Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa
File:                     3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (raw, json)
Hash identifier:          Wixcu+2ilRcFPig7lum9EHWYiNT3uxWOphv6H0Og4uE=
Subject key identifier:   FB:D1:C1:36:B8:C8:BC:99:1F:76:AE:66:80:F7:24:33:98:51:11:D5
Certificate issuer:       /CN=9DE0710D199DAE298457CA63B91BD20C03F148B9
Certificate serial:       7087EEB379C01ADBEB408F4CF5E9986C2F80EF48
Authority key identifier: 9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa
Signing time:             Sun 03 May 2026 02:39:55 +0000
ROA not before:           Sun 03 May 2026 02:34:55 +0000
ROA not after:            Sun 02 May 2027 02:39:55 +0000
asID:                     149923
IP address blocks:        103.191.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl
                          rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:87:ee:b3:79:c0:1a:db:eb:40:8f:4c:f5:e9:98:6c:2f:80:ef:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE0710D199DAE298457CA63B91BD20C03F148B9
        Validity
            Not Before: May  3 02:34:55 2026 GMT
            Not After : May  2 02:39:55 2027 GMT
        Subject: CN=FBD1C136B8C8BC991F76AE6680F72433985111D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:59:20:69:f3:2c:70:a5:fa:8a:a3:06:d4:
                    e2:ba:7d:65:33:88:96:a7:f0:dd:b8:f2:25:e2:c4:
                    f0:c4:b2:fc:dc:6a:09:4f:3e:42:a9:b3:fb:7b:87:
                    e6:d1:2b:8b:82:47:a8:fd:42:48:af:b9:49:1e:38:
                    da:9e:0e:87:f2:e8:35:86:b9:e1:2f:54:b5:8b:68:
                    aa:62:38:54:7f:30:7a:2e:1b:2d:8a:c1:34:b2:ea:
                    04:80:c6:ab:ea:e9:33:fb:54:9b:c2:15:84:b7:0a:
                    46:a9:3c:ce:be:cc:5e:b7:7e:ac:1b:b5:f6:41:a7:
                    3d:d7:a0:b3:4b:e9:ae:46:11:e4:a0:46:e2:57:41:
                    da:45:90:b2:8e:fe:3b:17:dd:ff:8e:89:7d:a5:76:
                    6a:ff:0f:25:76:e0:62:16:21:72:4e:a9:ce:2e:b7:
                    ed:72:4b:b1:15:fb:7d:48:29:3c:41:9d:da:62:87:
                    62:6e:8a:ad:9d:c0:ba:51:ec:7c:30:41:7d:19:bf:
                    de:9e:59:41:06:45:fb:6b:ef:df:09:54:64:c8:4d:
                    d1:ae:37:c9:8a:36:06:01:ca:f0:b4:ac:c3:ab:ce:
                    9d:cf:e3:8d:f7:ed:5a:ee:a8:19:59:dc:7c:7d:50:
                    69:06:a8:fd:4b:ec:d1:cf:59:0c:92:af:4d:50:43:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D1:C1:36:B8:C8:BC:99:1F:76:AE:66:80:F7:24:33:98:51:11:D5
            X509v3 Authority Key Identifier:
                keyid:9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ca:73:35:59:63:03:29:19:a5:b5:ae:d2:f0:a9:14:fa:de:
         6d:c5:c4:8d:bc:1b:59:32:02:b0:8a:2f:7b:c0:dd:99:ca:7d:
         ad:e0:84:7f:84:6e:66:6c:e7:56:3f:fc:23:df:43:9d:e8:ad:
         ac:e4:ad:9b:ed:88:1e:a1:33:83:90:eb:1c:7e:b5:5a:68:5e:
         60:63:1e:ae:3f:f3:94:68:6a:28:75:b0:38:cf:ee:c5:e7:75:
         5b:4c:4a:89:34:20:c5:ca:5d:f6:74:56:ba:75:a7:3e:aa:d2:
         2a:46:01:ee:cc:35:32:87:23:d5:4a:80:00:d0:cb:0a:13:d3:
         49:1d:92:73:8b:5f:cd:b5:90:47:9b:69:5c:87:8b:db:77:8b:
         78:ac:8a:f8:d9:46:06:77:1e:1f:3d:cf:8a:54:bd:4d:27:2f:
         7d:98:d2:0c:d6:9b:0b:ff:63:f9:84:4a:d1:e8:bf:91:df:56:
         27:a9:42:7a:90:0f:17:ef:2a:00:84:67:13:83:d9:75:36:a0:
         95:0a:0b:b7:84:e9:dc:14:b5:d2:d7:1f:93:c5:e1:30:c5:b8:
         9b:7d:de:47:87:33:9e:0f:21:e7:9a:a2:4b:38:a0:b3:b7:04:
         0a:2d:f7:13:22:8c:67:3d:11:fc:1a:c7:77:45:7a:ee:78:c9:
         c0:2a:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:18 2026 by rpki-client