Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313534343130.roa
File:                     3130332e3231312e3139362e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          J5G+McAVtr2U9Oe5SR6DxQqcZsQxCgVXssdzL4FSaj4=
Subject key identifier:   98:74:91:19:AA:41:12:12:90:86:CE:A2:B9:BB:72:D9:2F:34:05:0D
Certificate issuer:       /CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4
Certificate serial:       5B8BCDBD13EB913592EA6AF4DB9D6EA0B784E427
Authority key identifier: 9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 03:03:10 +0000
ROA not before:           Sun 03 May 2026 02:58:10 +0000
ROA not after:            Sun 02 May 2027 03:03:10 +0000
asID:                     154410
IP address blocks:        103.211.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl
                          rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8b:cd:bd:13:eb:91:35:92:ea:6a:f4:db:9d:6e:a0:b7:84:e4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4
        Validity
            Not Before: May  3 02:58:10 2026 GMT
            Not After : May  2 03:03:10 2027 GMT
        Subject: CN=98749119AA4112129086CEA2B9BB72D92F34050D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:50:a4:4d:73:cd:47:bf:4d:ac:13:74:90:
                    b3:e2:4a:a7:5e:6c:2f:4d:5d:23:d9:da:0e:13:37:
                    65:82:23:af:04:90:5d:1f:66:73:23:04:25:97:a4:
                    78:b4:e6:46:11:1a:85:6d:60:67:38:fc:ac:ee:37:
                    4f:09:66:66:3f:fd:a2:32:af:30:a5:63:23:8f:ee:
                    5a:e6:dc:43:a4:40:c2:ea:d1:89:63:d8:84:65:cb:
                    b4:80:92:fb:83:3f:7b:54:71:fa:16:61:2a:95:17:
                    70:09:5e:88:ce:2b:32:34:9d:ca:bb:fa:89:e5:d1:
                    fe:2a:20:0a:85:3b:b4:de:19:b4:93:df:87:c7:8e:
                    d3:30:b4:0c:76:a7:b3:78:46:8d:11:e3:56:87:7b:
                    a7:1d:f4:ec:3e:6a:dd:27:29:2d:88:01:aa:de:44:
                    3f:f1:7f:d3:a6:f4:43:06:02:90:fe:ad:22:10:08:
                    aa:42:29:e3:89:a4:31:d1:f9:e5:fd:25:82:86:10:
                    08:c9:96:a7:3c:1b:f4:91:ad:f1:55:3f:0b:35:19:
                    d0:3b:cd:a8:2e:07:86:87:80:38:74:bd:31:85:5e:
                    75:84:83:f3:92:80:0d:04:10:d4:98:66:7b:c7:1e:
                    19:0b:13:66:32:05:0e:46:d2:b5:ba:0a:42:8a:fb:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:74:91:19:AA:41:12:12:90:86:CE:A2:B9:BB:72:D9:2F:34:05:0D
            X509v3 Authority Key Identifier:
                keyid:9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:25:60:a5:75:aa:56:d8:9f:98:01:95:90:a8:90:e7:6d:9d:
         ec:ce:4f:a1:be:c0:31:09:a6:c4:7d:ef:db:fe:e0:5b:29:ff:
         30:4f:0f:cf:a7:c9:94:22:ae:a6:b7:db:3f:b0:af:57:c3:f0:
         8d:0a:b0:71:da:0f:9c:c1:7e:2e:a8:2c:24:eb:8d:7a:a3:f1:
         94:d6:3c:ea:23:c5:93:4f:e0:7b:69:1e:14:6f:40:89:99:43:
         d1:83:5d:93:58:82:39:1d:ab:e4:13:3c:72:eb:41:24:4e:d7:
         8a:08:2a:b9:3c:27:e8:ab:36:9c:4f:28:1c:f2:f0:f7:be:89:
         c0:2e:44:58:22:02:d1:f5:0a:7a:3b:f9:60:a5:bd:13:d9:c6:
         12:0f:8f:b5:57:f7:4f:cc:11:76:d7:e8:28:f4:5e:e6:35:61:
         0d:89:94:6d:7a:0a:3c:e2:32:ff:e8:8d:92:3c:10:5c:65:8c:
         92:25:41:fa:0b:d3:cb:8a:c7:f9:df:41:69:b4:10:26:c5:94:
         0c:fa:9b:38:23:73:e8:ee:2d:49:d8:84:20:1c:08:43:c5:4b:
         15:e8:f3:11:80:e2:09:59:1d:54:76:90:9a:a5:b2:2f:c7:8c:
         b0:28:e7:60:6d:b1:f1:87:3a:ec:ba:14:d1:21:69:76:9f:70:
         fb:29:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:19 2026 by rpki-client