Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32342d3234203d3e203338373838.roa
File:                     3130332e372e302e302f32342d3234203d3e203338373838.roa (raw, json)
Hash identifier:          Oro/PlzrcwhR+DRRwBnJ1PRk7SRQNnxZIcnkIGvWHPE=
Subject key identifier:   22:71:26:AA:DB:E4:02:0B:63:78:91:38:10:C1:DB:A1:2C:08:D8:7A
Certificate issuer:       /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Certificate serial:       0A0F22CB3DB11CD2A2E47724B3646F7A3B3D49A4
Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32342d3234203d3e203338373838.roa
Signing time:             Sun 03 May 2026 02:25:06 +0000
ROA not before:           Sun 03 May 2026 02:20:06 +0000
ROA not after:            Sun 02 May 2027 02:25:06 +0000
asID:                     38788
IP address blocks:        103.7.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
                          rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0f:22:cb:3d:b1:1c:d2:a2:e4:77:24:b3:64:6f:7a:3b:3d:49:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
        Validity
            Not Before: May  3 02:20:06 2026 GMT
            Not After : May  2 02:25:06 2027 GMT
        Subject: CN=227126AADBE4020B6378913810C1DBA12C08D87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:56:3e:37:21:69:f3:5b:68:4b:52:05:ca:
                    09:99:61:48:29:d5:38:d4:bb:c1:76:5b:3a:c4:29:
                    47:13:18:54:78:e8:6d:66:1c:b1:76:bd:12:3e:cc:
                    23:ea:cd:07:6f:a9:34:3b:4c:c1:4b:9f:29:8f:a8:
                    a2:bd:aa:43:41:41:b0:52:c1:45:b7:65:b0:f2:9d:
                    29:dc:af:b7:35:78:8d:08:71:92:3f:c9:d2:8f:af:
                    27:b3:b3:24:71:79:56:8b:01:90:b7:8b:db:3a:7f:
                    86:d6:25:ce:0f:69:d7:03:51:3a:99:1c:16:25:26:
                    0e:7e:9a:91:14:a0:75:f8:e5:e6:26:0c:89:c3:f9:
                    b4:93:7a:dc:64:ff:5f:39:87:be:f2:7f:06:4b:7c:
                    d4:a4:6b:ba:26:44:aa:3c:d1:07:fa:5a:3e:37:6f:
                    87:a8:15:8e:8b:b9:b5:58:a8:aa:72:a1:3e:cd:73:
                    a6:14:a0:ef:34:e0:3e:ad:19:12:df:67:09:1e:19:
                    b3:4b:08:a2:bc:6a:67:50:9e:5a:fb:9f:3a:eb:2a:
                    72:63:bc:54:58:da:e1:f2:1b:c0:5b:02:a8:b6:9b:
                    1e:8c:d6:65:3f:c4:5f:a2:c6:af:1f:48:f7:00:7e:
                    a0:70:c5:cd:90:92:55:9f:b1:0d:4c:05:71:dc:ad:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:71:26:AA:DB:E4:02:0B:63:78:91:38:10:C1:DB:A1:2C:08:D8:7A
            X509v3 Authority Key Identifier:
                keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32342d3234203d3e203338373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:49:f8:cb:9d:a1:d0:3f:ea:0f:30:ad:a2:8b:ac:a2:c6:f4:
         3e:05:b4:c1:39:be:f2:40:ee:72:94:30:8c:bc:02:bc:08:a6:
         02:12:cc:9e:9d:92:60:f8:05:9c:ce:1e:1c:84:3b:c7:58:07:
         ae:e0:b6:f7:18:a3:c6:12:d9:ae:22:41:dc:31:e7:45:d8:66:
         97:f2:90:d9:98:3f:0c:ea:4f:31:40:15:4a:13:bf:a2:07:ab:
         ed:02:48:ad:a3:4a:70:13:ad:e7:0a:f1:05:1e:bd:fe:dc:5e:
         02:61:38:3c:4d:a9:4d:ac:f5:9b:b9:ad:93:48:ec:01:df:2d:
         ae:c9:ae:08:23:a4:27:b7:10:e6:f2:02:d4:de:e3:9b:98:f5:
         55:31:a4:a8:6b:de:0e:70:c2:21:d5:45:40:39:dc:ea:0f:5b:
         6f:c7:4a:a2:94:ac:c6:78:2f:70:8a:d2:86:c8:6f:cc:0f:29:
         e6:b2:19:e8:f8:77:2a:1d:af:5b:54:d6:31:88:83:4a:c9:dd:
         f9:49:96:c5:54:46:92:96:4c:f6:84:ad:9f:22:4e:88:bb:4a:
         9f:01:e7:c0:a7:94:e2:38:d2:b9:2a:ce:26:1a:93:21:6d:d1:
         e9:9f:28:60:4b:0c:b2:60:ef:51:c9:fa:da:82:30:d8:53:1a:
         97:3b:c7:1c
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUCg8iyz2xHNKi5Hcks2Rvejs9SaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlBRDIzOUE2QzU4QkRDMzY1MERCMkJFODE3RjJFOUEz
OUFCQ0I1NjAeFw0yNjA1MDMwMjIwMDZaFw0yNzA1MDIwMjI1MDZaMDMxMTAvBgNV
BAMTKDIyNzEyNkFBREJFNDAyMEI2Mzc4OTEzODEwQzFEQkExMkMwOEQ4N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Y1Y+NyFp81toS1IFygmZYUgp
1TjUu8F2WzrEKUcTGFR46G1mHLF2vRI+zCPqzQdvqTQ7TMFLnymPqKK9qkNBQbBS
wUW3ZbDynSncr7c1eI0IcZI/ydKPryezsyRxeVaLAZC3i9s6f4bWJc4PadcDUTqZ
HBYlJg5+mpEUoHX45eYmDInD+bSTetxk/185h77yfwZLfNSka7omRKo80Qf6Wj43
b4eoFY6LubVYqKpyoT7Nc6YUoO804D6tGRLfZwkeGbNLCKK8amdQnlr7nzrrKnJj
vFRY2uHyG8BbAqi2mx6M1mU/xF+ixq8fSPcAfqBwxc2QklWfsQ1MBXHcrcOzAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUInEmqtvkAgtjeJE4EMHboSwI2HowHwYDVR0j
BBgwFoAUma0jmmxYvcNlDbK+gX8umjmry1YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzRlMmJmMDktNWY0Mi00YjY1LWE0MmQtNjNkMDc5NmQyMDZjLzAvOTlBRDIzOUE2
QzU4QkRDMzY1MERCMkJFODE3RjJFOUEzOUFCQ0I1Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OUFEMjM5QTZDNThCREMzNjUwREIyQkU4MTdGMkU5QTM5QUJD
QjU2LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkGCCsGAQUFBzALhn1yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0
MmQtNjNkMDc5NmQyMDZjLzAvMzEzMDMzMmUzNzJlMzAyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMzM4MzczODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZwcAMA0GCSqGSIb3DQEBCwUA
A4IBAQBwSfjLnaHQP+oPMK2ii6yixvQ+BbTBOb7yQO5ylDCMvAK8CKYCEsyenZJg
+AWczh4chDvHWAeu4Lb3GKPGEtmuIkHcMedF2GaX8pDZmD8M6k8xQBVKE7+iB6vt
Akito0pwE63nCvEFHr3+3F4CYTg8TalNrPWbua2TSOwB3y2uya4II6QntxDm8gLU
3uObmPVVMaSoa94OcMIh1UVAOdzqD1tvx0qilKzGeC9witKGyG/MDynmshno+Hcq
Ha9bVNYxiINKyd35SZbFVEaSlkz2hK2fIk6Iu0qfAefAp5TiONK5Ks4mGpMhbdHp
nyhgSwyyYO9RyfragjDYUxqXO8cc
-----END CERTIFICATE-----
Generated at Wed May 13 01:41:55 2026 by rpki-client