Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/3130332e392e3132342e302f32322d3234203d3e20313331373131.roa
File:                     3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (raw, json)
Hash identifier:          9s/KWt2GLgE9Lqh9OeA0wRdz37jZuL1+VikwLN7K/9c=
Subject key identifier:   35:A1:39:65:A1:08:6C:C3:67:5C:71:86:8B:F2:C3:B6:18:E1:EA:97
Certificate issuer:       /CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4
Certificate serial:       418F5694D8BA86582C2C8EE9FAE19385B4536687
Authority key identifier: AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/3130332e392e3132342e302f32322d3234203d3e20313331373131.roa
Signing time:             Sun 03 May 2026 02:26:58 +0000
ROA not before:           Sun 03 May 2026 02:21:58 +0000
ROA not after:            Sun 02 May 2027 02:26:58 +0000
asID:                     131711
IP address blocks:        103.9.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl
                          rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8f:56:94:d8:ba:86:58:2c:2c:8e:e9:fa:e1:93:85:b4:53:66:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4
        Validity
            Not Before: May  3 02:21:58 2026 GMT
            Not After : May  2 02:26:58 2027 GMT
        Subject: CN=35A13965A1086CC3675C71868BF2C3B618E1EA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:80:57:49:80:de:ad:7f:f7:e5:6a:dd:68:
                    13:3a:e7:d3:cf:be:b6:2c:98:c4:c2:b8:fd:12:46:
                    2b:1b:5d:11:51:b3:6a:5b:cc:9d:d4:fd:61:db:38:
                    ba:a7:59:7f:03:93:94:80:e5:ef:40:8f:92:78:d2:
                    9d:34:c7:fc:33:08:02:6f:00:8f:b8:82:6b:2b:24:
                    a6:f0:fd:04:c8:e4:93:d2:d2:0b:aa:a0:80:fa:39:
                    cd:ef:df:27:2d:75:24:b0:f8:62:e1:b2:26:84:84:
                    2c:3c:34:ae:6e:9d:19:5c:8b:49:a3:a1:f1:e3:1c:
                    01:19:bb:8e:ed:e0:d4:38:bb:52:4c:06:f2:66:43:
                    30:3d:97:b0:92:91:40:78:e5:70:cb:b3:8b:f4:29:
                    65:88:34:cf:f1:93:ae:c3:fe:9a:f0:44:7e:e4:16:
                    f6:ec:a5:92:47:e8:f5:14:19:47:5d:79:00:2f:3e:
                    2a:81:95:f2:48:52:00:bf:75:da:46:7d:04:b5:2a:
                    b5:8c:54:0e:27:df:97:6e:f3:57:a8:f9:7f:6f:21:
                    ad:db:f0:a8:43:ef:4a:b8:c9:85:1b:45:52:3a:ce:
                    cb:8c:eb:3c:37:35:e5:1b:20:02:9b:2e:3d:b7:5f:
                    5f:d4:be:f5:e7:3a:af:f4:f3:b8:6a:eb:51:03:d5:
                    df:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A1:39:65:A1:08:6C:C3:67:5C:71:86:8B:F2:C3:B6:18:E1:EA:97
            X509v3 Authority Key Identifier:
                keyid:AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/3130332e392e3132342e302f32322d3234203d3e20313331373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:0d:9c:bf:81:3f:5d:56:f3:28:02:38:14:ad:ac:df:26:ff:
         a1:c5:16:de:71:9d:10:94:6b:ac:44:62:3b:ee:93:92:84:4f:
         37:2f:a3:ad:cf:3e:a0:bb:99:af:9d:83:1b:32:6a:8e:7d:71:
         26:69:69:17:9f:bd:5c:8a:be:72:c7:5d:af:6c:bf:98:97:01:
         7e:f7:8b:fb:a1:25:3b:6a:04:ec:f5:19:a9:8d:a2:18:46:09:
         5f:23:0e:95:ca:4a:77:f8:87:e4:4c:d1:be:75:df:f2:0b:62:
         49:03:af:01:48:12:54:3e:ad:10:36:79:15:49:a7:f9:f3:b3:
         94:49:4b:59:9b:14:5d:75:61:59:77:89:f5:00:31:95:c4:6d:
         2d:5b:83:cc:0e:7d:95:0f:bd:eb:dd:8a:7a:c7:4b:35:b3:bd:
         16:f0:c5:51:88:48:f8:53:83:a6:43:44:13:4f:53:4d:70:c5:
         2d:6b:93:44:79:fc:90:2b:e1:bb:5d:16:04:a1:05:ee:26:de:
         b1:d8:e1:2c:4c:1d:0e:18:23:34:33:4f:df:75:b9:b6:b9:30:
         ed:4d:b6:d6:ca:6c:fa:b3:07:43:a2:d3:69:aa:21:1d:6b:90:
         28:39:48:ba:d2:02:17:d4:9f:a1:fb:81:cf:f2:90:cd:cc:d9:
         88:e1:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:22 2026 by rpki-client