Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/3130332e39312e35352e302f32342d3234203d3e20313530323538.roa
File:                     3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (raw, json)
Hash identifier:          4WF38lDugkx4g5GWHdzVk5hRBqpGlU+mntDxAYWnRfU=
Subject key identifier:   69:EF:83:EF:6F:94:82:83:38:45:34:6D:A3:2F:10:86:3F:9A:0C:DC
Certificate issuer:       /CN=C2F21005CDD8F19E492720297D0BA5C66395653F
Certificate serial:       0EEA708E37689764C6062D04D5529377A25942FB
Authority key identifier: C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/3130332e39312e35352e302f32342d3234203d3e20313530323538.roa
Signing time:             Sun 03 May 2026 02:23:35 +0000
ROA not before:           Sun 03 May 2026 02:18:35 +0000
ROA not after:            Sun 02 May 2027 02:23:35 +0000
asID:                     150258
IP address blocks:        103.91.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl
                          rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ea:70:8e:37:68:97:64:c6:06:2d:04:d5:52:93:77:a2:59:42:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F21005CDD8F19E492720297D0BA5C66395653F
        Validity
            Not Before: May  3 02:18:35 2026 GMT
            Not After : May  2 02:23:35 2027 GMT
        Subject: CN=69EF83EF6F9482833845346DA32F10863F9A0CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:e5:f5:2c:8f:34:2a:af:8a:96:e4:17:20:
                    a2:f6:c0:4f:bb:18:69:38:f9:59:62:7b:1c:af:51:
                    2d:bf:24:f9:25:b9:fd:ba:69:4d:a2:14:07:70:f3:
                    28:09:10:4e:e4:7a:1a:5e:1d:35:a5:d2:da:d3:f5:
                    f4:1e:27:ca:0e:ae:c1:60:c8:77:f7:c4:49:56:16:
                    23:cf:24:cc:51:5d:6b:06:e6:a0:7b:49:e3:2f:27:
                    1e:50:0e:5c:94:e2:b2:9f:c0:98:78:96:e9:b3:14:
                    a5:14:5c:bd:11:4a:5b:3a:2e:32:05:39:ad:64:e8:
                    a2:1e:1f:9d:1f:7e:3a:c2:dc:89:e4:f2:9c:79:bb:
                    c4:1b:c9:0e:2d:c4:bf:07:e6:69:83:92:57:24:5b:
                    f9:28:e6:48:a2:b6:02:ce:2b:28:48:d7:f2:89:21:
                    9e:ec:64:22:21:1c:87:2d:86:bf:bd:ba:f9:77:bc:
                    e5:72:87:cd:b6:ec:94:dc:85:93:86:9e:1f:16:0b:
                    ea:b2:4d:7d:c3:80:08:ad:64:b8:93:80:23:b7:31:
                    30:46:b6:19:ad:fd:fc:1d:fa:5f:01:ea:26:53:4b:
                    50:04:bc:7d:0d:1a:62:5b:3b:31:c9:c6:30:5d:06:
                    e9:07:c5:29:cc:76:1d:e6:79:6a:7c:db:aa:6d:5b:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EF:83:EF:6F:94:82:83:38:45:34:6D:A3:2F:10:86:3F:9A:0C:DC
            X509v3 Authority Key Identifier:
                keyid:C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/3130332e39312e35352e302f32342d3234203d3e20313530323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:26:77:00:64:6a:46:0e:65:93:6d:3f:c1:95:f5:e1:04:63:
         f5:d2:71:f0:b5:a1:fb:78:aa:eb:c5:76:64:74:ca:f1:51:e9:
         21:b2:1c:e6:05:a5:88:65:a2:82:73:5c:eb:14:d1:28:93:32:
         3e:bc:00:5b:43:b4:80:b7:ba:54:74:54:d0:b0:d9:a5:64:ff:
         c9:aa:80:cd:85:45:52:4c:c0:67:99:27:50:bf:86:ce:dc:63:
         e2:f9:66:82:58:d6:dc:ab:1d:2f:2a:f9:b6:56:5a:95:9b:7e:
         ee:7f:f9:74:67:44:3e:9c:10:82:b0:5b:cf:17:2b:ac:45:9d:
         78:6f:03:cf:6a:64:36:92:b1:d7:77:d3:17:9f:30:d1:db:a6:
         47:24:5c:5e:d2:7e:46:e9:11:8c:74:0c:e7:9f:5d:5d:af:75:
         5a:c1:91:82:39:e6:19:fb:50:08:b4:bf:37:40:6e:39:89:0a:
         69:5a:84:10:5e:dc:11:6a:47:0f:2a:e3:3f:0e:f2:b2:c4:24:
         b1:27:e0:fc:64:bb:29:f4:95:78:e5:90:e8:f4:dd:d0:ee:ad:
         9a:c8:e7:06:a5:e6:50:86:c6:c4:98:f0:40:0f:9d:c4:b0:be:
         c2:fa:f2:af:f4:62:b8:c4:12:8d:a0:8d:d6:89:19:e7:de:a9:
         f0:16:00:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:39 2026 by rpki-client