Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa
File:                     3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=
Subject key identifier:   5D:43:B2:A9:11:80:52:54:1D:8E:F4:5D:0D:DD:54:42:65:9E:65:23
Certificate issuer:       /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB
Certificate serial:       0B90EE0F6AB00E61FBA338AB0962C49C38D6D065
Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa
Signing time:             Sun 03 May 2026 02:52:19 +0000
ROA not before:           Sun 03 May 2026 02:47:19 +0000
ROA not after:            Sun 02 May 2027 02:52:19 +0000
asID:                     55685
IP address blocks:        103.247.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl
                          rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:90:ee:0f:6a:b0:0e:61:fb:a3:38:ab:09:62:c4:9c:38:d6:d0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB
        Validity
            Not Before: May  3 02:47:19 2026 GMT
            Not After : May  2 02:52:19 2027 GMT
        Subject: CN=5D43B2A9118052541D8EF45D0DDD5442659E6523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c7:67:d4:9e:79:6f:76:4e:ab:91:80:d7:3f:
                    ac:f3:e6:5e:b8:a4:d6:48:55:17:bb:a2:66:4f:29:
                    3e:c8:be:89:53:04:48:f8:1e:23:84:e0:2b:9e:e6:
                    8a:12:97:fc:62:ca:b2:52:b9:c7:eb:35:a9:46:7a:
                    3d:c6:de:a9:ae:09:54:fc:d3:a5:12:83:65:a8:94:
                    b8:d3:4f:92:cb:25:96:6c:b4:bf:6c:5f:04:59:78:
                    00:d0:bf:d1:44:06:1b:70:ad:ab:75:11:29:f8:c0:
                    29:6a:1d:b6:42:8d:ce:b0:5f:d8:ad:16:52:d6:7c:
                    07:bd:66:d2:bb:7b:49:d3:f5:d1:b0:cd:8a:57:9c:
                    7b:06:b7:fb:28:f1:9d:c4:b7:e7:3c:7c:8f:d6:a5:
                    58:55:7a:e9:ba:02:a6:12:ce:cf:f7:d8:28:ab:7f:
                    b5:ac:3e:5a:82:e0:86:de:20:60:43:04:c0:71:b3:
                    a1:f6:63:b1:6a:5c:2c:fa:cf:99:5a:66:e6:36:7d:
                    5c:f6:50:27:83:37:2d:93:aa:c6:ab:48:f8:e8:43:
                    2e:74:f0:17:5d:2e:2c:48:70:28:8f:fa:64:97:9a:
                    8d:87:6c:5a:97:e1:30:4b:68:61:78:04:38:31:68:
                    a6:55:1d:6f:c6:fd:d8:22:62:8f:69:c7:ab:92:b2:
                    41:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:43:B2:A9:11:80:52:54:1D:8E:F4:5D:0D:DD:54:42:65:9E:65:23
            X509v3 Authority Key Identifier:
                keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:80:5c:4f:25:c2:fc:13:5e:98:bd:e3:b6:ea:e1:34:ad:
         5f:00:38:63:f7:10:38:2d:85:8f:62:4e:b1:ce:1d:28:c1:c1:
         70:58:c0:e4:a8:90:50:0c:87:bb:76:d0:aa:91:44:ae:7b:2b:
         91:ac:79:c7:78:21:38:63:f9:5e:bc:7e:ce:1c:e0:62:fd:cb:
         2e:a6:45:c6:7d:2c:60:2c:2e:ad:e8:2f:6c:62:fa:e3:27:0b:
         05:54:4a:76:b7:9b:b7:53:1c:ac:73:93:dc:94:71:0f:f6:dd:
         2f:05:30:e5:c4:9b:3b:25:41:07:33:78:f2:77:b7:71:7e:14:
         a9:98:06:3b:3c:c6:53:7b:a7:0b:f5:e4:45:96:02:7f:fa:40:
         0d:6f:8f:18:27:0f:57:17:b6:36:03:80:e3:0d:76:dc:32:7b:
         9c:8e:5c:b4:a1:b6:f7:ad:46:6d:c0:93:19:c7:8f:09:f6:92:
         de:5e:35:96:e7:3a:3a:c8:cb:c8:5c:d3:2f:aa:ef:a9:44:d2:
         19:03:58:67:ef:3c:d8:75:8f:34:81:dd:5e:46:c0:ef:a1:9e:
         c8:79:76:4a:86:ae:fd:95:e7:f4:c2:f4:dd:37:df:bd:b4:28:
         65:b9:8b:07:77:e8:67:49:e6:6a:4b:de:bb:6b:64:a4:84:cd:
         fd:c9:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:05 2026 by rpki-client