Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa
File:                     3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (raw, json)
Hash identifier:          Pp4p1IAwL6T/SUuRHLsPL1o2X/hw7FiM+dsJ0iekdE8=
Subject key identifier:   F1:91:8E:04:D2:8F:39:FD:01:15:B7:E1:3F:3C:83:78:A4:CA:06:4E
Certificate issuer:       /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6
Certificate serial:       110AAC7E9D12F376256E6474D0344B153440FFA3
Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa
Signing time:             Sun 03 May 2026 02:49:19 +0000
ROA not before:           Sun 03 May 2026 02:44:19 +0000
ROA not after:            Sun 02 May 2027 02:49:19 +0000
asID:                     131735
IP address blocks:        103.231.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl
                          rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0a:ac:7e:9d:12:f3:76:25:6e:64:74:d0:34:4b:15:34:40:ff:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6
        Validity
            Not Before: May  3 02:44:19 2026 GMT
            Not After : May  2 02:49:19 2027 GMT
        Subject: CN=F1918E04D28F39FD0115B7E13F3C8378A4CA064E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:a8:15:9d:48:42:67:39:ab:da:b4:5d:1a:
                    3f:ee:f2:53:f7:b1:4e:3d:41:fc:be:2d:46:1d:35:
                    c7:78:b3:f2:5a:d0:be:e2:3b:51:9c:d0:04:18:ab:
                    90:a0:a8:eb:94:37:f6:35:c7:e9:2d:44:a9:6b:58:
                    12:52:37:97:a5:da:86:cf:e0:f2:42:dc:ed:cf:94:
                    af:6a:19:6d:76:48:97:93:ef:9d:b1:f5:64:a8:e8:
                    3f:7c:f5:b3:14:69:de:94:82:a2:9c:ae:22:18:07:
                    b5:dc:38:68:10:b5:92:0b:ee:58:17:66:27:e8:cd:
                    af:44:93:a0:ab:eb:e3:c5:11:4d:fc:1f:6b:76:4b:
                    20:3a:f5:8b:1a:06:62:02:b2:e6:8c:6e:ed:0c:d5:
                    3d:a1:f6:bf:63:3a:0a:bb:94:16:51:6e:ce:db:17:
                    e6:3e:96:bc:11:54:e4:2a:dc:89:7c:5d:03:3e:a2:
                    e1:42:9e:fe:76:e3:61:f4:1c:e0:55:6f:24:46:19:
                    13:10:92:fe:86:60:13:07:b7:b0:f9:58:b8:39:64:
                    f6:74:6e:e2:81:77:71:9e:57:77:a2:f2:95:90:47:
                    72:3e:ba:f5:b0:0a:08:fa:f1:2f:46:08:6a:5b:f7:
                    ce:98:99:2b:1e:d0:b5:26:11:c0:7e:b3:62:b8:81:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:8E:04:D2:8F:39:FD:01:15:B7:E1:3F:3C:83:78:A4:CA:06:4E
            X509v3 Authority Key Identifier:
                keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:02:3d:c3:d0:cb:a7:f1:3f:21:9d:63:db:29:93:78:95:59:
         65:bb:79:56:27:b2:f0:09:d5:80:fd:54:95:10:58:56:b8:86:
         95:a2:d7:ce:76:7d:1f:2a:06:f1:4b:40:09:d2:9e:09:d7:c7:
         ac:4b:2f:ae:97:16:7b:21:92:40:59:3d:38:0b:4d:f9:79:6c:
         7c:9e:53:67:87:75:ee:e8:0a:da:5f:54:f6:dd:df:63:e7:5a:
         06:94:72:e9:c7:8f:77:73:4e:ce:c0:6b:5e:65:80:62:b7:c6:
         db:db:cc:36:78:3a:f6:65:fc:da:44:84:69:38:9b:9a:33:c1:
         c3:a8:14:07:f7:4a:f6:9d:4a:51:22:91:9d:c8:7d:6a:b1:ba:
         30:49:c7:a6:0b:c4:f9:77:a7:1b:80:44:55:0c:32:fb:65:a6:
         2f:a5:a5:dc:cd:b3:2f:f5:04:54:b6:40:c3:0c:0f:9c:8c:ed:
         c3:1c:dc:e8:6a:ab:ac:4c:10:d9:7d:d3:0b:35:ae:2e:73:b8:
         83:42:0e:34:43:f8:45:44:89:5f:dc:a3:9b:f9:c2:6a:a7:34:
         45:0b:a8:7f:2a:46:63:49:58:f2:bc:cf:11:56:b3:60:26:5d:
         77:7e:6f:34:91:0c:41:2c:64:ab:0e:64:73:ef:41:7b:49:31:
         09:71:7e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:04 2026 by rpki-client