Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa
File:                     3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (raw, json)
Hash identifier:          137GCdmWkDay1INFZoJTq4DPdPLmTUTYDzr+pVTMq4w=
Subject key identifier:   E6:2B:1D:18:7E:4B:82:54:A8:F5:90:C3:38:F5:56:C0:87:8B:35:F1
Certificate issuer:       /CN=3B7FE3B2042531E0B36242D947F82DF031754FD3
Certificate serial:       7BD2C201AA681F8B3C5D00DF05FEFD561A1F9701
Authority key identifier: 3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa
Signing time:             Sun 03 May 2026 02:51:52 +0000
ROA not before:           Sun 03 May 2026 02:46:52 +0000
ROA not after:            Sun 02 May 2027 02:51:52 +0000
asID:                     132164
IP address blocks:        103.50.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl
                          rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d2:c2:01:aa:68:1f:8b:3c:5d:00:df:05:fe:fd:56:1a:1f:97:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FE3B2042531E0B36242D947F82DF031754FD3
        Validity
            Not Before: May  3 02:46:52 2026 GMT
            Not After : May  2 02:51:52 2027 GMT
        Subject: CN=E62B1D187E4B8254A8F590C338F556C0878B35F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:a7:f2:57:a4:94:c5:35:c4:7e:6e:8f:44:
                    45:6b:a7:48:94:17:90:cf:d4:33:a2:b7:a0:cd:d1:
                    e6:c8:ed:4e:61:97:59:b7:e7:bc:81:c8:44:c9:1d:
                    e8:a4:41:0d:b5:e6:6f:02:3c:a3:b7:d4:01:6a:0a:
                    7c:ab:f0:2f:09:cf:81:4c:32:1b:57:3c:c4:2b:e7:
                    8d:5f:c9:33:73:bb:bf:fd:75:e3:f8:d9:f4:1d:95:
                    1a:5a:a5:a8:d3:78:04:a6:e3:d3:b6:47:0b:30:fe:
                    12:b0:5d:89:65:9a:b4:e3:aa:fa:f6:62:5d:23:f9:
                    2f:67:59:0a:60:96:0c:13:97:7a:85:f8:88:fa:d3:
                    af:fc:91:d9:b1:21:1c:34:12:50:b1:4b:db:ad:40:
                    62:e0:d1:ab:bc:74:2a:e2:74:d2:92:f6:6c:bc:c6:
                    50:70:8a:b8:4a:fb:78:a0:dc:4b:24:b8:6a:39:2a:
                    af:d2:64:52:05:83:2d:25:1e:7b:85:31:ae:90:62:
                    2f:8a:f5:68:af:d7:c4:58:ee:3f:13:59:db:68:02:
                    ad:55:01:76:fe:1b:04:96:60:a0:0d:17:d7:8f:91:
                    e6:69:3b:f0:c0:44:9b:d4:27:f7:ba:a5:a6:f9:4c:
                    09:dd:19:15:5b:1c:b4:68:95:4d:31:12:84:26:40:
                    91:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2B:1D:18:7E:4B:82:54:A8:F5:90:C3:38:F5:56:C0:87:8B:35:F1
            X509v3 Authority Key Identifier:
                keyid:3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:a5:1e:b3:a4:3b:ef:5a:1f:73:b5:2f:21:9a:64:c2:a0:e1:
         cd:b6:80:d3:40:02:69:fb:72:a8:53:7f:79:0b:fd:74:a3:a4:
         f4:4d:03:9d:51:35:60:53:0e:5f:08:74:a0:67:49:f2:c6:ab:
         b4:57:02:28:4c:a0:b0:7c:10:44:92:64:71:83:23:11:2f:19:
         ab:f9:fc:c9:57:a3:ec:1d:77:a9:e1:53:ad:53:2e:da:8d:56:
         f6:8d:da:0d:94:f2:76:2e:5f:24:f1:37:05:cf:91:91:22:70:
         56:9b:87:2a:82:bf:ca:64:83:98:fa:32:de:f9:4c:9b:05:5d:
         38:5e:60:2a:d5:32:45:eb:ce:73:55:d3:fb:26:44:b0:49:57:
         9a:02:ce:78:92:66:09:93:72:13:a8:65:ec:ec:50:df:14:1f:
         d2:d9:bb:4a:d5:e4:60:a8:4c:40:1b:2c:7a:a2:1c:03:89:01:
         6f:f7:37:d2:a9:d9:62:41:72:20:17:0a:bf:8a:7b:16:36:6d:
         5b:e3:a4:9d:63:7e:ab:2e:41:c2:89:4d:89:80:56:63:1e:97:
         7a:d5:8a:09:62:d2:e1:04:92:f6:8b:e6:bc:9d:63:b0:18:b0:
         9e:80:2d:b5:35:87:ea:5d:18:bb:93:47:10:f4:87:23:0b:83:
         8a:1d:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:00 2026 by rpki-client