Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
File:                     3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=
Subject key identifier:   8A:7B:08:1D:9B:3D:53:EC:2B:02:1C:F7:C3:02:7C:39:F6:43:E1:A4
Certificate issuer:       /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB
Certificate serial:       3FB9FCE4AA01405EE0300700BB1355B62BA54958
Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
Signing time:             Sun 03 May 2026 02:52:19 +0000
ROA not before:           Sun 03 May 2026 02:47:19 +0000
ROA not after:            Sun 02 May 2027 02:52:19 +0000
asID:                     55685
IP address blocks:        103.247.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl
                          rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b9:fc:e4:aa:01:40:5e:e0:30:07:00:bb:13:55:b6:2b:a5:49:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB
        Validity
            Not Before: May  3 02:47:19 2026 GMT
            Not After : May  2 02:52:19 2027 GMT
        Subject: CN=8A7B081D9B3D53EC2B021CF7C3027C39F643E1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:39:c0:41:57:8a:87:26:dd:4e:98:1f:6a:
                    3c:39:26:d5:00:94:cf:3b:ba:14:aa:fa:1f:08:85:
                    a8:05:ee:93:7a:17:9c:27:38:c4:31:4e:13:2c:ca:
                    de:85:34:2e:7b:e4:d9:fe:cc:15:db:5f:e2:19:14:
                    68:44:14:6a:4c:14:ca:4a:82:8e:72:f2:76:7d:70:
                    9d:a7:d1:5b:3c:9f:13:78:88:31:92:8f:e4:2b:bb:
                    57:88:dd:74:30:53:1e:52:f7:f9:02:cb:b9:92:11:
                    ae:46:66:48:9a:da:ea:44:42:8c:77:f4:cf:56:b6:
                    1d:a1:e4:a4:26:d0:d1:f2:e8:c5:18:fc:71:f5:98:
                    c0:7b:61:9d:09:a8:8d:d5:66:ee:9a:28:9a:df:ec:
                    d8:ba:3e:24:19:62:b3:4e:0d:0c:af:a6:57:c0:b5:
                    9e:98:b0:09:3d:ac:03:84:d8:30:19:c1:dc:ce:0b:
                    14:4d:8c:24:00:0d:a5:d9:81:d3:14:b7:f0:0c:e9:
                    dc:9a:75:9d:45:b2:a2:64:0e:ec:23:6b:44:6d:c6:
                    3f:ee:98:49:31:c8:08:d6:e9:27:e9:9a:5f:53:3f:
                    dc:80:aa:0e:b7:c9:75:bb:dd:ca:0a:ef:6a:28:94:
                    42:2e:6a:c1:82:45:46:b0:60:e8:b3:2f:15:85:f1:
                    31:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7B:08:1D:9B:3D:53:EC:2B:02:1C:F7:C3:02:7C:39:F6:43:E1:A4
            X509v3 Authority Key Identifier:
                keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:5e:bb:af:fe:94:4a:b1:79:15:5b:64:39:bd:1b:03:4f:65:
         8d:ef:ec:40:1d:a2:34:75:24:aa:71:06:0b:55:33:82:67:0b:
         20:4f:31:38:5b:f8:c8:93:2c:e9:c6:33:22:d3:b3:d7:88:be:
         72:82:45:75:07:41:34:6a:9b:ce:aa:95:36:3e:38:fb:84:c7:
         87:31:f6:ce:30:9e:87:9d:c7:4f:31:3c:8a:ae:ba:f8:a7:21:
         c9:ce:17:e3:4b:43:8a:7e:a9:ae:98:89:b5:26:ac:02:ed:6a:
         58:72:81:e4:44:d6:d7:85:89:47:e6:5f:29:cd:20:2f:08:60:
         90:68:f6:ad:4c:4d:ee:17:44:17:7e:13:cf:d6:db:38:d9:f9:
         21:e9:9d:21:10:84:99:f4:b7:48:5c:9e:18:41:6b:4f:4e:3c:
         5f:8a:d0:30:03:91:3d:ed:31:4f:87:5e:45:a2:fc:70:ab:36:
         8d:a7:ff:12:84:e0:80:ab:15:99:48:97:01:0e:c0:98:0f:21:
         df:29:20:02:25:37:6b:71:aa:fa:1d:e7:92:20:07:e3:0c:61:
         00:5f:af:26:2f:06:4a:af:4f:ff:33:54:28:95:15:7e:57:21:
         f8:6f:3a:d6:5f:7f:c2:7e:71:16:16:5b:2e:53:b9:f5:f9:4b:
         7e:bd:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:45 2026 by rpki-client