Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa
File:                     3130332e39312e33322e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier:          8iN/CyAnWulsiAeIh9OXGEEjvzE7Yu0Mej0akYbb1wk=
Subject key identifier:   28:5F:D3:71:B6:7C:87:18:70:C0:66:73:F1:BE:94:70:FD:67:50:F1
Certificate issuer:       /CN=EDE74DB94791A93866EC7291214CFE17A2E8847C
Certificate serial:       058C4DF39BEB4EAE713B7D8EE3ECD8742A2B9400
Authority key identifier: ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa
Signing time:             Sun 03 May 2026 03:06:51 +0000
ROA not before:           Sun 03 May 2026 03:01:51 +0000
ROA not after:            Sun 02 May 2027 03:06:51 +0000
asID:                     38496
IP address blocks:        103.91.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl
                          rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8c:4d:f3:9b:eb:4e:ae:71:3b:7d:8e:e3:ec:d8:74:2a:2b:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE74DB94791A93866EC7291214CFE17A2E8847C
        Validity
            Not Before: May  3 03:01:51 2026 GMT
            Not After : May  2 03:06:51 2027 GMT
        Subject: CN=285FD371B67C871870C06673F1BE9470FD6750F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:06:82:5c:cb:39:f9:25:21:6e:11:a4:a3:
                    f3:80:fc:f9:bd:be:eb:7e:35:53:f6:d4:0f:4b:14:
                    38:fd:bf:f2:36:19:5d:fd:bf:70:c1:28:40:27:70:
                    8e:87:e5:7f:7f:8a:22:d0:d8:fe:c6:73:21:62:f3:
                    5b:16:23:9d:94:5f:56:95:ee:a7:3b:70:be:e1:1c:
                    5f:a3:8d:cc:dd:d8:8a:47:ff:ca:97:e8:3c:92:6b:
                    5f:f4:16:9a:e5:2e:d6:ce:db:6f:b9:9a:af:e9:cb:
                    15:18:10:cc:4f:5d:c5:49:be:f0:9f:fb:91:95:6e:
                    46:14:39:fc:ec:f9:17:19:ed:ec:44:25:c9:c8:a5:
                    0f:05:5b:56:f4:ed:fc:eb:b2:e2:69:94:81:55:df:
                    41:fc:bd:84:91:cf:01:85:23:56:e8:81:27:9b:52:
                    48:48:f1:73:f1:bd:00:50:e8:54:fb:2e:1b:f1:0b:
                    4f:1c:66:b9:d8:0a:2d:3c:eb:19:23:97:e5:1d:81:
                    04:fe:6d:8c:6a:09:47:ab:88:16:cb:2f:e3:e8:8a:
                    42:df:b3:3e:84:26:ba:00:b3:5c:5b:91:a0:2b:ce:
                    14:4c:c5:7a:fd:9e:45:87:54:a3:f2:3e:4d:b6:e0:
                    19:64:8f:51:9e:d7:9a:f9:82:1c:10:9e:06:e2:60:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5F:D3:71:B6:7C:87:18:70:C0:66:73:F1:BE:94:70:FD:67:50:F1
            X509v3 Authority Key Identifier:
                keyid:ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:10:90:4e:86:23:d7:05:00:f6:4c:11:04:70:1d:ea:31:33:
         ca:17:90:38:99:f0:84:1c:01:25:ef:5c:da:cf:d8:56:86:2c:
         ec:a6:fc:1d:ab:67:6e:c8:45:ce:2a:5e:5f:d3:2e:7c:79:13:
         55:17:5f:42:24:f4:2a:18:6b:40:a9:84:bf:18:1e:91:fb:c7:
         27:42:56:a0:33:b8:8d:c3:08:5b:49:32:91:bc:99:ee:cc:d3:
         52:b9:ae:7c:2b:6b:29:a7:a4:e5:73:ac:c2:e3:28:a7:89:65:
         70:87:d4:17:30:a2:1f:8a:1c:de:92:5b:eb:9b:97:a3:03:36:
         e9:60:d3:22:a0:4d:34:b0:74:37:12:63:7f:b8:1f:3a:86:f8:
         f1:cc:6e:b7:88:cc:0f:eb:fb:2c:07:27:c6:8b:b6:f0:15:ed:
         20:b1:0e:c8:86:92:8f:6b:88:ba:e1:62:03:64:46:b8:0e:04:
         ee:60:53:89:d6:ca:3c:5f:5b:93:1f:6b:8a:c0:cd:03:bf:2f:
         e7:92:a8:35:70:b6:f3:2f:eb:15:11:28:3d:fa:45:42:a3:2b:
         9d:2c:0b:b0:d8:d0:84:92:af:3e:3d:09:02:cd:5a:74:06:3a:
         4d:4a:12:15:0c:ee:69:7f:2a:14:4e:95:3f:7b:c7:5a:5a:ee:
         c0:4e:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:03 2026 by rpki-client