Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa
File:                     3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (raw, json)
Hash identifier:          o0zOCwKMV8jU5a7SbQORjfO9m38/31ZTy9sJntqLIvE=
Subject key identifier:   31:7E:AC:10:A4:09:74:15:63:15:A9:4B:B2:B2:0D:B7:1E:AA:EF:AB
Certificate issuer:       /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Certificate serial:       5632B63F932F3A322853F03553DD6392184D36AA
Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa
Signing time:             Sun 03 May 2026 02:25:07 +0000
ROA not before:           Sun 03 May 2026 02:20:07 +0000
ROA not after:            Sun 02 May 2027 02:25:07 +0000
asID:                     38788
IP address blocks:        103.242.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
                          rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:32:b6:3f:93:2f:3a:32:28:53:f0:35:53:dd:63:92:18:4d:36:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
        Validity
            Not Before: May  3 02:20:07 2026 GMT
            Not After : May  2 02:25:07 2027 GMT
        Subject: CN=317EAC10A40974156315A94BB2B20DB71EAAEFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9a:69:8c:ab:a6:0b:25:cc:ef:48:a6:dd:02:
                    bc:d5:dd:71:b5:19:6c:c5:bb:b5:5f:2a:ab:d8:23:
                    be:44:37:cf:93:ee:4b:df:04:32:7c:76:2b:ed:4f:
                    cd:b7:9c:a9:2b:c1:75:65:b3:cc:1a:a7:4f:03:ce:
                    7a:fe:28:4e:8c:bc:dd:26:55:9e:ef:4b:da:f6:cc:
                    5c:e2:de:3c:7e:a3:4f:37:cd:06:99:08:35:ff:ff:
                    ab:9a:bc:34:89:18:3b:33:fd:20:ca:29:88:5b:37:
                    ef:3f:51:7e:59:23:ee:69:69:68:00:3d:07:ff:77:
                    a8:f8:ec:37:64:99:06:03:2b:7d:9a:ae:1f:78:48:
                    c4:8d:20:1e:39:c0:55:52:b6:07:05:18:e2:ac:a3:
                    88:e2:79:db:5b:a1:6e:ef:3e:3d:61:1b:f0:80:a9:
                    49:d5:b1:b3:6f:ca:07:33:f7:4c:f5:00:4a:33:85:
                    1d:f6:49:b7:38:85:b7:0a:09:59:42:e2:b9:50:2f:
                    b1:c6:b0:dd:cb:cf:8e:6c:80:af:8a:ac:00:a8:a5:
                    d0:ec:c0:83:92:c7:08:0a:24:6c:be:d5:0c:2f:02:
                    55:bc:cd:bf:4d:93:3c:27:a9:9c:84:25:10:3a:e1:
                    2e:7e:39:c2:d2:6a:34:1d:bd:bc:a5:5a:ba:b0:f6:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:AC:10:A4:09:74:15:63:15:A9:4B:B2:B2:0D:B7:1E:AA:EF:AB
            X509v3 Authority Key Identifier:
                keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:19:64:5c:ed:e1:be:59:de:b7:ad:4d:d6:e9:27:91:90:09:
         9e:c3:40:3c:27:e9:1f:5b:dc:f3:05:a1:39:ca:34:6c:48:4f:
         11:21:d5:f5:d5:54:03:23:b3:c5:c8:cf:b6:c2:ff:4c:3a:81:
         4c:6d:21:48:e4:d6:ed:63:80:db:6e:18:3f:fc:69:03:8d:e9:
         f5:7b:09:27:d6:5e:b7:90:57:3c:bc:30:c5:a9:75:b7:46:49:
         17:3e:2d:c9:53:01:ea:e8:67:36:16:d3:fd:4b:5c:9d:a5:6e:
         c8:4c:41:d1:f7:30:ba:29:fd:2e:31:e9:3e:ca:3a:66:69:35:
         31:d5:b1:b2:b1:4b:f3:f1:54:0d:a9:58:4c:4c:bf:59:c8:99:
         05:99:24:e5:85:c9:87:8a:be:29:dd:79:a7:7a:15:22:44:26:
         50:c1:fe:88:1a:d3:19:4d:45:8e:17:cd:ff:e2:9f:6e:fb:95:
         53:b8:d5:93:da:e0:bc:4e:12:e7:9e:57:56:fc:29:7b:cd:56:
         9a:16:6d:f2:b9:08:9a:fa:0d:a3:c1:a0:09:60:68:9c:65:f0:
         e0:17:5c:db:68:da:3d:cf:dd:d7:cb:6f:38:13:7d:ca:8e:60:
         c5:9c:d9:a8:5f:41:0f:87:98:33:51:21:e8:9b:27:06:e7:40:
         e0:61:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:54 2026 by rpki-client