Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39372e302f32342d3234203d3e203535363533.roa
File:                     3130332e31312e39372e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier:          QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=
Subject key identifier:   D3:FA:BD:BD:1B:47:CD:17:BD:07:2B:B3:27:D9:ED:CC:39:04:D6:66
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       0AEF8094FC30A06A61BAB0432AA09BEFFF9FD301
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39372e302f32342d3234203d3e203535363533.roa
Signing time:             Sun 03 May 2026 03:06:17 +0000
ROA not before:           Sun 03 May 2026 03:01:17 +0000
ROA not after:            Sun 02 May 2027 03:06:17 +0000
asID:                     55653
IP address blocks:        103.11.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ef:80:94:fc:30:a0:6a:61:ba:b0:43:2a:a0:9b:ef:ff:9f:d3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: May  3 03:01:17 2026 GMT
            Not After : May  2 03:06:17 2027 GMT
        Subject: CN=D3FABDBD1B47CD17BD072BB327D9EDCC3904D666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:8d:81:75:e8:68:cf:4f:64:44:d9:b6:77:
                    73:ff:6e:b0:24:b4:84:ae:76:ac:7d:f8:51:39:e6:
                    89:c5:74:c8:f4:58:0d:fc:f0:af:35:88:7c:08:0d:
                    bc:ec:67:cb:5d:b0:00:65:cf:73:e2:e5:2f:8d:b3:
                    ec:40:bd:ff:92:f5:d5:18:49:2c:fd:70:97:15:d7:
                    b6:40:91:c7:40:3c:ef:a1:38:41:03:76:0b:91:80:
                    97:b6:32:7a:93:84:8b:67:8e:36:54:e2:37:73:a8:
                    e2:1d:63:36:4b:9c:02:e3:72:8d:d2:59:36:30:a1:
                    2b:0f:33:0c:8e:a6:e8:42:ae:6d:67:3c:5e:2c:a9:
                    64:14:43:69:d2:b7:dd:7f:ba:02:a4:db:c7:a4:c8:
                    60:3a:d8:4e:c5:91:82:30:27:c0:24:48:c0:89:33:
                    82:04:52:a0:98:0d:ae:e1:76:cf:58:d0:e9:3c:ed:
                    9b:fd:a9:a0:c2:6d:ea:4f:f1:46:5a:20:ec:dd:6c:
                    67:64:fb:13:71:4f:15:c7:ea:a9:c5:2c:45:73:fe:
                    69:37:11:b8:cc:89:4f:55:12:37:b9:c0:d1:0f:e9:
                    68:dc:f2:f2:1e:aa:e4:6b:ec:9c:ab:3d:85:dd:a5:
                    41:02:d6:57:73:9f:ef:7d:c0:cd:bc:54:8f:a2:41:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FA:BD:BD:1B:47:CD:17:BD:07:2B:B3:27:D9:ED:CC:39:04:D6:66
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39372e302f32342d3234203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:1f:89:28:d4:5c:00:78:90:0f:5f:60:22:62:e6:cf:5e:78:
         46:28:aa:08:0b:d8:eb:fa:fa:80:7e:c1:85:a1:7c:38:3a:16:
         59:37:e4:d4:d5:9c:7e:57:9e:1c:87:be:4c:e0:c9:0a:18:96:
         79:7a:6c:38:fe:ca:27:0e:ca:68:7b:21:13:a1:bd:7c:54:20:
         46:b4:56:96:2f:c4:44:2f:44:20:89:98:a7:6f:19:08:d8:05:
         31:ba:dc:f8:1d:f0:c3:2f:76:14:55:4c:f7:7c:59:6f:91:7e:
         0e:31:46:d9:9f:be:73:d9:26:47:43:0f:60:3d:e6:95:eb:74:
         21:a4:61:cf:d7:c8:2a:26:b1:29:01:82:64:e2:10:c9:34:8e:
         47:92:06:f5:0a:76:eb:be:15:08:6d:7a:62:55:38:13:02:a2:
         e0:ae:48:80:c0:fe:04:85:d2:ed:a5:e1:a1:a5:94:69:7c:a1:
         cd:4a:dd:95:b7:00:c8:be:70:fc:81:e4:4c:50:90:57:da:76:
         4b:89:02:1f:ee:15:d4:13:27:37:3a:5b:e8:d7:21:47:d8:cd:
         50:6f:57:99:0f:96:c9:81:be:fd:4e:c5:24:c4:38:d9:b8:e5:
         32:e6:11:65:3f:de:a4:91:c5:20:fe:92:c8:8f:7a:a2:e7:da:
         f4:88:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:47 2026 by rpki-client