Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33392e302f32342d3234203d3e203338353030.roa
File:                     3130332e3234342e33392e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          1og0V8EQDlzknnZIDkMnOSoE6RIkQsF1PhJ0JqWkDVU=
Subject key identifier:   5E:BC:FC:B7:D2:47:32:0C:AE:FA:42:33:BD:FA:CD:18:58:6F:63:2C
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       6C1E1839BB3DD06BB68672508978712DFF74AD89
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33392e302f32342d3234203d3e203338353030.roa
Signing time:             Sun 03 May 2026 03:00:02 +0000
ROA not before:           Sun 03 May 2026 02:55:02 +0000
ROA not after:            Sun 02 May 2027 03:00:02 +0000
asID:                     38500
IP address blocks:        103.244.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1e:18:39:bb:3d:d0:6b:b6:86:72:50:89:78:71:2d:ff:74:ad:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:55:02 2026 GMT
            Not After : May  2 03:00:02 2027 GMT
        Subject: CN=5EBCFCB7D247320CAEFA4233BDFACD18586F632C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:e5:7b:c0:7a:56:53:1a:ca:89:87:49:fd:
                    b9:de:e4:f2:a7:4a:c9:fc:32:c8:d2:74:4d:32:1d:
                    fb:84:af:60:a6:c6:73:7a:67:cf:15:5f:a5:57:82:
                    1f:ef:27:8b:36:f2:45:32:1b:a4:a5:cc:c5:dc:a1:
                    de:78:21:bb:90:c3:06:cf:7e:14:32:1d:be:4d:18:
                    75:75:4f:35:0e:c8:a2:2f:c4:55:53:09:ac:34:5f:
                    f2:d6:72:ef:ff:04:16:8a:f3:4c:89:e3:4c:2c:22:
                    e7:f6:4a:49:53:27:8d:92:b1:66:7f:2c:7b:ef:81:
                    68:f8:87:64:a1:f2:26:b4:fc:0b:8b:e7:44:9d:55:
                    e9:f8:23:52:ff:a5:3a:2d:08:94:7d:ea:ac:a5:bb:
                    7f:7c:e1:cd:c9:47:d7:8e:53:70:51:1f:ac:09:87:
                    ed:fc:b8:e4:a9:e3:96:7f:80:67:8d:3c:79:12:0a:
                    f4:f7:01:8b:2e:ca:25:fb:c0:59:25:ba:55:7f:65:
                    f5:7d:ef:b2:76:6c:0c:4c:79:5c:45:d7:ac:17:fe:
                    e3:e7:56:62:58:cb:a7:31:28:a9:f6:99:e1:3d:b1:
                    a6:ce:09:51:81:37:64:5a:46:22:3d:e8:ed:4f:05:
                    47:e5:9b:f5:ca:c1:d3:92:3a:9d:39:16:73:99:6b:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BC:FC:B7:D2:47:32:0C:AE:FA:42:33:BD:FA:CD:18:58:6F:63:2C
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33392e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e6:dd:24:b3:08:b9:89:84:f0:46:b1:2e:34:b2:8a:61:00:
         63:4a:c8:28:b6:dd:42:61:b5:68:73:ff:49:be:8b:4d:a7:1f:
         49:d5:84:19:26:90:00:5f:ca:8e:09:8c:a2:b5:4e:8d:19:87:
         6f:99:e7:80:ba:7b:c8:0c:d7:3d:4b:eb:27:ec:3c:f4:10:1d:
         2e:8e:9e:7a:b7:b4:f7:57:dd:08:ca:ae:0c:d4:21:8c:c3:62:
         fc:86:1d:6a:f4:4f:18:c0:a4:11:c8:88:2a:95:2f:06:41:a4:
         dd:c4:00:16:99:22:a6:c2:89:83:1c:3b:40:7e:f3:58:9d:ba:
         d1:e6:0a:35:06:29:24:01:f1:3c:8d:ef:63:89:8e:dc:92:a8:
         83:c5:05:2c:02:9f:14:28:00:ed:55:3b:e9:04:5f:ea:8a:31:
         2f:a1:8e:97:3b:a8:af:8a:df:45:5c:5d:50:3a:b9:d2:be:ba:
         8c:75:1b:a9:8e:26:b7:c1:d1:b5:4e:2e:72:59:de:da:bd:29:
         32:b5:a2:06:0a:b0:5f:02:3d:c2:da:a8:7d:2f:74:18:7f:ff:
         ab:3b:ce:6a:26:d1:b6:fd:56:90:a0:ee:bd:5d:14:65:b7:57:
         1c:4f:c3:4f:98:70:8f:4e:de:94:72:6b:69:b0:2d:6a:2b:34:
         d4:f7:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:35 2026 by rpki-client