Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa
File:                     3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (raw, json)
Hash identifier:          pTAxtDqCoq1lZ0weKvW5ktevS+0YSpgq+YtzT/tKQzQ=
Subject key identifier:   16:3A:BA:29:AF:05:8D:D0:35:1B:30:C6:FD:B7:F9:FB:C6:62:E1:D2
Certificate issuer:       /CN=3B7FE3B2042531E0B36242D947F82DF031754FD3
Certificate serial:       433C9EA164179F4891809ACDE2BDC88F2F9D3D05
Authority key identifier: 3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa
Signing time:             Sun 03 May 2026 02:51:52 +0000
ROA not before:           Sun 03 May 2026 02:46:52 +0000
ROA not after:            Sun 02 May 2027 02:51:52 +0000
asID:                     132164
IP address blocks:        103.50.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl
                          rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3c:9e:a1:64:17:9f:48:91:80:9a:cd:e2:bd:c8:8f:2f:9d:3d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FE3B2042531E0B36242D947F82DF031754FD3
        Validity
            Not Before: May  3 02:46:52 2026 GMT
            Not After : May  2 02:51:52 2027 GMT
        Subject: CN=163ABA29AF058DD0351B30C6FDB7F9FBC662E1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:5a:7e:b5:83:93:e5:75:0f:9b:b5:70:94:
                    f9:13:c2:84:55:a2:ca:bd:3b:16:8a:34:86:c0:a4:
                    65:c9:68:8d:99:12:61:e4:ff:e6:05:f3:74:1a:9e:
                    d4:c3:2f:a0:b9:26:1a:26:b7:d4:9d:26:0f:ef:46:
                    e4:ae:29:6b:31:50:df:28:cf:65:86:40:bb:b0:68:
                    4e:f3:cc:97:96:9c:af:b9:7d:29:64:be:41:e6:f9:
                    4d:61:84:83:88:83:51:54:89:ad:31:94:1f:3d:35:
                    c5:de:5c:3e:83:d6:d8:7e:49:60:4f:e2:61:20:2c:
                    b0:8f:bf:c9:c2:f3:17:eb:b5:7b:22:98:c3:2b:52:
                    bb:d5:eb:83:d4:51:67:f0:41:d1:dd:89:26:f4:78:
                    7f:73:99:2e:1b:9b:b4:f7:28:35:2e:42:69:19:cf:
                    52:e7:be:db:08:97:13:1f:ba:86:6e:74:41:38:52:
                    64:f2:95:61:17:ff:9a:41:1f:ae:1a:98:00:c6:61:
                    5d:0d:8b:d0:bb:df:d9:72:0e:1a:29:ff:ea:1b:be:
                    ea:e2:cc:89:67:d9:e0:e7:cf:25:cf:9d:07:f0:84:
                    19:6c:b9:c0:47:22:11:02:2c:a0:c2:40:68:44:31:
                    3f:86:ad:d0:bc:76:83:f3:84:a1:b2:d9:49:30:51:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3A:BA:29:AF:05:8D:D0:35:1B:30:C6:FD:B7:F9:FB:C6:62:E1:D2
            X509v3 Authority Key Identifier:
                keyid:3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:39:c8:c8:36:a5:07:c4:ae:85:c1:2e:30:32:f4:73:c5:86:
         46:e0:39:0a:39:cf:25:3e:c0:99:b6:9a:b0:c3:40:cc:e3:52:
         2f:d3:bb:d0:dc:da:3e:05:9e:f0:cd:ad:ea:74:84:a4:7d:4d:
         55:ad:2f:ff:71:ea:47:27:cc:47:cd:4b:49:bf:c1:5f:ea:89:
         5c:3d:3b:ed:fc:be:ae:6a:0d:98:22:58:7d:c7:dc:9f:b0:ff:
         d4:84:4c:67:68:a6:e1:a7:5d:87:41:67:d8:2d:1f:32:18:cf:
         a1:f8:24:0a:b6:e0:26:a2:1d:0c:79:50:27:7f:32:ac:07:40:
         8a:75:d3:6b:c3:0d:03:32:dd:95:54:ab:84:70:7c:c1:1a:81:
         0a:12:61:48:52:9f:57:08:74:0f:25:54:0b:c6:24:37:23:28:
         21:5c:8c:d3:b8:35:7f:15:44:28:21:0b:56:30:18:0f:3a:da:
         a0:06:60:6d:be:ab:f5:4e:66:ee:1f:76:96:7a:ca:54:f4:d7:
         bd:7e:37:79:57:b6:12:6b:b4:8d:82:bc:d3:d1:9c:7e:72:cc:
         1a:d9:96:7e:47:fc:15:fe:d1:f5:eb:60:34:23:0a:81:75:2d:
         63:9c:59:01:18:7b:6f:14:25:b9:cf:65:61:52:a7:73:1e:3e:
         f8:96:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:24 2026 by rpki-client