Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa
File:                     3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (raw, json)
Hash identifier:          0GXiVqHET4FIeA3plxHWjQU7xk7vNPKZIk6ziqpvvGY=
Subject key identifier:   4C:5D:DF:1E:FB:0C:EC:2F:F8:DD:81:E1:A1:9B:A9:AF:07:F5:22:10
Certificate issuer:       /CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF
Certificate serial:       299132189F40B61C1F31AE398F97AD09890F8B2C
Authority key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa
Signing time:             Sun 03 May 2026 02:31:14 +0000
ROA not before:           Sun 03 May 2026 02:26:14 +0000
ROA not after:            Sun 02 May 2027 02:31:14 +0000
asID:                     150966
IP address blocks:        103.130.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl
                          rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:91:32:18:9f:40:b6:1c:1f:31:ae:39:8f:97:ad:09:89:0f:8b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF
        Validity
            Not Before: May  3 02:26:14 2026 GMT
            Not After : May  2 02:31:14 2027 GMT
        Subject: CN=4C5DDF1EFB0CEC2FF8DD81E1A19BA9AF07F52210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:d1:3d:88:10:81:82:94:dd:c1:dc:2a:96:
                    1b:c0:dc:1b:b2:b2:0c:ad:d2:cf:a0:71:0a:31:17:
                    df:31:f9:c9:a1:a9:01:5c:c4:0a:e7:1a:86:66:d8:
                    3e:01:5c:00:da:db:45:ce:49:59:0a:a0:b5:17:0d:
                    e5:c1:4e:f7:dc:57:53:17:31:35:b0:ea:28:ac:7b:
                    5c:89:11:63:ea:26:cf:08:c8:3e:c3:3d:7e:14:09:
                    58:54:dc:a1:cc:64:02:2f:29:42:99:0e:91:14:3e:
                    75:40:f4:ec:04:8a:40:87:fc:65:f5:9d:81:b8:3a:
                    ee:92:ed:b9:2b:9f:ff:4f:e7:3a:50:53:3b:96:16:
                    2a:72:cc:23:df:aa:c7:c4:cc:ba:d0:88:f2:b7:08:
                    ba:f9:e9:98:30:e4:c1:65:2c:7f:11:f4:7f:e5:dc:
                    d0:d1:0d:fa:1c:7c:2f:10:d3:b4:1d:f4:ce:ea:de:
                    15:df:ac:7e:a6:c2:59:74:77:3e:31:9f:b7:91:b2:
                    df:38:09:87:ae:01:e1:bc:05:0e:a2:1c:25:12:7e:
                    a2:ae:8b:76:9c:59:32:c8:e8:18:f1:8d:15:67:63:
                    50:aa:2f:e3:e5:7d:52:7b:c8:3c:f4:dc:3f:5b:37:
                    61:2f:58:78:eb:1f:23:ff:0b:d2:85:da:d2:aa:e9:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5D:DF:1E:FB:0C:EC:2F:F8:DD:81:E1:A1:9B:A9:AF:07:F5:22:10
            X509v3 Authority Key Identifier:
                keyid:9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:df:0c:ca:2d:db:2e:43:aa:74:2c:bd:be:9b:13:7c:1e:72:
         1a:3e:0c:f3:07:3a:6e:74:0c:56:c8:a9:51:df:33:c1:0d:b9:
         57:33:e1:6a:15:68:7e:11:41:46:21:8a:5d:75:38:eb:c1:81:
         82:c2:35:58:79:97:ed:18:49:1c:cc:99:84:02:7d:01:22:60:
         e9:36:4e:6b:57:d4:73:df:98:98:38:93:29:f0:cc:6b:e3:e2:
         75:e7:40:d6:11:b0:8f:04:6b:af:08:e7:8e:d0:9c:37:54:70:
         84:5b:57:fa:20:81:f1:e5:52:d8:a7:6d:00:a4:f0:43:01:2c:
         61:93:de:9c:66:9a:4c:03:eb:08:ec:bb:b1:7c:d8:62:09:6b:
         e8:c4:e1:6f:dd:bc:31:7f:b9:2a:2f:32:66:ba:15:43:4a:e1:
         e5:58:d5:8b:93:ae:f4:59:6f:43:64:a2:07:70:04:01:38:fc:
         46:dd:52:5c:c9:58:a0:9f:56:cb:4d:9c:09:9a:e4:91:8c:31:
         e7:9b:10:ed:2d:da:c5:6c:8d:f1:26:f1:4f:7e:6d:dd:89:a4:
         9d:c9:a5:00:1a:27:90:6a:60:ba:6f:93:b1:62:22:ee:34:f2:
         8a:08:a7:80:6a:d9:2e:66:df:4b:92:8f:59:09:63:17:c4:ee:
         94:96:31:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:14 2026 by rpki-client