Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa
File:                     3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (raw, json)
Hash identifier:          zPofqUyIbcND+D2D0o7JYniZDgxYX06gor3Wb3n4ltM=
Subject key identifier:   A2:E3:39:04:38:DC:BC:F0:14:C9:B6:4F:18:03:11:E8:85:15:B2:00
Certificate issuer:       /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Certificate serial:       7EA677BF45DE1A4CB4B1B4DC237C5C7AFC072273
Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa
Signing time:             Sun 03 May 2026 02:25:06 +0000
ROA not before:           Sun 03 May 2026 02:20:06 +0000
ROA not after:            Sun 02 May 2027 02:25:06 +0000
asID:                     38788
IP address blocks:        103.242.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
                          rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a6:77:bf:45:de:1a:4c:b4:b1:b4:dc:23:7c:5c:7a:fc:07:22:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
        Validity
            Not Before: May  3 02:20:06 2026 GMT
            Not After : May  2 02:25:06 2027 GMT
        Subject: CN=A2E3390438DCBCF014C9B64F180311E88515B200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:c7:de:b3:57:35:a5:ae:fb:25:64:56:3a:
                    46:10:4b:8a:9b:dc:95:e1:9b:d2:da:81:fa:ac:8d:
                    ba:d9:80:f2:39:de:f0:56:5e:42:76:06:17:f0:02:
                    77:17:71:5f:fc:88:24:5b:2b:55:88:a9:96:6c:22:
                    56:e2:15:d6:37:33:e0:47:bc:ea:db:39:fb:b2:83:
                    36:f0:c0:b5:bd:0c:2c:8e:78:68:b5:b1:c6:d2:0b:
                    ab:d6:74:0f:ae:54:41:f0:70:34:9b:22:40:02:6d:
                    7f:87:b0:6d:9f:aa:20:59:66:80:80:36:57:cd:21:
                    c3:99:84:d6:b0:37:4c:29:41:f1:66:cb:e5:a7:86:
                    ce:61:a8:d7:28:ae:57:8e:ae:f2:b5:21:b9:ca:af:
                    f9:0e:e8:ac:8f:df:b7:fe:4b:bb:c1:46:b2:e2:ff:
                    9e:98:67:e8:af:55:23:a9:39:63:69:f1:4c:d8:78:
                    6f:d0:4f:fa:4a:17:9a:ad:8e:96:0e:97:bb:a2:bf:
                    20:ce:1a:d3:f8:d1:95:c4:c4:2f:74:34:30:9e:ac:
                    50:d9:77:d2:7f:b0:9a:0a:68:90:cc:8f:94:d5:72:
                    67:4e:e7:25:63:3c:a2:23:5d:16:7b:64:91:54:ae:
                    88:f5:6f:b5:ac:96:57:fb:81:7a:1f:9a:01:d1:be:
                    da:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E3:39:04:38:DC:BC:F0:14:C9:B6:4F:18:03:11:E8:85:15:B2:00
            X509v3 Authority Key Identifier:
                keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:c3:ef:3e:f5:e6:d0:75:7a:8d:fc:ed:f9:a2:81:02:81:
         d8:bd:ae:52:84:45:f5:08:d6:69:69:86:a6:d1:40:40:a4:20:
         0f:d2:5f:3b:e2:a8:6c:6f:cb:0d:12:8d:77:75:1d:43:c7:42:
         f3:8e:91:4f:21:11:29:94:74:45:2d:90:56:a9:bf:50:01:fa:
         a9:18:a6:38:b7:ba:5a:23:86:6c:37:03:b1:0d:86:65:a8:6d:
         21:ac:e7:f5:49:6d:b2:43:8d:ed:a3:7a:1e:37:88:99:e7:5d:
         3f:9b:84:39:e7:b8:90:28:c4:be:26:bb:36:5c:06:b1:68:70:
         af:9f:d9:c0:17:0f:60:f9:d5:2b:e2:8a:2b:08:07:02:dc:41:
         9c:30:5e:03:5b:94:3d:f5:88:4b:65:c4:1f:58:06:2e:77:01:
         26:e5:11:0b:15:44:56:fc:ff:41:d8:2d:75:76:85:a9:fd:be:
         5f:bd:02:6e:66:2f:e6:82:54:20:a7:cf:96:6e:e4:6c:65:cd:
         64:79:a7:4d:6a:8c:df:80:5a:73:c3:7d:37:6c:8e:a3:5d:33:
         0c:32:2c:22:86:ba:29:5a:bf:9d:a0:c2:e9:1f:7a:d1:6c:b0:
         a6:3e:6f:87:8b:1c:ea:ca:e5:c7:16:8d:8f:2a:10:dd:d4:83:
         6f:d1:13:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:41 2026 by rpki-client