Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa
File:                     3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (raw, json)
Hash identifier:          7tVf8gGpMSKXIGs5t/hRwc2QOWzsG/fnuruBADT3qTU=
Subject key identifier:   8B:15:95:2F:A8:DD:B2:A3:85:CC:99:48:61:01:A9:53:30:37:70:A5
Certificate issuer:       /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial:       1D00EBAD30337F2DB09FAD1B8AE67B1EE707BA5F
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa
Signing time:             Sun 03 May 2026 02:42:35 +0000
ROA not before:           Sun 03 May 2026 02:37:35 +0000
ROA not after:            Sun 02 May 2027 02:42:35 +0000
asID:                     38750
IP address blocks:        103.213.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
                          rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:00:eb:ad:30:33:7f:2d:b0:9f:ad:1b:8a:e6:7b:1e:e7:07:ba:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
        Validity
            Not Before: May  3 02:37:35 2026 GMT
            Not After : May  2 02:42:35 2027 GMT
        Subject: CN=8B15952FA8DDB2A385CC99486101A953303770A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:8f:92:de:82:4e:a4:56:4f:2c:f4:08:c2:
                    2d:90:76:1e:44:3e:8b:86:5a:89:83:cf:30:8b:3a:
                    24:69:e3:3c:5c:d8:4c:3f:4d:be:43:7e:c4:7b:c8:
                    9b:b8:be:10:55:41:07:dc:66:e4:5f:4d:7c:cd:6d:
                    3b:38:26:cb:1e:a6:d1:e9:eb:03:9d:15:fe:3a:a8:
                    b8:0d:d6:dc:27:62:b0:0d:b3:18:27:c2:86:24:fd:
                    1a:5c:a4:c9:51:0e:e6:18:62:a4:63:f4:2e:b8:46:
                    9d:41:00:2d:da:b9:3c:24:43:01:b9:7f:80:e4:67:
                    96:6f:8d:7e:3e:75:86:cf:d6:7b:03:00:5b:5a:a6:
                    9e:53:b4:8c:5a:2a:29:11:eb:4e:a8:69:5c:38:0f:
                    ac:ec:77:90:d1:8d:80:71:cc:9a:58:9b:e1:9d:bb:
                    63:f8:30:22:3a:e5:36:02:ec:bc:f8:9e:e6:2c:45:
                    c1:ef:a6:ec:a0:d2:af:bc:8c:de:84:76:0b:ac:e8:
                    bf:eb:cf:e1:b8:15:46:bf:e2:e4:6a:d6:da:b4:a0:
                    ae:c4:16:51:dd:3f:ca:b1:df:75:a4:4d:d9:ea:51:
                    c5:b0:37:ca:e9:84:b0:3c:c4:b8:16:05:49:90:6e:
                    4c:1f:df:ea:d3:b7:86:0e:b9:b6:b9:88:0f:0d:be:
                    59:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:95:2F:A8:DD:B2:A3:85:CC:99:48:61:01:A9:53:30:37:70:A5
            X509v3 Authority Key Identifier:
                keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:73:b4:4f:14:06:ec:f9:7f:9f:23:ac:97:48:7f:e9:f6:
         09:2a:48:7d:f0:ca:28:6a:89:5f:b4:12:c8:f9:46:b6:a3:f2:
         8a:0e:c8:e7:04:ef:cd:b9:ce:ed:a4:51:3a:f0:36:ce:d0:37:
         bf:50:f9:0e:7e:00:f2:de:be:8e:00:a2:7f:6d:4e:4e:ad:1a:
         fb:44:c7:94:0d:09:33:2d:e1:ae:b3:51:28:55:40:69:13:5a:
         a7:35:36:45:5e:04:d1:c3:e3:ac:46:7f:e9:a1:6f:24:94:4c:
         20:1b:2c:4f:75:ff:94:7a:7d:3b:a5:be:e2:56:f9:aa:95:61:
         81:41:a1:c9:6d:1a:04:5b:a5:d7:58:07:84:ce:54:0b:b4:ad:
         f3:79:57:1e:1f:b6:4e:70:de:83:59:ce:38:01:4b:f7:92:bb:
         60:73:7e:d4:41:49:c4:0c:4e:4d:f7:a1:3a:3d:e8:60:1a:e4:
         29:12:19:b5:60:9b:0b:64:88:68:64:91:50:91:03:57:63:9f:
         1d:0f:81:e6:02:b3:62:8f:35:a7:65:3c:42:2c:1b:62:6c:75:
         9b:d9:f8:7e:f6:15:8f:8a:b4:8f:35:9a:6c:2b:08:07:dd:9d:
         d8:bc:09:36:77:59:d0:c3:f8:75:b4:1e:0a:8a:03:ef:92:ba:
         eb:ef:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:47 2026 by rpki-client