Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
File:                     3130332e33392e35302e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          wOS69O9egy0QqkQmf4Rwcab945V7fSaYWRZAMqpnvsY=
Subject key identifier:   D6:37:D5:DA:08:C3:8A:42:98:0F:69:52:C0:32:97:74:2E:2A:47:F0
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       3C13B77CE2218D95B34EDF00377EEC1CCF9A0734
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:01 +0000
ROA not before:           Sun 03 May 2026 02:54:01 +0000
ROA not after:            Sun 02 May 2027 02:59:01 +0000
asID:                     63501
IP address blocks:        103.39.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:13:b7:7c:e2:21:8d:95:b3:4e:df:00:37:7e:ec:1c:cf:9a:07:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:01 2026 GMT
            Not After : May  2 02:59:01 2027 GMT
        Subject: CN=D637D5DA08C38A42980F6952C03297742E2A47F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:eb:8e:23:42:91:cf:83:75:ad:44:ac:7b:
                    9b:85:b2:35:4f:b4:13:86:9b:55:a3:95:95:f1:6f:
                    56:be:4d:5b:07:c0:2e:d6:87:2f:17:b8:6c:39:41:
                    e0:08:b2:9d:dd:d3:a9:bf:d0:4e:31:29:fe:d3:8b:
                    ab:dd:6b:03:01:e5:0a:36:24:2d:8d:f2:b6:bf:55:
                    33:23:ea:12:12:d5:17:7d:8a:73:db:b6:44:0b:e0:
                    ac:b0:17:6d:28:1d:ec:c8:8a:ee:50:9d:24:2b:59:
                    fb:de:b3:a8:1d:3f:47:44:20:a6:39:ec:f2:f9:16:
                    00:7f:4c:05:c6:98:7c:0e:26:95:25:00:49:06:5d:
                    9e:78:9c:be:cd:5d:03:df:6a:71:c0:f6:cc:b6:8b:
                    6b:2d:97:67:0e:40:89:b0:53:e3:ed:f5:34:d2:20:
                    26:1c:c5:3e:d0:91:19:77:1f:d6:a1:eb:86:8c:c4:
                    29:94:0b:05:54:dc:80:4f:66:b6:ae:7b:29:89:4b:
                    58:2a:62:a0:5e:39:b7:5c:d7:89:17:14:12:02:9f:
                    92:20:ab:97:12:3b:53:95:d6:0a:94:10:ca:da:a3:
                    1b:29:e3:4d:41:37:2e:f4:4e:57:81:7b:af:75:c6:
                    66:39:eb:02:f4:67:c0:e5:46:53:a6:cf:5c:e2:a8:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:37:D5:DA:08:C3:8A:42:98:0F:69:52:C0:32:97:74:2E:2A:47:F0
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:25:d4:ff:52:5e:c8:bb:56:70:a6:dd:db:bf:bb:93:b9:fd:
         97:7b:86:0d:4b:5c:03:55:20:56:43:c3:76:3a:f3:a0:92:91:
         7d:f3:6d:b0:95:c8:d2:ca:00:6a:db:78:9e:dd:44:2f:64:c9:
         9e:7f:5d:0d:e7:84:32:b4:6e:b2:73:37:ad:5e:d7:d5:c1:57:
         c2:a7:aa:b4:2a:08:72:9e:b8:1c:82:2f:6b:5e:0a:09:a3:73:
         5c:d1:79:e7:98:d0:8b:0f:25:90:b2:40:78:b8:28:30:e1:57:
         95:ff:c5:d9:10:07:d2:c9:9c:fa:53:d0:72:72:e4:3e:b0:4b:
         73:94:91:76:a8:33:96:55:b0:db:cb:3b:08:52:eb:cc:79:d3:
         8f:ea:42:cc:06:4d:05:89:0e:ca:32:31:c0:dc:59:c5:e0:00:
         96:1f:de:72:4d:79:02:7d:04:6a:4a:02:33:de:c8:6c:3c:35:
         86:8d:eb:96:8e:a1:77:33:05:b9:03:c5:c1:f3:1d:5d:11:19:
         ed:57:70:15:7c:47:96:2f:fd:f9:a3:5d:60:59:98:ce:cf:17:
         d5:ac:da:36:67:a5:6a:70:26:25:83:b2:60:12:21:e9:e0:e4:
         fd:c2:11:a0:00:d9:7f:92:2f:6d:02:33:44:11:ff:b1:7a:bf:
         d7:99:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:18 2026 by rpki-client