Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa
File:                     3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (raw, json)
Hash identifier:          gkNE1J8LS8bDAl/t8wn0B0ZHnNiDo1L7MzMb+7Q5ypo=
Subject key identifier:   D7:E3:F5:E2:DC:ED:37:D0:DC:6E:1E:F5:1A:5D:AA:1C:41:19:C9:C0
Certificate issuer:       /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1
Certificate serial:       1C0B7C3AEB2DD827254EC55184DDF40507296ABA
Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa
Signing time:             Sun 03 May 2026 02:19:10 +0000
ROA not before:           Sun 03 May 2026 02:14:10 +0000
ROA not after:            Sun 02 May 2027 02:19:10 +0000
asID:                     45718
IP address blocks:        103.198.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl
                          rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0b:7c:3a:eb:2d:d8:27:25:4e:c5:51:84:dd:f4:05:07:29:6a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1
        Validity
            Not Before: May  3 02:14:10 2026 GMT
            Not After : May  2 02:19:10 2027 GMT
        Subject: CN=D7E3F5E2DCED37D0DC6E1EF51A5DAA1C4119C9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:f0:cd:bb:a7:83:d5:01:ae:88:c6:59:9f:
                    de:9c:2d:e9:bb:7d:c0:22:d4:7d:d6:91:0e:24:f8:
                    17:1e:2b:23:ed:0c:d3:53:cc:b3:ee:92:1c:3f:3c:
                    f4:8a:9b:81:9c:4e:00:b8:73:8b:d3:fe:96:38:78:
                    6f:c0:e1:41:72:78:02:95:20:3a:52:8a:d4:e3:6c:
                    20:93:a7:aa:df:fd:1c:18:41:6c:45:68:f2:79:cb:
                    30:af:7a:01:aa:61:28:13:fe:06:e5:91:87:84:68:
                    93:cc:1e:c2:74:62:7e:03:33:ad:13:12:dd:df:76:
                    f3:e8:b2:22:5a:83:e3:ea:ed:96:2a:8c:73:9c:3d:
                    f7:97:91:22:9b:fa:96:00:34:e5:5f:59:6b:b9:78:
                    d6:ad:3a:f6:f0:00:a3:e4:5e:da:58:81:fe:b0:ce:
                    82:4c:39:6c:2b:e5:e7:65:f4:e7:d2:68:f0:f2:0d:
                    45:7b:1c:72:1e:a9:d2:1a:8e:03:08:a2:4b:28:a8:
                    13:60:29:d8:28:7c:0e:9d:54:04:9b:2d:9c:a5:5e:
                    0b:96:81:24:bb:73:a2:56:a1:42:7c:25:95:c9:34:
                    b5:42:39:bd:3a:3d:b9:03:2e:e1:9e:c4:72:09:82:
                    f5:df:ec:61:8d:33:8c:cd:55:76:88:47:57:1b:93:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E3:F5:E2:DC:ED:37:D0:DC:6E:1E:F5:1A:5D:AA:1C:41:19:C9:C0
            X509v3 Authority Key Identifier:
                keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:de:91:0d:aa:82:e2:de:a1:3b:84:2a:f9:db:4b:e2:ce:1f:
         38:f9:34:10:eb:3a:e9:85:47:4a:93:ef:63:8e:85:9b:99:42:
         36:74:ed:ca:5d:24:a1:47:ce:e3:f4:23:32:dc:15:2e:e6:92:
         22:d7:af:f1:1f:e1:45:be:e7:54:f5:6d:d0:80:87:a1:09:76:
         3c:99:dc:f9:bb:56:b6:83:89:6c:0c:75:48:d7:e2:06:e1:bd:
         a3:20:81:8d:5a:b1:6c:ff:e8:7c:86:d1:43:64:59:cf:e1:2e:
         f3:5f:c0:1f:71:77:55:59:29:cb:6e:e4:0e:c7:87:51:95:a7:
         bd:83:79:09:08:35:4d:11:1f:e3:20:f4:5d:e5:e0:eb:8f:1b:
         d0:5d:7a:a6:ee:ea:41:24:c1:8f:96:cb:77:c9:82:f5:a5:08:
         42:3d:62:0f:0d:d8:0b:f9:4d:f5:0f:79:e6:da:11:a8:91:50:
         67:d8:42:4f:d0:80:f6:15:32:fb:68:73:1a:83:e3:23:93:06:
         0b:6d:10:6d:0d:a0:7e:28:36:19:0c:db:b2:f9:52:25:24:fc:
         03:41:db:d6:fc:c7:0b:48:55:16:7f:a4:51:6c:59:ad:fa:77:
         8e:f0:62:0b:d2:bd:0c:4e:9e:8a:7a:72:b8:09:f8:b5:9d:d5:
         e8:c0:b7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:24:29 2026 by rpki-client