Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35312e302f32342d3234203d3e203633353031.roa
File:                     3130332e33392e35312e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          8jkBiGfCNhQUjJEBpu33onc60rmksmsebcFiUr/AvHo=
Subject key identifier:   3F:2F:B1:AE:C4:25:AE:73:4D:B4:44:91:0D:16:90:B4:DD:D1:77:66
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       591E9933D9033A6FF9841F352A64CC9544FC4DB0
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35312e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:02 +0000
ROA not before:           Sun 03 May 2026 02:54:02 +0000
ROA not after:            Sun 02 May 2027 02:59:02 +0000
asID:                     63501
IP address blocks:        103.39.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1e:99:33:d9:03:3a:6f:f9:84:1f:35:2a:64:cc:95:44:fc:4d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:02 2026 GMT
            Not After : May  2 02:59:02 2027 GMT
        Subject: CN=3F2FB1AEC425AE734DB444910D1690B4DDD17766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:2f:51:be:c9:0b:a3:7e:1a:c7:b3:74:6a:
                    66:7b:59:7d:8f:7b:b5:39:c7:4e:eb:e9:a3:ca:c9:
                    30:56:19:03:25:91:33:66:8a:e7:a2:c4:ed:db:d2:
                    b0:1c:af:06:42:14:81:a4:d6:18:35:66:39:78:b8:
                    a2:b8:85:63:4c:11:68:39:9f:df:a7:fe:d1:1c:09:
                    f1:28:22:08:b1:40:52:ca:82:f1:2c:23:8d:0d:86:
                    bb:cb:c0:70:52:80:70:07:86:e5:b6:01:f9:06:d0:
                    d8:97:27:d3:55:b7:aa:ec:9b:bb:1e:c2:8c:99:a3:
                    a4:77:fb:19:1c:af:07:f2:ba:2a:d0:e0:85:87:70:
                    5c:af:e3:c8:bf:ae:15:82:d3:48:4c:b9:be:60:8a:
                    41:8e:09:57:3d:23:ec:dd:29:4e:5e:44:8c:a5:5a:
                    5c:d3:33:99:8b:97:06:47:c4:78:47:37:92:ca:54:
                    7a:c1:1a:35:31:06:98:08:77:36:67:d8:ac:aa:19:
                    98:c9:0e:04:53:8e:8e:9b:f7:d9:c1:3e:25:d6:6a:
                    9c:93:03:ef:e3:8b:22:01:5a:51:fc:8d:3b:1c:5f:
                    85:2f:30:72:fc:df:d6:42:cf:bb:4f:11:ea:fa:44:
                    c8:18:7c:77:40:11:bc:ec:20:71:2c:f3:f4:f4:a4:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2F:B1:AE:C4:25:AE:73:4D:B4:44:91:0D:16:90:B4:DD:D1:77:66
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35312e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d0:07:49:c4:06:fc:56:ee:f4:48:e1:0f:9f:ba:97:e6:85:
         b9:93:f1:0f:56:2e:dd:d6:35:95:2f:c4:24:60:de:c7:4e:2e:
         3d:a2:d5:50:26:e6:aa:ee:1b:4d:31:1d:df:b5:10:b2:a8:5c:
         c5:99:7a:a8:63:85:36:8a:ee:c8:4d:27:da:03:aa:a0:cb:27:
         47:c0:be:64:d7:2a:20:4c:2e:3c:0a:12:ac:1e:91:03:41:23:
         58:9e:f3:99:88:22:db:67:d8:bb:63:f5:c0:a2:af:8c:75:13:
         8a:13:f4:38:30:81:29:aa:c1:6d:a9:72:00:08:34:db:a8:6b:
         96:6e:c3:81:3c:ee:7b:29:d5:47:0e:fb:d2:39:1c:7d:98:87:
         b9:e1:fc:08:03:ad:65:b8:bb:ee:d2:31:bf:da:34:bd:ac:6f:
         a2:9a:5e:70:ea:83:fd:0b:c2:5f:86:53:c8:68:bd:ae:11:4d:
         9d:5d:00:12:45:e6:1c:c8:bb:72:74:3c:93:b2:f4:bd:3b:0d:
         2d:61:5e:d9:93:db:e0:59:e9:2d:20:fd:22:02:f7:b2:94:4e:
         f5:24:a4:bd:85:e8:b7:7d:3c:7a:10:b3:d9:8e:d3:74:a3:44:
         01:25:8b:a1:7e:a4:3d:f9:e3:6a:34:01:79:08:2c:bc:19:0c:
         52:16:d5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:00 2026 by rpki-client