Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa
File:                     3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          lzLPq+5ACK3Fp2G9Qq15Ai5VNsw2ESnTuC604MZBsC4=
Subject key identifier:   AC:01:57:16:5D:C0:2C:B5:F5:F6:7D:5E:0C:BC:1B:B1:23:68:D7:EB
Certificate issuer:       /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2
Certificate serial:       052449149D3BEC4ED7F1A15503EB7049283B7D7F
Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa
Signing time:             Sun 03 May 2026 02:53:41 +0000
ROA not before:           Sun 03 May 2026 02:48:41 +0000
ROA not after:            Sun 02 May 2027 02:53:41 +0000
asID:                     138089
IP address blocks:        103.131.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:24:49:14:9d:3b:ec:4e:d7:f1:a1:55:03:eb:70:49:28:3b:7d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2
        Validity
            Not Before: May  3 02:48:41 2026 GMT
            Not After : May  2 02:53:41 2027 GMT
        Subject: CN=AC0157165DC02CB5F5F67D5E0CBC1BB12368D7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:89:31:33:2f:f3:7a:1d:81:b9:d9:8c:f3:
                    f6:c2:fd:37:e2:42:63:f9:a6:a0:3f:8d:e7:49:83:
                    a9:b0:56:a5:ef:75:12:71:39:e2:42:79:3d:2b:50:
                    10:68:c8:d3:9a:30:07:52:20:07:48:eb:b2:e0:dc:
                    f1:38:e0:fd:e4:f2:e0:b3:7a:50:b6:4e:52:f2:91:
                    3a:30:ce:64:e4:17:02:12:de:bd:31:f6:ac:99:1d:
                    9c:1f:a7:b5:8d:55:22:28:ca:c4:d7:ea:9d:b2:1f:
                    95:78:f9:4d:22:7a:2a:4e:4a:40:5c:a5:7d:c8:32:
                    14:6d:1a:f8:9b:76:10:c3:66:83:a6:76:21:9a:1e:
                    28:83:9e:25:70:67:36:5d:f5:55:d6:a4:c8:89:34:
                    74:a8:42:7b:2d:7e:6e:de:13:ba:54:36:c1:16:60:
                    aa:bd:50:7f:b3:6a:d5:f2:e4:6b:da:2c:e7:0d:46:
                    fa:4c:1b:29:0a:22:70:ce:3b:cd:36:43:8c:b5:26:
                    56:f4:d4:b8:60:7b:31:bd:a4:75:ef:55:74:2c:b5:
                    37:17:05:0f:d9:8f:1a:9f:85:f4:1b:5e:e5:7f:a9:
                    fb:b3:b3:07:b7:af:2b:bf:83:31:73:4f:37:2b:60:
                    03:87:8a:9f:84:ad:b8:77:e0:00:6a:51:af:2a:4e:
                    2b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:01:57:16:5D:C0:2C:B5:F5:F6:7D:5E:0C:BC:1B:B1:23:68:D7:EB
            X509v3 Authority Key Identifier:
                keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:f2:64:ec:a5:e6:1e:fa:65:50:18:e5:34:b0:c4:ff:76:0a:
         62:65:99:f0:02:20:c4:dc:b2:8b:f0:1e:3d:1f:37:40:ac:01:
         2d:cf:a7:8c:d0:29:90:1e:04:6f:93:e3:c5:a9:29:7d:6f:eb:
         9c:cc:ff:22:80:79:a4:43:3b:83:45:1b:22:72:b6:86:fe:d7:
         bb:ff:a7:d1:0b:14:e9:02:0d:0b:95:4c:5d:f9:10:b8:9c:8b:
         33:43:6e:cc:12:5f:dd:62:cc:8c:4f:84:4e:f2:bf:fc:a3:08:
         0e:af:bd:7b:f9:64:4e:f3:7f:e9:70:14:ee:89:ba:00:ef:51:
         d2:32:d8:27:78:b0:40:96:e6:bd:36:30:4c:92:ca:22:00:40:
         56:30:9f:9b:dd:d0:64:9c:fa:d7:4b:78:a9:b0:0b:c9:a6:8c:
         ab:6f:b1:9b:e5:31:e7:b4:d0:3f:88:23:7a:2b:52:28:2c:39:
         82:5a:ce:ac:a5:bb:15:03:aa:7a:f0:32:e3:85:92:f9:5c:1b:
         cf:50:f8:ac:62:ea:fa:2f:49:4a:bc:c6:a5:e0:65:7a:31:e7:
         3e:3c:0f:41:f1:72:f9:d6:f6:14:be:ce:ed:79:69:43:08:12:
         6b:db:ec:51:1c:b4:5d:5d:92:52:fd:46:3f:cb:f9:4d:a7:71:
         03:22:a3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:20 2026 by rpki-client