Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa
File:                     3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (raw, json)
Hash identifier:          +WxXMuFbrHKDjWOS8r0LmF3/UaAmCxzNKESEznXTLHE=
Subject key identifier:   B5:C7:FF:AC:29:1D:2F:03:D9:21:08:F5:3C:84:EB:E8:AC:88:8B:41
Certificate issuer:       /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3
Certificate serial:       3CC97CDBEED91ADE630F838A41BE1A50D563CBA0
Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa
Signing time:             Sun 03 May 2026 02:52:09 +0000
ROA not before:           Sun 03 May 2026 02:47:09 +0000
ROA not after:            Sun 02 May 2027 02:52:09 +0000
asID:                     131743
IP address blocks:        103.191.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl
                          rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c9:7c:db:ee:d9:1a:de:63:0f:83:8a:41:be:1a:50:d5:63:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3
        Validity
            Not Before: May  3 02:47:09 2026 GMT
            Not After : May  2 02:52:09 2027 GMT
        Subject: CN=B5C7FFAC291D2F03D92108F53C84EBE8AC888B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:3b:9c:21:1c:c6:ec:6d:7c:1f:6a:d6:81:
                    34:8f:fe:0f:67:4d:05:3b:cd:70:88:02:b6:16:a9:
                    44:3a:e9:49:fb:0a:db:60:f2:c4:3d:83:cc:a5:d5:
                    a0:d8:51:f8:3f:6d:87:14:4a:dd:60:7d:49:01:f6:
                    ad:b0:dd:09:c7:b4:71:b7:e9:8c:db:c5:8a:2f:c5:
                    9a:ef:5f:33:b8:ae:ec:da:71:8f:e3:43:9d:7a:b0:
                    ea:81:b0:7b:eb:0a:d2:e2:30:c2:87:4e:72:57:b6:
                    da:f0:b1:07:e9:65:2a:5a:d7:f6:75:e1:d6:ec:7d:
                    46:f8:7c:29:52:bb:36:84:2c:00:f7:48:1b:d9:1e:
                    e1:65:b3:ac:23:da:15:1a:fd:df:63:73:72:69:7e:
                    67:03:b1:65:3c:a8:e3:52:35:65:fc:34:83:fb:5f:
                    d7:08:9a:d8:69:0c:c9:81:1f:fa:fb:56:e5:89:f3:
                    20:b0:32:53:51:cb:10:0d:02:d7:a2:26:be:2e:de:
                    c7:c8:01:99:71:6f:84:86:ac:18:aa:f2:c8:9f:57:
                    9e:f9:1e:c7:89:26:fb:ba:1d:23:c7:97:26:65:19:
                    2d:30:93:b7:bd:a1:a4:ad:b3:5e:b6:09:a1:06:03:
                    b0:c4:8d:b0:79:39:07:8f:5a:0c:ed:0f:01:40:73:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C7:FF:AC:29:1D:2F:03:D9:21:08:F5:3C:84:EB:E8:AC:88:8B:41
            X509v3 Authority Key Identifier:
                keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:b1:65:2e:eb:13:14:ae:73:c1:4d:b2:71:37:ed:98:cf:fb:
         c6:63:fa:e1:47:ab:cd:d8:0c:7a:f2:d5:da:8b:cf:bc:66:0c:
         d4:30:ef:ef:08:b2:6b:07:9b:1d:93:8c:94:26:ab:3d:30:db:
         86:45:93:c8:b6:e5:d8:86:30:b6:86:b3:12:01:97:e8:b2:06:
         fe:74:b5:fc:dd:64:0e:ae:80:47:ff:3b:a8:0f:ee:62:b8:aa:
         0a:b9:6b:63:05:96:ca:7d:67:4b:ab:78:79:a5:1f:a2:e6:be:
         11:9d:6a:15:51:57:c6:c8:c2:8e:f4:f3:6f:94:e3:ce:6a:e5:
         10:47:e8:ca:c4:65:fd:0c:dd:49:43:2c:a6:a5:78:b7:8e:09:
         79:ca:d8:37:ca:84:25:91:5d:a2:d5:82:24:4e:7f:5a:7a:18:
         4e:8f:20:5b:4e:35:59:ab:74:f3:6e:84:81:45:be:8f:7c:d1:
         60:23:17:24:7e:46:44:9e:37:a9:64:67:8a:47:27:df:aa:f2:
         b7:06:b8:84:83:46:75:82:9e:d1:3a:56:b1:8a:fe:7f:64:a6:
         92:bc:17:50:55:17:28:78:b7:fa:a2:6c:e8:9b:b4:ca:67:66:
         5b:72:ca:71:5e:8f:f1:a5:2c:76:86:d5:19:71:48:bf:17:20:
         7f:c5:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:39 2026 by rpki-client