Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa
File:                     3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (raw, json)
Hash identifier:          P+T4tPAca5KIeh3NpH+v8b7bFtAY7StYgksmfQ3/9cM=
Subject key identifier:   A7:C1:45:A1:B5:8A:E4:36:76:5A:9E:B4:AC:74:90:5C:14:7B:63:9B
Certificate issuer:       /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial:       567FBC757D19412BB68D629E1DBA133D5A3ACFC7
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa
Signing time:             Sun 03 May 2026 02:42:35 +0000
ROA not before:           Sun 03 May 2026 02:37:35 +0000
ROA not after:            Sun 02 May 2027 02:42:35 +0000
asID:                     38750
IP address blocks:        103.213.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
                          rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7f:bc:75:7d:19:41:2b:b6:8d:62:9e:1d:ba:13:3d:5a:3a:cf:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
        Validity
            Not Before: May  3 02:37:35 2026 GMT
            Not After : May  2 02:42:35 2027 GMT
        Subject: CN=A7C145A1B58AE436765A9EB4AC74905C147B639B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:47:7a:98:41:bf:9d:67:21:12:2b:ce:b9:
                    b0:64:6e:4c:27:b3:a8:c3:08:e6:f3:85:07:f9:66:
                    59:ed:a4:99:fe:94:75:45:39:de:92:69:93:22:ef:
                    96:51:07:ff:5a:85:9c:b0:fa:13:4c:e8:6a:36:27:
                    55:2a:8a:8a:f4:f4:ae:9a:84:2b:4c:9b:3a:e7:87:
                    9f:c8:36:a6:64:0d:73:99:41:42:87:9d:ee:a4:68:
                    6e:3c:2b:03:65:08:4d:41:04:d3:41:63:cb:97:b0:
                    b3:fc:1b:da:2f:dc:4f:cf:75:a6:d0:03:61:4f:0b:
                    f0:01:a1:b3:61:21:d3:68:2a:00:30:eb:52:e2:05:
                    a6:ea:d0:5a:62:b6:40:32:6f:c3:c6:ee:4b:eb:64:
                    4d:fe:1f:e1:64:94:52:ae:3c:78:ee:c7:cb:7a:3b:
                    8e:a6:64:cb:d9:1c:ab:dd:99:21:32:99:9f:82:f0:
                    45:82:a1:1f:3f:34:c1:07:49:a2:6d:ef:6b:4b:7c:
                    80:db:c9:87:01:bb:20:b5:fa:88:91:5a:4f:89:3e:
                    29:4c:4a:b9:08:d9:80:3f:c6:50:e8:da:19:4c:9c:
                    9a:2b:a3:a3:b5:de:22:fe:4f:38:71:d0:c6:f2:64:
                    85:df:6b:ed:b8:47:9b:98:e6:ab:96:78:ea:a8:ae:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C1:45:A1:B5:8A:E4:36:76:5A:9E:B4:AC:74:90:5C:14:7B:63:9B
            X509v3 Authority Key Identifier:
                keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:8f:89:14:99:b1:19:e3:5e:dc:a8:1d:86:e0:5c:40:d7:03:
         64:5e:9e:37:6e:99:f6:27:8c:c0:3b:c1:65:66:1e:41:dc:eb:
         3e:33:93:e4:1e:9a:83:51:62:ce:4d:1d:5f:1a:99:ce:9c:64:
         34:f4:f0:a3:ca:09:dc:04:7b:cb:04:da:ef:a5:1b:88:99:f1:
         9a:3d:c2:c0:7d:04:16:18:1f:f8:d0:97:af:54:3d:93:70:a8:
         da:e5:71:fd:70:70:74:32:2b:19:40:26:dd:78:bb:ec:0a:cd:
         d2:9b:9e:6f:db:31:1b:68:07:85:84:e4:00:e5:2e:7b:cf:97:
         4d:d9:0f:18:37:0d:0c:38:a4:33:24:cb:36:f2:87:59:8e:a8:
         68:74:de:88:28:e1:6a:c7:6d:7b:f0:f9:dd:d6:cb:c0:d1:3e:
         f0:e0:7f:b4:5a:5d:3f:ed:f5:43:c8:ed:3c:cd:50:d5:42:af:
         3c:b6:55:54:34:8b:c1:f0:b6:7d:15:56:82:80:cb:d5:32:64:
         17:b8:21:92:fb:04:d7:df:87:e8:ea:15:da:60:d3:4b:aa:37:
         cb:6c:fe:0f:09:33:50:e3:f2:f2:d1:a7:ae:01:ed:63:51:1e:
         32:67:68:5e:0a:25:8f:0b:23:64:a6:88:76:b6:54:28:8e:77:
         20:7c:c4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:42 2026 by rpki-client