Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32322d3232203d3e203633383237.roa
File:                     3130332e33392e31322e302f32322d3232203d3e203633383237.roa (raw, json)
Hash identifier:          76gleer34esIgeXzP55Qltcq6KQymYiw2jWBaYJM1Rs=
Subject key identifier:   90:8F:BC:07:CB:91:3C:60:58:80:A0:91:D9:97:4D:0D:8C:71:BE:57
Certificate issuer:       /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial:       26AEE7932F191D041BDFAACBD4D19853891588B1
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32322d3232203d3e203633383237.roa
Signing time:             Sun 03 May 2026 02:51:59 +0000
ROA not before:           Sun 03 May 2026 02:46:59 +0000
ROA not after:            Sun 02 May 2027 02:51:59 +0000
asID:                     63827
IP address blocks:        103.39.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
                          rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ae:e7:93:2f:19:1d:04:1b:df:aa:cb:d4:d1:98:53:89:15:88:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
        Validity
            Not Before: May  3 02:46:59 2026 GMT
            Not After : May  2 02:51:59 2027 GMT
        Subject: CN=908FBC07CB913C605880A091D9974D0D8C71BE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:ef:59:2e:a9:a5:9a:84:61:52:87:28:ba:
                    be:16:85:c5:78:1a:b8:28:a3:25:a7:1c:33:cc:29:
                    e7:8e:b3:f2:84:49:3f:cb:62:f8:59:04:84:28:fa:
                    72:d7:e4:fc:6c:59:b0:b9:8f:bc:17:4d:ac:e1:c1:
                    7f:16:1f:70:8b:7b:d2:41:fd:d5:66:c9:a8:61:8a:
                    8c:c7:fa:30:7e:d7:12:81:03:d9:7c:9d:76:f3:6c:
                    9f:d2:d6:e1:c6:79:0e:64:c2:88:33:ab:90:bb:44:
                    75:d3:68:42:0e:37:50:57:72:5b:49:0a:64:2e:26:
                    70:9b:03:4a:60:4d:d9:44:a6:91:5b:1a:15:dd:ba:
                    b9:c2:2a:7b:8e:2a:3e:5c:e8:05:d7:3f:45:ad:92:
                    3c:e0:c8:10:85:8b:41:de:06:fa:5c:78:12:29:7c:
                    02:96:fd:c3:60:c9:58:19:eb:b1:b8:3a:37:1f:32:
                    1f:06:67:4f:fc:ab:6a:6d:fd:22:14:8e:1a:90:28:
                    30:84:61:06:62:13:64:09:0f:bc:2a:3c:53:b0:45:
                    fa:76:2b:6f:87:b5:7e:16:97:81:39:93:dc:ec:4b:
                    23:5d:68:77:62:91:4c:40:0f:a1:19:5e:53:19:49:
                    cf:6d:68:fa:c6:f2:3a:75:fe:ca:26:bd:e1:2d:21:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8F:BC:07:CB:91:3C:60:58:80:A0:91:D9:97:4D:0D:8C:71:BE:57
            X509v3 Authority Key Identifier:
                keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32322d3232203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:f4:35:c3:3c:15:79:5f:1a:78:d5:4f:52:be:7b:e4:a3:cc:
         23:e8:b2:f3:a6:06:b8:4f:c0:7d:01:ab:bc:2c:f6:b5:15:4c:
         74:e7:5b:25:a2:d9:38:70:2e:7a:dd:33:e7:85:5a:72:ba:82:
         84:6d:a1:f0:8d:80:ea:7e:d9:5f:90:b7:9b:35:86:c1:66:17:
         64:51:8e:7e:c7:a7:15:9e:cb:91:3b:20:38:56:7f:0a:68:eb:
         80:79:b4:03:72:b3:7e:48:61:8a:c2:fe:f3:61:3f:0f:d7:42:
         a3:0a:d4:82:54:72:45:ce:37:09:8a:2d:bf:a6:0b:92:07:30:
         c8:26:5c:3e:e2:e3:5e:93:8a:bf:ed:e5:cb:71:32:7c:1e:66:
         8b:ff:42:73:8b:cb:9e:74:69:b4:ed:6b:c7:b7:f5:24:9c:c3:
         4f:7d:b0:f0:7c:85:9c:0e:0b:5e:d2:f8:65:b9:50:ea:b7:6a:
         ef:8b:34:40:dd:e9:7e:f0:82:75:1b:7b:f6:62:67:96:73:de:
         e0:ad:ab:9b:ee:f7:9f:ae:70:c1:bd:68:46:58:cb:9d:e7:9f:
         6f:64:80:ea:f3:9c:10:28:57:99:54:12:28:f9:a2:ff:2b:0d:
         67:4d:d9:d3:ed:18:7a:90:1e:a9:76:4f:fb:a8:14:ae:5e:23:
         97:09:3c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:20 2026 by rpki-client