Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32332d3233203d3e203338373838.roa
File:                     3130332e372e302e302f32332d3233203d3e203338373838.roa (raw, json)
Hash identifier:          PSuRmEPi8uUru97FfcCOeTvVbgMQrGuLQwDV3VMgdz8=
Subject key identifier:   9B:E4:12:6C:60:CF:55:E6:EB:63:AF:2F:2D:65:4A:E2:56:D9:72:21
Certificate issuer:       /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Certificate serial:       7ADE370A255D7104037AAF119ADC6610A145699D
Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32332d3233203d3e203338373838.roa
Signing time:             Sun 03 May 2026 02:25:05 +0000
ROA not before:           Sun 03 May 2026 02:20:05 +0000
ROA not after:            Sun 02 May 2027 02:25:05 +0000
asID:                     38788
IP address blocks:        103.7.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
                          rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:de:37:0a:25:5d:71:04:03:7a:af:11:9a:dc:66:10:a1:45:69:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
        Validity
            Not Before: May  3 02:20:05 2026 GMT
            Not After : May  2 02:25:05 2027 GMT
        Subject: CN=9BE4126C60CF55E6EB63AF2F2D654AE256D97221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:d0:cf:31:13:b1:57:23:c3:d2:07:14:c8:
                    54:41:b6:5e:2f:7e:82:72:2d:36:91:29:93:fb:41:
                    3d:4e:97:b8:b2:ad:0f:53:51:d1:8e:74:a2:db:59:
                    58:9f:a0:74:15:af:0d:67:b9:8c:46:e6:34:91:9a:
                    c1:88:d3:20:33:fc:61:65:2b:95:dd:af:1f:36:a6:
                    b9:87:b9:eb:ae:7a:ee:59:f8:17:f0:0a:d4:c0:87:
                    fd:84:08:04:39:1c:37:c8:8c:ff:a6:71:bb:3a:b7:
                    e6:85:79:09:e9:32:1f:61:b3:75:2d:5c:35:8b:e6:
                    f6:25:d7:e1:3e:37:b2:e4:84:9a:e3:1d:01:df:87:
                    b1:d4:c0:40:5f:d5:f1:17:75:c0:ff:ad:cc:eb:27:
                    2d:60:86:4f:2a:d0:bf:5f:1b:99:e4:92:a8:be:c9:
                    1c:98:cf:e8:a2:71:0f:0e:62:e2:4f:97:d8:9b:6a:
                    c0:ae:c8:3f:19:80:be:38:8a:c0:3c:ff:11:d3:06:
                    24:6b:ee:5f:9e:9a:73:1b:68:96:41:6c:6e:35:22:
                    26:e2:9b:e9:ae:91:7c:17:2f:98:7d:26:a9:a5:f8:
                    22:17:d7:ad:b0:37:79:ba:c5:54:f1:a4:b1:cd:05:
                    9e:4b:de:47:2d:08:27:63:45:1f:f8:8f:64:29:1e:
                    8a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E4:12:6C:60:CF:55:E6:EB:63:AF:2F:2D:65:4A:E2:56:D9:72:21
            X509v3 Authority Key Identifier:
                keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32332d3233203d3e203338373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:20:94:47:d6:88:e3:eb:11:e0:8f:2e:6a:fa:f8:e6:78:
         1d:5a:d4:e1:34:b1:5e:a6:e5:19:37:db:fe:54:09:f5:9b:08:
         b3:88:f0:05:2b:48:10:22:23:0c:03:e2:f3:c3:ee:71:79:0e:
         4c:81:cd:a6:94:91:19:87:88:6c:b6:01:e4:ed:6f:ae:1b:14:
         9b:94:d7:e6:4a:7a:40:e4:01:f5:74:47:86:82:85:73:81:b3:
         66:c3:93:59:f3:3f:8b:fa:77:6b:ec:b0:f9:a8:1a:b9:31:b4:
         af:b1:60:f7:0a:a0:c9:c5:a7:f0:55:45:c7:82:f5:71:f3:8b:
         b9:51:3c:a2:dc:48:90:a2:5b:56:14:c1:ac:b3:d2:7d:ca:fc:
         04:80:c8:84:bc:20:c8:10:4a:0f:b7:f0:4f:53:e4:db:e2:3e:
         df:a4:0b:6f:28:7e:1b:18:ec:0c:6e:e7:a6:9b:45:b8:03:a1:
         90:cb:4e:e3:16:28:30:5a:53:2e:83:d7:46:75:ba:d0:6c:a4:
         55:26:69:d8:f2:8d:82:82:2f:38:4c:9f:b4:79:c7:b2:6e:0d:
         37:88:0b:b3:73:26:46:e0:13:56:ff:8b:43:39:4c:97:0c:74:
         24:af:ea:16:42:a8:66:5e:fc:45:31:ca:f8:3f:fe:41:df:46:
         29:65:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:50 2026 by rpki-client