Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa
File:                     3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (raw, json)
Hash identifier:          ICLSFvgSRRkmlVey9F0aZzpRAm3MpVToF57RNv3826o=
Subject key identifier:   AF:EF:42:95:9B:1E:F6:E3:E1:7F:A3:7E:51:9D:9C:01:47:48:E0:D1
Certificate issuer:       /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE
Certificate serial:       483611820B98D3BD23712102F66C7DE2F1BFDB67
Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa
Signing time:             Sun 03 May 2026 02:19:12 +0000
ROA not before:           Sun 03 May 2026 02:14:12 +0000
ROA not after:            Sun 02 May 2027 02:19:12 +0000
asID:                     149673
IP address blocks:        103.185.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl
                          rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:36:11:82:0b:98:d3:bd:23:71:21:02:f6:6c:7d:e2:f1:bf:db:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE
        Validity
            Not Before: May  3 02:14:12 2026 GMT
            Not After : May  2 02:19:12 2027 GMT
        Subject: CN=AFEF42959B1EF6E3E17FA37E519D9C014748E0D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:41:f5:72:b7:66:e7:1d:1a:63:b6:cc:70:
                    0e:05:f0:ca:5f:6e:75:c4:8d:b6:97:07:f1:4b:7f:
                    94:07:54:6d:2b:0f:37:c4:8e:68:91:86:55:4d:1a:
                    a6:b3:3f:53:21:57:c7:45:1d:31:0c:39:58:8f:90:
                    88:27:28:9a:46:88:04:22:8a:9f:25:2a:28:eb:ba:
                    6c:6c:42:08:01:f2:8b:a2:37:73:38:61:30:20:40:
                    4c:ce:40:04:a4:55:3b:ec:6a:cb:c1:86:2e:f4:ca:
                    d3:6f:9f:8b:c3:2b:b7:99:4e:f4:43:13:45:d8:33:
                    a4:a5:64:a2:c4:1a:a8:2d:6d:02:e2:18:a8:59:c2:
                    70:09:e5:89:9e:87:00:27:a9:e7:7b:de:5b:26:19:
                    8f:3a:5e:29:bb:13:3b:0f:71:0b:25:6f:55:8b:56:
                    f7:8f:a9:96:ae:ec:cd:cb:85:66:53:90:66:92:96:
                    bf:fe:31:a6:7f:94:b9:59:24:14:d6:56:60:48:b2:
                    87:50:0b:d6:ad:3d:89:36:b3:ea:36:c9:3b:79:6a:
                    4d:f5:2f:3f:6c:b4:d6:96:f8:87:84:4d:ff:ae:b0:
                    2e:d7:42:db:ed:8f:a1:90:a5:7e:6d:56:e5:c9:1f:
                    82:4b:ee:80:0d:96:88:34:d2:24:b9:44:02:b9:3f:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EF:42:95:9B:1E:F6:E3:E1:7F:A3:7E:51:9D:9C:01:47:48:E0:D1
            X509v3 Authority Key Identifier:
                keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c0:ce:29:16:4d:42:c5:6d:fb:b1:39:d6:3d:e8:57:75:84:
         14:ce:57:f1:53:13:c9:94:66:48:b3:f5:f0:6e:a0:53:6c:66:
         9e:22:ff:b9:a6:65:37:be:ac:c0:1d:85:fd:86:84:aa:c4:d6:
         91:d7:68:c5:bd:21:bb:82:23:c1:84:9a:de:f1:7f:2c:ba:0e:
         4f:09:3a:27:92:78:bb:23:38:ac:f6:fd:1a:e4:0f:09:0e:33:
         c1:79:90:62:e9:ee:e5:24:f7:78:7a:96:12:e2:89:69:b8:9e:
         5a:db:bb:fb:3a:3b:76:1d:8a:33:09:18:88:ee:c4:2d:cf:34:
         b9:6e:aa:77:a2:19:5b:78:03:b4:a6:74:4c:f0:63:2f:c3:53:
         79:00:db:ed:69:d0:68:4b:f9:10:e7:7b:5f:1f:e3:8d:52:56:
         8b:0f:d7:6e:b5:57:4d:fb:6b:e7:89:5e:48:b5:6f:5a:41:b8:
         96:0f:4a:b9:c3:4f:8f:04:ed:9d:82:b6:38:7f:1c:43:42:fa:
         fa:0f:9b:88:0c:8a:00:a0:b5:90:01:bd:9c:5d:ab:b2:11:60:
         e4:60:32:83:69:31:52:e7:6f:dd:20:12:d9:42:ce:d4:d7:a1:
         7a:4b:5b:18:3c:f6:e2:7e:53:a8:9c:f4:92:65:e9:db:d5:37:
         07:ff:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:29 2026 by rpki-client