Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa
File:                     3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier:          PWQir4scae8YfD6/q+bk0ejgh+XhSzNVifyQAj+tAMA=
Subject key identifier:   33:45:D7:2D:B4:95:45:8B:C3:1E:CD:6F:99:D4:43:F3:9B:39:A4:23
Certificate issuer:       /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3
Certificate serial:       5E9BA5B196BA123858D937F3307591157BFB1074
Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa
Signing time:             Sun 03 May 2026 02:52:09 +0000
ROA not before:           Sun 03 May 2026 02:47:09 +0000
ROA not after:            Sun 02 May 2027 02:52:09 +0000
asID:                     131743
IP address blocks:        103.191.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl
                          rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9b:a5:b1:96:ba:12:38:58:d9:37:f3:30:75:91:15:7b:fb:10:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3
        Validity
            Not Before: May  3 02:47:09 2026 GMT
            Not After : May  2 02:52:09 2027 GMT
        Subject: CN=3345D72DB495458BC31ECD6F99D443F39B39A423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:3f:12:85:b5:52:72:5d:c2:95:19:d6:6e:
                    65:41:e3:0c:e6:ca:33:cd:45:38:82:bb:74:c6:ab:
                    93:3b:5e:b0:6c:62:dc:b9:df:56:21:40:d2:e0:9a:
                    19:6e:95:4a:22:aa:ca:68:20:3a:f0:85:47:45:38:
                    e3:54:44:27:f8:52:c8:42:9d:a8:be:94:85:e1:87:
                    f6:28:eb:1e:8c:2f:52:7f:a4:d0:71:da:be:7c:1a:
                    8e:7c:0f:b2:3a:93:27:21:4a:b5:93:7a:57:61:1e:
                    df:a1:13:e7:83:ee:de:30:2a:5c:da:6d:e5:6e:f1:
                    29:31:62:80:94:85:24:2f:ef:c4:7a:77:00:2b:b0:
                    81:a2:95:ea:16:a0:09:b2:12:4f:74:5f:bc:06:8a:
                    0f:c9:97:54:b5:76:9a:33:3c:3d:e0:1e:9c:6e:ed:
                    5f:30:97:d6:fd:b0:96:cb:41:f0:30:94:bc:cc:13:
                    67:c8:86:c7:4c:3b:0c:0a:7c:aa:da:b3:1d:c0:eb:
                    05:d2:3b:50:b2:99:14:c9:14:86:16:9c:95:a8:e3:
                    10:96:ee:d1:f2:57:eb:26:95:8a:b3:0d:98:a5:01:
                    61:a3:27:1d:bd:2a:12:6a:d9:38:38:80:3b:26:ba:
                    c0:cf:d7:45:c0:50:e1:91:ab:56:c6:9d:e9:80:6f:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:45:D7:2D:B4:95:45:8B:C3:1E:CD:6F:99:D4:43:F3:9B:39:A4:23
            X509v3 Authority Key Identifier:
                keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:02:ba:37:23:4a:8e:d0:a0:20:27:aa:8d:ca:05:5d:8d:d8:
         ae:f8:8c:10:ec:13:6c:56:08:29:d8:7c:6d:44:80:1b:62:1d:
         2f:d1:9c:ad:97:67:ab:ff:ac:06:59:5a:2b:e7:70:31:1f:69:
         16:65:41:2d:50:0a:7f:ed:73:79:ae:f5:53:85:b8:56:4f:6b:
         6f:01:13:ec:73:fa:70:ae:ed:16:8a:0b:06:99:17:96:2c:f0:
         de:d1:9c:96:cf:6e:e1:dd:e6:a1:d4:37:6d:97:05:23:b3:0a:
         a1:5e:66:10:ef:5f:33:0e:37:2a:6f:dd:e7:7b:3a:09:a5:77:
         bc:4f:3a:ac:08:0a:7f:60:f1:bf:2c:0b:f1:67:11:9e:e0:8f:
         e5:51:20:16:ad:13:ee:9e:ee:cd:f8:b6:99:33:00:77:e3:2a:
         59:79:fb:a2:7c:de:37:a8:d9:e8:9a:4f:97:8f:55:5d:87:c8:
         cf:53:70:de:bf:30:36:ef:6e:38:a2:b8:ea:f7:58:83:6a:18:
         c1:8d:20:de:35:14:f6:f3:17:f0:5a:bd:dc:aa:77:06:8c:1c:
         3e:cc:fd:33:f7:09:ba:1b:15:8d:39:59:77:f1:be:4c:b6:13:
         62:5b:75:d2:0e:d0:11:97:57:4f:8d:57:90:b9:05:3f:74:4d:
         f1:20:d1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:38 2026 by rpki-client