Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa
File:                     3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (raw, json)
Hash identifier:          XjEh4h/m9O4zav0oJbGUt3KwmUOKS7DwqIAy5aQ35aY=
Subject key identifier:   04:0F:0F:50:10:57:2C:D3:5C:22:46:2F:14:6D:4E:B1:1A:B2:17:C3
Certificate issuer:       /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE
Certificate serial:       1DFD1EEE5E692445636ADD7A42DCC23E2D30B5DA
Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa
Signing time:             Sun 03 May 2026 02:19:12 +0000
ROA not before:           Sun 03 May 2026 02:14:12 +0000
ROA not after:            Sun 02 May 2027 02:19:12 +0000
asID:                     133360
IP address blocks:        103.185.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl
                          rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fd:1e:ee:5e:69:24:45:63:6a:dd:7a:42:dc:c2:3e:2d:30:b5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE
        Validity
            Not Before: May  3 02:14:12 2026 GMT
            Not After : May  2 02:19:12 2027 GMT
        Subject: CN=040F0F5010572CD35C22462F146D4EB11AB217C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:d8:d2:2d:76:62:57:28:2f:7b:4f:ee:d4:
                    c2:44:00:85:8d:72:a7:14:d9:5a:92:d6:b1:35:94:
                    aa:be:a4:72:dd:39:51:a6:09:6c:26:3d:b8:65:bc:
                    35:87:db:47:fd:4f:1b:db:23:cd:a4:cc:8f:4b:3c:
                    5b:1f:dd:45:8f:9a:f5:71:79:40:fb:5b:49:31:fd:
                    30:ca:1e:6a:4b:42:81:0c:9a:7d:eb:45:81:48:d4:
                    e9:ba:9b:f7:23:73:68:4b:08:ad:ba:ff:48:df:97:
                    79:9f:a0:4b:db:0f:67:69:53:b5:f5:be:f4:4a:f1:
                    83:95:80:69:ce:e1:09:e8:73:a3:f4:3a:ff:3f:bb:
                    77:e3:52:8a:a9:87:50:ca:a9:b6:25:8e:0b:f5:04:
                    17:e3:8b:be:48:27:1c:e0:2a:90:ee:e1:07:62:2d:
                    8a:5e:f9:49:87:3a:eb:dc:66:50:2e:69:93:95:50:
                    c4:84:a2:3d:0e:15:c0:bd:a3:33:60:49:3a:61:a2:
                    ef:cb:95:b7:a1:19:e9:d5:75:7d:93:93:62:03:9a:
                    19:71:74:4e:b6:c3:09:32:11:67:a3:f7:f9:a6:c8:
                    9f:b6:8c:ee:6f:75:34:95:6c:8b:1d:38:2c:60:65:
                    3e:df:a1:4e:7b:6e:5e:21:ef:2a:be:8e:bc:f2:ff:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0F:0F:50:10:57:2C:D3:5C:22:46:2F:14:6D:4E:B1:1A:B2:17:C3
            X509v3 Authority Key Identifier:
                keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f9:79:36:e9:df:6a:8d:ef:61:0a:d5:f2:ad:40:dd:14:a8:
         42:c9:cd:ae:65:5d:a8:5a:82:e8:6d:a8:09:49:a6:a6:2d:d4:
         4f:a8:32:f1:62:8f:22:53:e3:42:02:26:5f:55:51:dc:1e:a4:
         72:52:a4:e8:bd:29:89:c0:29:fc:7e:0f:c4:08:ed:f7:d5:be:
         77:0b:45:e4:ce:58:2c:04:9d:99:cd:23:22:de:77:a6:dd:a8:
         92:0f:cf:c2:ae:b0:70:c6:82:7d:44:1b:68:b2:c2:e7:0a:09:
         bf:61:1e:33:bd:c9:96:71:4c:2a:12:d6:1a:99:53:b2:ff:87:
         95:d8:d0:4c:15:37:58:06:23:0e:79:40:83:a2:20:5e:6d:d0:
         9a:e6:c0:82:14:2a:32:34:04:6b:79:9d:59:1f:15:20:08:d4:
         a9:51:c5:d9:5d:19:d7:9a:bf:fa:4b:aa:34:a1:c3:40:d5:9d:
         dc:92:41:26:8f:2c:b4:c5:54:d6:85:25:63:62:35:69:00:6a:
         29:a1:9d:00:d8:89:31:7d:02:d9:1d:b4:28:3b:54:21:53:0b:
         a9:af:18:28:fb:6f:a2:b3:f0:4e:64:20:ae:d6:14:df:42:58:
         01:27:7d:1e:bd:36:b0:df:da:d0:4e:11:ba:f2:04:5a:01:24:
         51:26:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:24 2026 by rpki-client