Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa
File:                     3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (raw, json)
Hash identifier:          8dsc0TX972I5IbsCLYXNfwWF1vYKSLpqVq/U1qTtVqg=
Subject key identifier:   0A:55:8D:76:C1:AC:7F:5B:72:0B:7F:8A:61:4B:1C:78:76:AA:2B:63
Certificate issuer:       /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A
Certificate serial:       2F316B9352F42ADC7A3B3FAF16F30571C0E4FE78
Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa
Signing time:             Sun 03 May 2026 02:43:58 +0000
ROA not before:           Sun 03 May 2026 02:38:58 +0000
ROA not after:            Sun 02 May 2027 02:43:58 +0000
asID:                     136841
IP address blocks:        103.41.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl
                          rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:31:6b:93:52:f4:2a:dc:7a:3b:3f:af:16:f3:05:71:c0:e4:fe:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A
        Validity
            Not Before: May  3 02:38:58 2026 GMT
            Not After : May  2 02:43:58 2027 GMT
        Subject: CN=0A558D76C1AC7F5B720B7F8A614B1C7876AA2B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:20:ce:6c:4a:96:d8:3d:b7:62:3d:7f:42:
                    e3:e8:d5:3f:05:4d:78:a1:16:49:ab:f4:86:da:f0:
                    4d:9b:54:31:6e:0f:4a:c6:55:f7:0d:0a:df:1d:bc:
                    8b:32:2f:b2:d1:46:5b:a3:79:ce:1c:d2:14:c5:13:
                    5c:db:0d:90:a5:e2:8e:76:01:ac:9c:ff:d8:35:3b:
                    a8:f4:c2:c6:20:d7:ec:7b:1b:db:1d:c5:8b:df:99:
                    0d:c6:66:ba:6d:aa:3c:31:c5:39:ff:2a:f8:24:2e:
                    19:29:ab:f6:cd:a2:67:82:14:1f:08:a6:b5:b5:fd:
                    94:06:6e:ce:d6:57:22:b3:84:26:d2:6a:08:bc:fe:
                    17:7e:17:e4:13:bc:32:81:bb:30:a9:3e:7f:96:cd:
                    a2:d4:a4:1c:9f:ff:17:87:be:e7:1c:71:23:7f:3d:
                    7b:37:ae:c4:35:15:0f:e3:2f:e6:54:73:4b:1e:5b:
                    79:aa:2d:54:4e:4b:9b:58:73:69:f5:6a:6d:33:bb:
                    6b:64:92:5c:94:1e:22:53:91:7f:99:01:72:98:25:
                    b3:55:87:24:b9:c4:66:dc:50:c3:ff:82:b0:4e:c8:
                    45:eb:e7:ed:a5:9e:0f:77:37:89:a0:d2:64:65:95:
                    db:6a:94:35:fc:ef:d0:ce:c8:b3:ec:4a:f3:81:cc:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:55:8D:76:C1:AC:7F:5B:72:0B:7F:8A:61:4B:1C:78:76:AA:2B:63
            X509v3 Authority Key Identifier:
                keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:bc:b4:70:a5:03:9a:4e:e7:9d:81:f7:b4:bd:db:ea:1b:79:
         43:c6:2a:58:10:a4:9b:c9:07:22:bd:1e:5e:8b:66:0b:29:74:
         ca:a6:f5:5e:f5:6d:9f:de:d7:00:9e:80:f9:3a:de:1d:89:af:
         77:7b:7c:b4:19:4f:67:ec:b4:0f:18:39:66:42:fe:08:31:6c:
         37:35:40:fa:46:b6:93:a8:e3:c3:6b:0c:44:c4:c6:ee:80:63:
         0f:48:9d:4e:63:c2:c4:5a:ac:7e:7d:65:41:8d:90:8b:1c:4b:
         0e:80:8c:94:d4:8d:4d:14:4b:33:ba:3e:96:73:ad:54:70:62:
         64:6d:0c:70:ba:da:21:43:dd:7b:0f:c6:54:62:4c:07:0e:97:
         89:0e:3c:f9:f4:8f:d4:68:58:00:6f:b6:33:bc:97:aa:0b:81:
         2d:48:d7:77:41:fa:66:41:25:ad:85:aa:68:dc:2d:70:a1:c4:
         76:c8:b7:dc:84:e4:20:93:b7:3c:69:7b:15:c8:74:6f:c6:c8:
         2a:e2:1a:69:dd:ca:2d:83:00:a1:eb:fa:d3:c5:e3:b0:f9:df:
         47:39:48:3c:39:97:9c:39:0a:d3:d5:23:56:74:5a:74:19:9e:
         c6:52:0e:ea:f8:ce:86:0e:88:0a:87:d0:cf:b7:12:99:8b:ed:
         dd:82:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:29 2026 by rpki-client