Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa
File:                     3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          LghNes9jQ+3fERFGIYDHSXbbc4nSMYy8cw//lu9REdQ=
Subject key identifier:   D1:34:15:7D:05:A5:0D:7C:DA:FE:61:2C:D2:0D:6A:FD:58:E0:68:68
Certificate issuer:       /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial:       77F0C432D5A3E7D9F8FBA660ADA5FCFABE570928
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:51:41 +0000
ROA not before:           Sun 03 May 2026 02:46:41 +0000
ROA not after:            Sun 02 May 2027 02:51:41 +0000
asID:                     23679
IP address blocks:        103.238.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
                          rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f0:c4:32:d5:a3:e7:d9:f8:fb:a6:60:ad:a5:fc:fa:be:57:09:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
        Validity
            Not Before: May  3 02:46:41 2026 GMT
            Not After : May  2 02:51:41 2027 GMT
        Subject: CN=D134157D05A50D7CDAFE612CD20D6AFD58E06868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:58:1f:37:30:9b:42:57:75:4d:06:fe:c2:54:
                    93:00:a6:4f:b5:05:f3:e2:ab:b0:e0:42:c3:dd:d6:
                    a3:31:87:09:58:4f:42:5c:58:bc:48:92:31:13:2a:
                    de:60:7c:f8:ff:ec:f8:7c:ae:ee:f6:54:3e:6d:e1:
                    32:59:d2:43:0e:df:b3:89:ce:fd:26:08:17:54:e6:
                    df:40:f0:bb:b2:c3:66:aa:b3:ad:2c:85:fe:7f:34:
                    29:9d:04:ff:b9:0f:64:f7:16:43:6e:6c:23:83:b5:
                    c8:7d:93:27:6b:c6:b0:f4:01:73:0e:21:f2:27:e0:
                    4d:55:8f:1f:b0:35:95:91:d4:6b:30:b6:e3:bd:84:
                    e4:16:bc:c7:a0:78:44:70:2b:36:c7:bf:78:5d:28:
                    53:6b:9a:59:54:3a:a6:e9:e4:f1:8d:41:e7:64:5b:
                    9f:48:cf:8a:33:55:f2:40:fc:e5:78:41:bd:6b:dc:
                    bd:7b:c9:3a:05:33:dd:91:b2:98:65:0f:d2:ee:b1:
                    a8:08:72:1b:3b:fa:c9:06:a2:1a:d4:b9:b4:d2:c0:
                    8b:da:01:8d:50:f0:5a:2f:70:d3:0d:48:58:7f:63:
                    8c:40:82:a9:a6:37:67:63:07:da:b7:1b:04:99:ee:
                    80:88:b8:d7:7d:3f:2c:f6:7e:e8:cb:cc:55:f6:15:
                    af:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:34:15:7D:05:A5:0D:7C:DA:FE:61:2C:D2:0D:6A:FD:58:E0:68:68
            X509v3 Authority Key Identifier:
                keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d4:c7:2a:cd:b3:ca:c4:75:a2:70:71:74:77:64:3a:34:7e:
         c5:29:08:6c:8a:94:3f:ac:b7:c7:af:9c:66:05:ea:03:4e:19:
         95:d3:d3:39:cc:49:09:7a:cd:eb:18:67:03:e2:c0:76:86:db:
         8e:66:ba:b4:52:64:85:de:c5:30:23:68:ce:31:b1:2f:51:6d:
         3a:88:4e:2c:82:d7:47:c2:b5:d7:64:fe:62:14:54:cb:4a:b0:
         2a:01:4f:84:7e:ed:62:46:04:66:a9:7e:1f:d8:11:37:ac:cd:
         4d:e9:a2:40:8d:19:66:0d:86:09:c2:5f:79:dc:7f:87:0c:37:
         8d:b0:65:99:8b:ed:df:33:6b:31:ba:bd:ae:10:1d:0a:b1:ce:
         8d:a8:d3:a6:cc:53:64:cc:1d:47:41:31:78:dc:4c:7e:48:56:
         5d:2c:89:6c:1e:1e:8c:b7:61:5c:b7:e1:e2:5c:9e:b8:92:b6:
         7b:b8:9d:a3:66:e0:c5:23:57:50:bb:fc:63:73:29:1f:b6:83:
         f8:0a:43:f4:75:aa:f5:08:8e:dd:a0:8a:9c:85:7d:9a:69:8e:
         8d:65:b4:49:9f:4f:4b:2a:f5:b1:ad:0d:97:f0:26:bc:a1:d6:
         91:40:36:fb:bc:2a:ef:9d:b9:b4:e5:9a:01:54:54:a6:f5:f1:
         fc:5d:22:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:55 2026 by rpki-client