Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39362e302f32342d3234203d3e203535363533.roa
File:                     3130332e31312e39362e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier:          Ou8COM1+4QBZTfW7oPb8lvGJwrPW2b9YrMH3Sw2uBUo=
Subject key identifier:   7A:34:A3:E1:FE:45:1A:9A:DB:08:62:70:76:E4:50:1A:29:DF:EE:EC
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       2F45463EC6E20B916C7327006D2EF59BE929C014
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39362e302f32342d3234203d3e203535363533.roa
Signing time:             Sun 03 May 2026 03:06:26 +0000
ROA not before:           Sun 03 May 2026 03:01:26 +0000
ROA not after:            Sun 02 May 2027 03:06:26 +0000
asID:                     55653
IP address blocks:        103.11.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:45:46:3e:c6:e2:0b:91:6c:73:27:00:6d:2e:f5:9b:e9:29:c0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: May  3 03:01:26 2026 GMT
            Not After : May  2 03:06:26 2027 GMT
        Subject: CN=7A34A3E1FE451A9ADB08627076E4501A29DFEEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:70:53:28:07:40:07:d7:af:21:c7:4e:75:
                    21:4b:aa:ad:e2:73:31:a7:1c:67:84:32:90:4d:f3:
                    0f:3d:be:f4:f9:f5:49:a5:f0:0c:1b:ea:fd:3d:de:
                    ff:17:a3:7b:8e:1c:ed:6d:1a:44:e7:25:9f:8e:c5:
                    b5:cb:d1:e0:8c:d2:05:3f:e1:a1:8e:c4:91:fa:e2:
                    6d:b7:ee:93:3f:6e:24:49:50:94:ed:c1:bf:35:1a:
                    08:7a:ce:44:77:dd:28:60:76:56:9e:30:ee:4d:33:
                    c9:5f:22:91:4f:48:a7:2b:28:57:50:dd:b0:06:43:
                    ea:51:65:33:27:a8:d2:cf:4a:58:f3:33:35:fd:5c:
                    b5:e1:bb:78:3b:4b:8c:43:a8:14:0f:d0:2a:eb:90:
                    c4:2f:82:63:95:e7:67:33:86:f7:86:7d:4e:c1:ef:
                    d6:6c:31:9c:8c:21:d0:85:5c:46:3d:6d:c8:0e:c3:
                    b2:24:46:c1:fa:b4:4e:4c:2b:19:1e:fa:34:a4:06:
                    4a:80:e2:8b:e9:5e:5f:23:ce:2a:ee:30:9e:d9:6a:
                    89:60:0b:f2:f7:6c:58:3f:c9:c4:a7:b5:11:58:8f:
                    51:cd:32:bc:51:d6:b5:b9:f9:4e:5f:3e:bf:5b:f5:
                    e2:36:fd:73:1e:4b:73:11:af:59:df:d0:c4:e7:a1:
                    01:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:34:A3:E1:FE:45:1A:9A:DB:08:62:70:76:E4:50:1A:29:DF:EE:EC
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39362e302f32342d3234203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c1:d0:ce:02:2b:3c:e1:31:7f:7b:42:81:68:76:2d:36:bc:
         02:6e:7f:f3:9e:2b:9f:b6:e8:0a:18:4f:e5:78:d2:79:57:db:
         17:2a:1e:2a:67:35:fb:81:c1:a6:cf:36:a7:70:64:ce:6c:0a:
         91:a8:c2:79:ad:c5:b8:bd:0e:66:74:41:1f:dd:05:0d:d4:dd:
         48:95:23:93:c3:a0:bf:a6:a2:88:60:76:f0:9b:f7:d6:97:3c:
         f2:66:6c:5d:7f:fb:22:f6:d4:9d:c2:b5:48:a1:d6:a3:30:a9:
         83:19:6d:d8:02:db:34:6b:ac:a1:64:01:93:a9:24:22:82:2a:
         5e:37:e9:0e:50:19:4d:cb:71:d1:db:15:30:66:05:d3:96:58:
         a9:3b:23:8c:e1:3e:b5:ba:d4:be:a5:37:da:0c:ed:00:49:e4:
         4f:dc:32:de:37:e4:23:b1:cc:fe:03:b4:9f:eb:4c:97:52:2f:
         81:00:a5:a9:8e:f7:d7:ae:f9:1e:57:54:7e:98:7b:ac:c0:9d:
         92:c1:47:35:1b:bb:03:eb:d2:8e:3b:84:2a:b2:86:c8:29:7d:
         94:96:e7:e7:0a:6f:4a:94:48:7f:d1:8c:47:93:65:9f:5b:5a:
         84:b0:27:d5:a9:0d:0a:f8:42:89:d2:2c:e4:f1:75:1c:5e:e0:
         d7:92:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:45 2026 by rpki-client