Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa
File:                     3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          3WGbhArGVCFic0aSX1S3lij1MSx+kgEOwyaBXRAdn6M=
Subject key identifier:   87:42:7D:B5:1F:F9:DE:27:72:C4:26:1C:E5:70:D9:22:53:29:4C:7D
Certificate issuer:       /CN=9252F14B5E62941E764268BF539EE9FAD5793555
Certificate serial:       04B7348B60F5E9C90FBBAC34E811F931F707C8ED
Authority key identifier: 92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa
Signing time:             Sun 03 May 2026 02:18:24 +0000
ROA not before:           Sun 03 May 2026 02:13:24 +0000
ROA not after:            Sun 02 May 2027 02:18:24 +0000
asID:                     38758
IP address blocks:        103.233.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl
                          rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b7:34:8b:60:f5:e9:c9:0f:bb:ac:34:e8:11:f9:31:f7:07:c8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9252F14B5E62941E764268BF539EE9FAD5793555
        Validity
            Not Before: May  3 02:13:24 2026 GMT
            Not After : May  2 02:18:24 2027 GMT
        Subject: CN=87427DB51FF9DE2772C4261CE570D92253294C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:97:b3:d9:e7:98:46:02:48:b0:ef:f5:3c:32:
                    11:f7:c7:c6:e2:f1:54:90:03:c2:e5:69:3f:6a:86:
                    70:2b:06:06:c0:33:38:83:e1:23:b7:8e:2f:eb:38:
                    2a:b5:c8:57:5d:50:77:e7:48:7f:b8:bd:0f:d5:70:
                    30:57:40:97:0f:d2:98:74:f5:b2:b1:7b:4b:bd:db:
                    5b:3c:fd:1e:12:22:fb:6e:d6:03:98:9e:d1:21:74:
                    c8:a7:75:f6:90:58:64:c5:be:dc:18:b6:e7:a6:35:
                    b5:b3:29:e9:86:28:0c:7a:eb:1a:28:de:84:1f:04:
                    13:65:da:c3:d1:60:42:f8:92:cc:e3:dc:48:b7:a1:
                    92:2a:65:03:4c:6f:c1:4e:fa:ac:22:d5:ac:ad:f1:
                    a6:46:c1:0d:f6:b2:44:6c:a9:21:03:81:e1:2a:9e:
                    b5:8f:ea:77:de:7a:d0:81:bb:8e:b2:9f:db:a2:b1:
                    39:bb:a1:0b:b6:70:ce:56:c4:ae:f4:5e:62:3f:6f:
                    c1:57:ab:db:9f:49:89:42:2d:5c:cb:28:50:05:9b:
                    f6:be:88:12:da:45:29:d4:2c:fa:43:e5:22:54:7a:
                    14:b4:ff:90:c5:82:3a:df:cf:9a:d0:90:b4:45:7f:
                    dc:6a:b9:5e:42:5c:f8:74:4e:d7:07:1a:28:52:8a:
                    c7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:7D:B5:1F:F9:DE:27:72:C4:26:1C:E5:70:D9:22:53:29:4C:7D
            X509v3 Authority Key Identifier:
                keyid:92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:e8:ca:1f:d0:c3:d8:d6:cf:f1:23:97:9b:3b:25:d7:9c:6e:
         42:02:94:a8:75:5d:ad:64:a6:9c:3f:52:05:2e:b2:77:1f:12:
         b4:d3:68:5e:ba:a1:c6:14:b1:9b:c0:63:d1:38:a2:15:0d:ff:
         86:51:2e:3a:40:f5:d2:72:5c:ed:02:08:6e:93:c9:60:a3:1d:
         73:89:aa:d3:47:ff:a2:ef:03:bd:3e:8a:de:e5:52:4e:ca:d7:
         0c:da:a6:5d:fe:03:7f:ce:7e:51:b9:56:b2:e9:ca:03:1d:94:
         ac:ff:c3:dd:a9:d7:f6:13:36:47:22:cd:c5:21:54:26:71:29:
         03:3e:d8:54:6f:18:d3:7a:dd:7c:c6:ac:8b:9c:d2:58:e5:b6:
         a4:c8:fe:ad:1a:89:84:95:6b:6a:91:fa:2d:cb:2e:13:33:2b:
         62:97:eb:a2:f5:70:85:8c:fe:05:15:86:77:4c:f6:4e:90:5d:
         3f:40:b5:20:ed:5f:f7:6f:e5:f6:8f:36:4d:88:d0:d5:d6:12:
         21:db:42:b0:93:95:bf:e8:7b:be:2b:bf:4e:eb:bc:ca:aa:b3:
         ef:b0:9a:a1:74:16:7d:f6:60:b6:d1:d0:61:15:c9:1f:1b:82:
         eb:e7:26:7e:2e:28:5b:e3:c0:14:22:73:0e:65:9a:84:9a:65:
         30:cd:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:48 2026 by rpki-client