Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e372e302f32342d3234203d3e20313333383237.roa
File:                     3130332e39352e372e302f32342d3234203d3e20313333383237.roa (raw, json)
Hash identifier:          g0pqFy9DWm0Sz42lbSirSeYkq3Vdx407OgsTjSScBgc=
Subject key identifier:   99:D8:51:83:FA:52:A6:BA:25:87:B4:A4:DA:3C:95:9A:24:6A:49:8D
Certificate issuer:       /CN=AF6B7BCDACF90BA83205EA298327379BAB489418
Certificate serial:       4CCC1E30D20D14990402F497D5FF0FBD093857B0
Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e372e302f32342d3234203d3e20313333383237.roa
Signing time:             Sun 03 May 2026 02:35:30 +0000
ROA not before:           Sun 03 May 2026 02:30:30 +0000
ROA not after:            Sun 02 May 2027 02:35:30 +0000
asID:                     133827
IP address blocks:        103.95.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl
                          rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:cc:1e:30:d2:0d:14:99:04:02:f4:97:d5:ff:0f:bd:09:38:57:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418
        Validity
            Not Before: May  3 02:30:30 2026 GMT
            Not After : May  2 02:35:30 2027 GMT
        Subject: CN=99D85183FA52A6BA2587B4A4DA3C959A246A498D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:74:8e:9c:34:ca:70:a5:1e:59:dd:54:fc:
                    f3:5c:d0:5d:bc:91:80:e6:7d:05:4c:86:48:3f:ab:
                    e6:c1:59:68:10:da:3c:49:c7:3e:29:78:49:f6:4a:
                    fa:5b:fc:ce:52:73:e3:45:67:af:96:ac:01:89:59:
                    03:c1:bd:15:61:0f:f9:4a:f7:7d:da:79:01:cd:f7:
                    8b:be:14:e6:c7:ab:89:bc:c7:a4:9c:63:25:ba:64:
                    50:0d:4a:3a:8b:1a:36:21:0d:8b:82:d0:0d:2d:0e:
                    75:ed:fb:b1:f2:ed:a0:7c:ba:a3:9e:17:06:08:68:
                    b9:a0:f2:ac:3d:fb:f2:f2:95:08:7e:5f:70:ef:bb:
                    a4:49:de:87:8a:10:84:0e:6b:52:b9:1c:f2:38:ad:
                    b5:fe:c6:23:5a:0a:ef:a2:bc:b9:5e:b0:aa:8d:ae:
                    e2:5f:fa:f5:f9:0b:72:2b:a2:9b:92:27:32:b5:65:
                    c1:a1:c5:7f:04:3f:74:1d:07:e3:e1:2b:ec:25:42:
                    50:db:ab:9e:98:51:0e:31:c3:a9:dc:50:78:c6:03:
                    77:8d:29:b1:7d:9e:89:0f:ff:c6:d3:32:9e:3e:73:
                    e5:db:17:a9:7b:91:f2:52:56:d7:d9:6c:3b:11:5f:
                    4d:27:aa:64:de:cf:bb:30:64:e5:ac:44:d8:19:b7:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D8:51:83:FA:52:A6:BA:25:87:B4:A4:DA:3C:95:9A:24:6A:49:8D
            X509v3 Authority Key Identifier:
                keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e372e302f32342d3234203d3e20313333383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:17:f3:d8:a0:a4:83:9a:8e:70:73:74:70:ef:4b:e7:de:
         40:cc:2d:af:24:a7:ec:e7:1f:dc:13:f7:33:01:b7:fb:7d:bf:
         1b:19:94:bb:77:1c:19:ba:b6:69:9c:da:ed:43:42:4b:4d:69:
         4d:e8:0f:5b:98:ff:61:3c:32:d7:a2:7d:3e:fe:dd:a1:1b:8e:
         30:81:56:83:f2:1b:a9:c4:4b:5b:1c:8c:51:c5:af:97:6f:c9:
         30:27:15:6e:37:7a:13:5e:01:64:f0:db:51:b3:11:5c:2e:09:
         cb:e7:f5:d2:b3:b4:c0:11:a1:12:fd:64:b8:32:fe:22:96:d9:
         fd:87:d7:5e:a7:f5:6c:2a:ae:d1:4c:53:b0:19:22:ba:cc:e4:
         ac:12:23:7e:ed:4d:a1:98:35:e4:23:16:a7:2d:3f:0f:90:85:
         14:45:11:14:01:74:a8:38:b6:6b:21:bc:7a:0b:7e:a0:9d:6e:
         56:fd:32:89:e9:7a:43:09:05:a8:ce:3a:c1:34:53:05:a2:d8:
         f2:be:2e:04:ff:3f:3a:98:c3:1d:ae:84:aa:de:71:f6:4c:8c:
         d2:8a:ea:05:b2:f7:43:85:1b:20:d6:57:60:c8:87:11:7a:7a:
         c0:a4:f9:9a:cc:11:16:d0:92:26:49:1c:46:8c:a1:81:4b:61:
         07:fa:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:59 2026 by rpki-client