36:2d:19:dd:38:ff:c9:39:72:17:a3:de:94:f8:f7:
                    7a:58:25:02:29:85:78:8b:88:33:35:22:fa:b0:1c:
                    ab:15:33:c8:8e:47:67:47:1b:0e:81:51:e6:27:42:
                    b6:be:12:d8:9e:75:d5:10:a6:5a:8e:17:d8:42:52:
                    69:87:ea:e4:29:5d:88:7b:12:cb:df:bd:be:a7:4e:
                    ae:b1:ba:cd:8b:b1:e1:d9:a1:94:0c:08:08:28:b0:
                    db:9a:72:2e:7d:3b:2b:7c:84:09:3d:e5:5e:71:00:
                    9c:c4:a1:b2:88:2f:84:e3:2b:60:d2:20:00:cd:27:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A9:A6:1A:4D:BF:1E:CC:10:49:F7:E4:89:B3:D6:63:F5:E3:E8:33
            X509v3 Authority Key Identifier:
                keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232332e302f32342d3234203d3e203338313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:20:21:aa:da:a5:0f:36:d8:1f:8d:61:fe:3f:08:d7:58:2b:
         c3:8b:ed:df:4b:d0:80:ca:8a:b9:d9:f8:40:03:91:90:32:6c:
         72:03:83:ba:57:0b:ab:98:1b:71:8c:c9:f4:e0:0b:08:56:d6:
         ac:83:e3:27:74:31:1e:a9:08:7c:72:4f:65:63:dd:f7:a4:86:
         19:17:fc:1b:ea:1f:a1:62:d3:4d:64:9d:b2:9a:25:82:3c:23:
         12:b5:f4:a5:43:03:3c:fa:d6:67:5a:16:d1:df:55:4e:53:9e:
         8b:39:30:61:94:56:d9:43:02:a5:da:e4:30:9c:41:48:87:eb:
         4c:85:c5:6d:8c:ca:91:e3:00:42:49:c6:ad:e3:2f:ca:9a:f8:
         44:a0:61:de:18:5a:08:f1:18:c2:5f:a0:f8:af:8c:19:f0:68:
         42:f6:d5:a8:15:21:ca:ad:d0:25:61:3a:f7:ab:b6:d0:e6:44:
         ae:5e:b7:9d:24:d0:d3:ea:87:5a:50:d9:43:6a:ca:5a:42:0d:
         90:b8:ae:09:ca:d7:1d:0a:27:eb:89:97:cb:b4:6b:1c:ec:0f:
         b1:1d:82:f8:fd:80:a2:ee:a0:02:9e:ef:f4:0c:c4:5e:b5:3b:
         91:56:20:ce:7d:4b:40:c8:7a:d7:ec:16:41:70:df:ec:d6:52:
         77:ce:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:17 2026 by rpki-client