Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39392e302f32342d3234203d3e203535363533.roa
File:                     3130332e31312e39392e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier:          tgMOLRKHLk6AeegSxwagm//NkkSHrRBSK1EEwqWmlG0=
Subject key identifier:   AC:79:28:FB:A0:20:72:2C:61:54:0B:FF:1D:97:26:93:E5:5A:13:34
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       740881864C09CE7A53AEA44C3B792FF3F75CFCE0
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39392e302f32342d3234203d3e203535363533.roa
Signing time:             Sun 03 May 2026 03:06:23 +0000
ROA not before:           Sun 03 May 2026 03:01:23 +0000
ROA not after:            Sun 02 May 2027 03:06:23 +0000
asID:                     55653
IP address blocks:        103.11.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:08:81:86:4c:09:ce:7a:53:ae:a4:4c:3b:79:2f:f3:f7:5c:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: May  3 03:01:23 2026 GMT
            Not After : May  2 03:06:23 2027 GMT
        Subject: CN=AC7928FBA020722C61540BFF1D972693E55A1334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e1:4a:43:c1:16:aa:26:24:78:f9:ea:52:5c:
                    e4:bb:ad:a0:0f:7b:2e:e8:fe:15:e9:c4:94:b7:c9:
                    b7:86:84:93:9a:f1:a7:15:49:d4:c5:8e:8b:18:8f:
                    67:79:61:16:1d:b5:96:02:34:af:64:a8:85:5a:5c:
                    68:17:05:3e:01:bd:b4:ed:d8:3e:ad:5a:6a:c1:db:
                    b5:45:1e:d5:13:a9:2d:4b:15:09:b2:51:60:4a:16:
                    13:1e:f2:d8:60:0b:71:70:5c:43:22:de:23:72:52:
                    f2:20:5f:f5:6b:d9:d1:7f:6b:c7:79:31:09:30:56:
                    f6:d5:d4:c2:b2:52:42:51:7d:d0:99:6c:f1:0d:5a:
                    13:dc:5c:e1:3d:ff:ad:c3:b3:bd:99:64:c9:b5:2c:
                    f8:bb:c4:54:6e:06:40:e4:2d:3b:c9:10:c7:11:19:
                    39:f3:95:6a:36:6c:b3:48:93:8f:db:f7:ce:5e:e9:
                    e8:37:2c:d4:f1:65:e2:ac:67:8c:f9:53:dd:62:ed:
                    c0:51:38:7b:89:48:da:7e:ed:3d:b9:e6:a9:c7:df:
                    29:12:ad:c3:85:f6:95:61:30:ef:17:b7:5a:33:70:
                    58:f5:80:96:b4:e0:da:91:8a:18:2e:58:6e:a1:33:
                    c7:22:e3:5b:d0:24:2f:5d:1f:c4:f4:fb:50:85:f3:
                    bb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:79:28:FB:A0:20:72:2C:61:54:0B:FF:1D:97:26:93:E5:5A:13:34
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39392e302f32342d3234203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:7d:3d:2e:9f:6c:d3:91:93:e0:5c:51:f7:0b:b0:15:2a:93:
         73:41:fe:d6:70:e2:7b:41:98:8a:2b:3f:c7:29:a8:91:53:af:
         00:36:4f:db:1a:77:6c:47:f7:1c:dd:57:f9:6d:b1:e4:b9:24:
         3d:e0:08:53:3b:72:18:35:33:92:80:46:5d:2f:3d:b2:01:fa:
         d0:d2:a9:84:aa:a6:d6:e8:a2:2c:cb:fe:aa:16:b7:45:87:41:
         cf:44:3d:05:8f:20:0f:c7:51:ca:e4:b8:9b:97:bf:f7:2e:8b:
         e7:8b:06:0b:5c:ad:fa:6c:a5:96:c8:dc:ac:6f:fd:23:14:4d:
         8e:80:6d:dd:34:2a:9f:45:a1:25:60:02:20:4b:42:1d:d7:b1:
         6d:b5:cb:4a:51:c1:5b:35:37:f7:ac:a1:69:63:58:3f:da:71:
         52:f9:85:9b:fd:dd:f0:ba:9b:12:5a:64:2e:03:77:44:89:88:
         6f:c1:41:17:52:30:00:d7:43:21:6f:b7:cd:37:14:e3:f9:d6:
         d7:97:1f:d7:ee:57:6e:9a:64:27:99:50:49:e4:0d:08:46:b0:
         1c:ad:55:2a:75:c8:a3:d0:ff:b1:ed:cb:cd:e8:e7:f2:31:19:
         b6:a6:39:21:72:93:87:ad:da:73:de:e8:e2:aa:c6:af:7f:9d:
         f5:8d:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:33:52 2026 by rpki-client