Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/3130332e34312e3139322e302f32322d3234203d3e203538333937.roa
File:                     3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (raw, json)
Hash identifier:          eAwax4YpAFVnhFTpTcP/7sxY2Fc6q05CXGATtMyPlAE=
Subject key identifier:   ED:27:3B:21:9C:81:30:D4:CE:E6:23:F2:8C:49:C5:67:5F:D1:68:4B
Certificate issuer:       /CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430
Certificate serial:       259AC1B8B3CD01095BB0777C09CB16D692C7EA69
Authority key identifier: D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/3130332e34312e3139322e302f32322d3234203d3e203538333937.roa
Signing time:             Sun 03 May 2026 02:32:54 +0000
ROA not before:           Sun 03 May 2026 02:27:54 +0000
ROA not after:            Sun 02 May 2027 02:32:54 +0000
asID:                     58397
IP address blocks:        103.41.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl
                          rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9a:c1:b8:b3:cd:01:09:5b:b0:77:7c:09:cb:16:d6:92:c7:ea:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430
        Validity
            Not Before: May  3 02:27:54 2026 GMT
            Not After : May  2 02:32:54 2027 GMT
        Subject: CN=ED273B219C8130D4CEE623F28C49C5675FD1684B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:e0:3e:f3:af:6f:9b:08:b0:8c:8d:83:fc:
                    23:65:03:fa:48:ce:bd:d9:2a:51:31:de:bd:46:6d:
                    0c:a5:02:1b:35:5e:9c:8d:88:0c:8d:33:d8:28:66:
                    a7:6e:25:19:2b:d6:e6:99:aa:e0:88:68:7d:ca:0c:
                    50:e3:06:1d:5c:e4:06:c0:15:9c:97:a6:89:48:36:
                    f7:b8:e4:19:41:28:99:3b:7c:b9:23:15:e9:3b:ba:
                    a5:7b:35:7f:53:bc:d8:ce:1e:47:72:72:ff:e7:fd:
                    ae:e4:28:2b:23:76:23:cf:4f:da:bb:92:d1:26:dc:
                    c3:87:a2:f2:d8:89:15:4f:0e:3c:5e:e7:3e:79:ff:
                    bf:cb:75:40:42:62:ca:c0:69:ca:20:56:f6:73:d7:
                    a8:79:a3:08:15:4e:e8:92:48:a3:c6:c6:de:07:62:
                    08:ae:22:f8:d4:d6:71:da:d4:48:fd:cb:76:d3:e1:
                    6e:d0:a5:7c:17:10:77:86:4b:d8:6c:87:97:9c:fc:
                    9b:9a:8c:9f:d5:54:55:79:1d:54:ee:c8:82:96:12:
                    93:55:c6:60:2f:ff:38:22:fe:f3:bd:98:42:fe:60:
                    54:62:ab:ea:66:38:b6:28:59:ad:99:23:25:6e:19:
                    3b:30:ac:d3:4e:86:12:f0:92:9a:6e:24:06:f1:05:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:27:3B:21:9C:81:30:D4:CE:E6:23:F2:8C:49:C5:67:5F:D1:68:4B
            X509v3 Authority Key Identifier:
                keyid:D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/3130332e34312e3139322e302f32322d3234203d3e203538333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:aa:f8:11:4b:25:21:fa:38:ff:f9:4e:21:23:4e:07:5a:
         e3:4b:8a:9b:8b:13:05:e0:c1:7f:70:57:d1:14:7f:15:9d:b8:
         5c:e8:05:71:e2:50:b2:a3:bf:87:34:d3:af:21:f2:64:03:87:
         be:45:4a:77:5a:af:eb:61:10:e5:35:36:17:ed:ed:a3:bb:4b:
         aa:fa:95:aa:9a:e7:77:db:9b:6c:e5:8d:02:00:87:68:1f:b0:
         ba:eb:e3:59:ea:c2:e8:f7:8b:9f:95:7a:db:9e:87:33:dc:84:
         e0:52:4b:ca:55:6a:f3:23:77:53:0b:8a:09:47:61:e7:8a:20:
         00:af:90:21:75:bf:4b:1d:c7:39:82:d5:3c:c8:c8:f2:7a:de:
         21:72:c4:58:16:1b:07:33:c4:ef:f7:8a:4a:df:29:1d:e7:87:
         24:75:56:67:73:82:45:ad:00:a8:68:57:04:de:11:eb:bb:10:
         7a:ab:c2:6d:d0:7c:d0:03:bf:3f:d0:2e:d9:7d:10:db:b5:49:
         b0:60:cc:df:d9:5f:71:97:22:7c:ca:90:05:36:29:6d:72:0f:
         01:b5:b5:d6:16:69:a9:6e:44:63:0a:50:b2:9a:62:94:65:39:
         2c:bf:d2:f7:2b:dc:60:c1:75:16:7e:6a:9a:e0:bd:e4:c8:eb:
         ed:f9:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:05 2026 by rpki-client