Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa
File:                     3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (raw, json)
Hash identifier:          0DaR6EQXz9qNKopRfjWSu/bXijoSdhpj5fJcKyJycxw=
Subject key identifier:   49:E1:91:DB:2B:08:BC:E6:CF:D6:D0:19:C1:AF:F8:CD:AB:EF:BA:37
Certificate issuer:       /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Certificate serial:       3AC8647BA5B6B79F80465E2BE2FFB1FE0B508F8B
Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa
Signing time:             Sun 03 May 2026 02:54:37 +0000
ROA not before:           Sun 03 May 2026 02:49:37 +0000
ROA not after:            Sun 02 May 2027 02:54:37 +0000
asID:                     132829
IP address blocks:        103.134.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
                          rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c8:64:7b:a5:b6:b7:9f:80:46:5e:2b:e2:ff:b1:fe:0b:50:8f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
        Validity
            Not Before: May  3 02:49:37 2026 GMT
            Not After : May  2 02:54:37 2027 GMT
        Subject: CN=49E191DB2B08BCE6CFD6D019C1AFF8CDABEFBA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:be:48:84:46:69:39:60:2f:2e:fb:08:e2:98:
                    66:40:51:01:89:e2:64:15:7d:e3:af:e3:67:1e:55:
                    2c:1c:32:a2:45:3b:94:5a:f7:fe:11:ab:76:66:aa:
                    3c:7a:3c:62:7b:c0:dd:c6:fa:d1:d1:a2:27:4d:b9:
                    15:59:0c:6e:21:d1:93:73:5e:79:fa:fa:c5:2e:5e:
                    74:e6:a3:ab:e5:34:e0:72:99:98:0a:c3:b2:6a:7b:
                    3a:23:c5:99:67:83:b7:8c:2d:7a:1a:e8:2b:da:ef:
                    bf:30:7a:13:5f:25:da:09:c3:e4:30:dd:29:8f:54:
                    00:d6:e2:3a:a5:b1:6a:5d:37:52:98:9b:ad:35:d1:
                    dc:a0:e6:40:2c:2d:18:e3:c3:53:33:18:26:d5:f7:
                    d7:93:19:63:1e:8f:fb:06:bd:e4:d5:fc:09:f5:5c:
                    ae:ef:1d:01:54:77:11:8b:7f:15:40:3d:93:42:d4:
                    c1:98:d6:c1:28:4d:c7:46:5e:bb:3d:e6:7f:f7:b6:
                    bd:8c:39:59:c9:14:b1:34:7e:01:6b:2c:22:c2:7f:
                    7f:c2:2a:76:ac:fa:53:c9:4c:8d:11:81:60:77:db:
                    58:d5:96:a1:d0:88:b1:78:4c:65:31:1d:6e:be:8e:
                    34:6d:6b:5d:6b:a5:48:e9:1e:3d:e9:c2:fe:11:05:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E1:91:DB:2B:08:BC:E6:CF:D6:D0:19:C1:AF:F8:CD:AB:EF:BA:37
            X509v3 Authority Key Identifier:
                keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f7:c0:c6:33:85:35:05:5d:09:ae:ae:9e:39:8c:cd:2b:55:1c:
         38:11:e3:5b:de:2a:d8:15:24:70:98:51:18:fd:1a:4e:af:a5:
         5a:1a:cf:e7:d6:16:5a:50:59:d0:f5:b5:4c:39:54:e5:5b:16:
         46:7f:a7:2e:73:3f:27:3d:34:42:73:44:b8:b7:76:93:df:82:
         67:b8:85:a3:48:8f:84:3a:19:5e:93:ff:c9:5c:f8:0c:80:6f:
         d3:4c:5b:62:bf:b9:5f:fd:bb:50:1d:0f:bb:a3:cc:f0:5f:f2:
         bf:80:15:05:28:ea:12:40:5a:9d:94:7f:7d:f3:d1:6f:f9:8b:
         3f:8e:e8:57:ad:c1:a6:0d:52:cb:9c:90:fd:85:9a:84:de:69:
         15:e5:91:67:1a:9b:16:cd:d7:29:d2:8e:04:95:28:bc:df:78:
         ae:44:5b:1c:03:ca:fa:eb:5f:7b:2d:8c:f0:dd:fe:a9:f5:0a:
         ea:e9:95:e2:fe:11:da:11:bc:14:30:5c:d2:69:55:70:80:e2:
         99:4b:c4:40:01:2e:5f:05:a7:1f:57:c0:7b:b0:a6:2b:3f:09:
         b3:09:06:f2:2c:ea:3c:5c:7e:31:6b:4e:0f:31:0f:42:53:a6:
         f6:07:5b:97:28:27:54:43:72:40:16:e3:cf:51:73:e3:4d:b0:
         04:ce:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:51 2026 by rpki-client