Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39382e302f32342d3234203d3e203535363533.roa
File:                     3130332e31312e39382e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier:          1Ar9cC6jZkLzAdlFLEVr635I57ciOymkfzzDC1PNwsE=
Subject key identifier:   FD:27:33:8B:33:BD:11:3A:00:19:DE:5B:73:57:92:0E:5F:06:23:91
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       39CDC0420E700AF36A4DAF087859B8696E24342E
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39382e302f32342d3234203d3e203535363533.roa
Signing time:             Sun 03 May 2026 03:06:18 +0000
ROA not before:           Sun 03 May 2026 03:01:18 +0000
ROA not after:            Sun 02 May 2027 03:06:18 +0000
asID:                     55653
IP address blocks:        103.11.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cd:c0:42:0e:70:0a:f3:6a:4d:af:08:78:59:b8:69:6e:24:34:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: May  3 03:01:18 2026 GMT
            Not After : May  2 03:06:18 2027 GMT
        Subject: CN=FD27338B33BD113A0019DE5B7357920E5F062391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:bd:a2:02:54:68:32:1a:64:bd:e9:96:8c:
                    11:e7:e1:3e:9c:72:42:86:94:aa:71:7f:90:53:a3:
                    55:7a:0b:ea:64:1a:14:4d:0e:e7:81:5e:aa:ef:42:
                    ca:b0:91:e5:04:86:94:ff:11:57:63:23:ad:26:d7:
                    42:25:5c:c5:9d:83:43:a8:33:f2:aa:4f:77:46:bc:
                    88:67:7c:64:7f:f4:62:52:f3:6f:dd:2c:5e:3d:4b:
                    28:28:32:f3:16:98:85:ce:f6:42:ef:a9:11:02:b1:
                    ab:c6:ba:f0:07:b9:82:7f:13:82:bd:bb:07:2d:0c:
                    94:8d:35:ce:6c:c8:12:fc:be:2f:55:b0:99:50:dd:
                    5d:d2:b7:62:b2:c1:64:a6:00:eb:20:90:1d:1a:0b:
                    94:b6:93:44:20:9b:8a:35:93:a3:ed:63:c4:66:c1:
                    7d:92:5a:71:12:55:18:71:2c:4c:32:6f:a0:23:c8:
                    de:d3:6a:ee:4c:74:18:d7:02:b2:74:1a:6e:98:ae:
                    2d:92:1a:36:e6:70:ea:18:aa:39:41:81:43:63:a2:
                    04:b0:db:fc:99:a6:e3:78:31:1e:88:7f:d2:06:a9:
                    44:70:cf:50:a7:cf:81:a1:a6:60:6f:75:cd:e4:1f:
                    1d:d8:a3:63:68:87:0d:48:7d:22:35:77:ba:52:e3:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:27:33:8B:33:BD:11:3A:00:19:DE:5B:73:57:92:0E:5F:06:23:91
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39382e302f32342d3234203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:46:e2:62:30:94:01:f8:8d:ca:bb:67:2e:73:e9:fd:b7:
         ca:0c:76:91:81:c6:bf:1f:72:a3:8a:33:ae:d0:c5:1b:da:35:
         96:f1:c4:e6:ac:0b:68:34:6f:9b:f9:8a:f8:5a:2c:d5:0e:d2:
         a1:cf:2b:35:8b:1b:14:5e:fb:67:8c:a9:4b:71:ad:7c:d3:59:
         86:ab:d1:0b:8f:0e:7e:80:5e:cd:9f:a4:3d:51:07:13:1e:2c:
         b4:56:7c:a9:f3:e2:db:e0:58:33:74:9d:2c:65:83:2a:cc:f7:
         23:60:07:92:3f:4f:0b:30:bb:30:8f:94:99:65:37:9a:dc:1e:
         8e:54:a6:c7:b9:06:7d:ba:08:80:0f:77:fe:99:d8:5e:c1:0c:
         1f:0f:e8:a9:ca:50:60:06:85:b1:9d:bf:c7:16:78:eb:3a:42:
         32:09:65:2c:88:ec:28:f5:c8:50:b3:1c:f4:ae:f6:94:dd:1b:
         aa:b5:07:cf:8f:c4:ba:98:17:b8:95:06:68:27:6e:a1:26:8e:
         b3:4d:f1:04:8d:85:bc:32:c1:07:11:66:16:6d:8d:4a:a9:90:
         82:06:ff:48:0e:b6:3f:0c:5d:06:2c:13:e6:5a:a6:71:9c:23:
         8e:78:d7:a5:98:55:83:57:3a:f2:5c:fc:d2:bd:0b:cf:06:0d:
         7f:e6:90:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:29 2026 by rpki-client