Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa
File:                     3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (raw, json)
Hash identifier:          bXRUilxrcrzJiP9PjPQFqMqVk2Gw/CWvQhfR/EgAeXU=
Subject key identifier:   F3:D3:75:B5:A9:A5:79:4A:29:72:57:E9:63:E7:5C:3D:CF:2B:B5:1D
Certificate issuer:       /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2
Certificate serial:       2EA7237F96B7B9C7E670011ACCC2F0B76CE4AD14
Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa
Signing time:             Sun 03 May 2026 02:53:41 +0000
ROA not before:           Sun 03 May 2026 02:48:41 +0000
ROA not after:            Sun 02 May 2027 02:53:41 +0000
asID:                     138080
IP address blocks:        103.131.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a7:23:7f:96:b7:b9:c7:e6:70:01:1a:cc:c2:f0:b7:6c:e4:ad:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2
        Validity
            Not Before: May  3 02:48:41 2026 GMT
            Not After : May  2 02:53:41 2027 GMT
        Subject: CN=F3D375B5A9A5794A297257E963E75C3DCF2BB51D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:33:15:b3:25:ca:3c:1e:d9:1e:45:c0:66:
                    a1:6c:91:62:0b:61:0b:f1:2a:9e:20:f0:e3:a5:85:
                    29:7d:6a:bc:d3:fe:80:c1:62:b5:0a:1e:11:0b:7e:
                    d0:74:87:8e:af:2a:e6:5c:6c:e8:e8:35:80:64:99:
                    a3:5b:32:9b:24:ba:4c:d0:9c:11:ae:41:62:26:95:
                    ff:62:38:02:b4:54:50:6e:69:91:06:48:2b:b9:1a:
                    87:56:1c:56:07:0a:09:11:21:8a:05:43:03:e8:78:
                    d7:d4:ac:31:3c:5f:ec:bb:df:5b:e9:7f:8c:9d:97:
                    31:f2:8c:df:08:bc:5e:dc:f3:bd:2f:73:ed:0f:e6:
                    ad:39:a1:e2:24:6e:c2:ba:40:e1:06:9d:2c:6a:43:
                    37:6c:e9:44:b1:bd:5c:a5:03:d9:22:83:2b:20:5d:
                    59:6c:c5:7b:69:a9:9b:68:5b:2b:0e:47:4e:a2:65:
                    42:35:e7:9b:ef:6f:53:b6:af:2c:8c:a7:3c:b7:75:
                    f7:04:b3:d8:5f:b3:cd:a7:00:2a:00:b1:12:22:e9:
                    d5:1d:d0:fe:ed:f5:62:a4:d3:21:1b:b9:72:fd:47:
                    f4:d4:ea:15:9d:d6:72:06:20:c6:07:93:44:8e:30:
                    e5:51:f0:7e:68:40:b5:a1:2a:e9:eb:26:03:28:e7:
                    12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D3:75:B5:A9:A5:79:4A:29:72:57:E9:63:E7:5C:3D:CF:2B:B5:1D
            X509v3 Authority Key Identifier:
                keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4d:1c:e6:54:11:45:5e:77:a1:6e:4e:8c:26:79:0f:de:9c:
         4f:e4:9d:a9:22:21:d5:61:ca:96:61:d6:e9:72:20:e1:8f:8e:
         76:b1:ae:df:41:9d:13:50:e0:06:1a:62:5d:fa:1b:cd:59:7d:
         55:83:d7:bf:3e:b3:2c:12:d7:dd:26:79:0e:05:74:75:90:6b:
         9a:65:e1:25:22:87:1a:82:4f:a0:b5:c6:c2:f9:80:44:da:cf:
         af:d6:00:7d:c1:36:7d:f8:3f:b1:75:3e:07:9a:c0:ed:3a:8d:
         9e:8c:6b:96:87:c2:95:8b:43:a5:bc:5e:10:e7:03:d3:10:27:
         5f:cb:31:47:0a:99:02:5f:3e:b9:83:fb:83:30:d8:4b:cb:48:
         b1:0d:42:49:62:38:d1:24:ba:a0:ad:bb:24:6e:c0:cb:64:66:
         cf:c1:73:e9:a6:cd:9e:30:0a:8e:79:8b:eb:46:0d:ca:aa:b9:
         9e:12:68:98:24:1f:a0:a5:4f:55:79:df:86:cf:78:9f:39:25:
         15:28:f5:a9:c1:8e:06:af:44:ed:0d:5a:fb:77:c5:78:e2:c8:
         14:0d:9d:78:cb:9b:95:5b:60:75:9c:f7:b6:aa:0d:05:f7:70:
         86:c8:ce:80:0a:df:2b:03:7c:b0:43:aa:39:f2:c7:ba:3e:87:
         f6:2f:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:48 2026 by rpki-client