Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3233312e302f32342d3234203d3e203633383638.roa
File:                     3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (raw, json)
Hash identifier:          Y2m4R38G71C4Yy/wcE7dbb3Q4JyEjJy1AWb7+OggzPM=
Subject key identifier:   3F:5B:12:6B:07:4B:E7:39:8E:F6:A7:1B:4B:D4:23:AE:0F:D7:49:79
Certificate issuer:       /CN=EB314E0C129A5CAF077447531422664A0DBA21EB
Certificate serial:       19165A3B4B20668AE72EF5B59B17D8980580F6F1
Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3233312e302f32342d3234203d3e203633383638.roa
Signing time:             Sun 03 May 2026 03:09:20 +0000
ROA not before:           Sun 03 May 2026 03:04:20 +0000
ROA not after:            Sun 02 May 2027 03:09:20 +0000
asID:                     63868
IP address blocks:        103.49.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl
                          rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:16:5a:3b:4b:20:66:8a:e7:2e:f5:b5:9b:17:d8:98:05:80:f6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB
        Validity
            Not Before: May  3 03:04:20 2026 GMT
            Not After : May  2 03:09:20 2027 GMT
        Subject: CN=3F5B126B074BE7398EF6A71B4BD423AE0FD74979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:1d:16:f4:4d:38:38:7e:ad:aa:1a:39:48:
                    46:2f:72:6b:ca:b7:50:dc:8c:ce:16:39:60:9c:64:
                    c6:ce:6f:b3:e8:eb:26:bf:1e:98:e9:2d:3a:9f:22:
                    b1:80:e7:c9:de:e1:7c:ae:e3:a1:72:e2:df:aa:c7:
                    3b:42:91:21:47:a9:91:aa:be:a2:fe:98:fa:a0:dc:
                    e0:e8:04:0a:37:83:c8:1e:51:2d:eb:d8:73:10:50:
                    cc:f9:6b:ea:8d:84:00:b5:53:90:63:a1:c9:8a:31:
                    46:4a:36:c2:86:6b:c2:79:65:9c:96:9a:1d:1a:e1:
                    98:06:92:28:93:cf:47:9a:43:23:03:c6:3d:31:f6:
                    e8:2e:20:ff:ed:e4:7b:46:39:fa:af:84:02:48:be:
                    8a:9c:4b:8d:c6:b1:ba:0b:cb:73:8d:a3:14:5c:cd:
                    42:ad:48:6b:33:f2:d6:4e:aa:27:ad:5c:d0:1c:86:
                    f6:2a:b2:f7:e1:7b:00:22:51:e8:ea:5f:c4:bc:e8:
                    fb:d3:a4:e6:28:12:99:e6:20:49:61:d1:e2:ec:34:
                    2a:fb:1e:0e:34:a0:36:96:8f:2f:ba:91:9e:3e:0a:
                    60:e1:b0:1b:ff:1a:b6:91:36:4d:ff:e8:2f:65:3e:
                    0d:61:07:60:4e:08:82:06:03:c7:ba:ea:86:3a:d7:
                    6f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5B:12:6B:07:4B:E7:39:8E:F6:A7:1B:4B:D4:23:AE:0F:D7:49:79
            X509v3 Authority Key Identifier:
                keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3233312e302f32342d3234203d3e203633383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:82:eb:e0:68:04:8f:ff:b8:92:14:23:0b:95:c6:06:2e:fd:
         d4:6b:dc:2d:0d:7d:53:0c:76:f7:48:62:d8:f1:3a:55:89:ed:
         99:60:31:35:a7:f6:ac:61:8d:f8:6d:f2:2c:b1:8f:aa:22:30:
         46:ff:b5:f9:8b:ac:8f:f1:06:ae:38:83:ae:53:09:38:33:b0:
         14:a5:74:5e:cb:ed:2b:43:20:89:cd:cd:86:3d:f9:d7:94:de:
         8b:50:d7:e4:22:d1:0f:9c:34:ee:82:de:21:2a:69:1b:27:d3:
         db:33:83:78:97:91:c9:0c:fa:df:fd:b9:1f:47:c2:14:94:36:
         49:c3:c6:76:59:17:25:5d:51:b8:e0:83:0e:d5:af:7e:4c:cf:
         13:87:43:8a:10:f4:8f:fb:a2:07:94:47:ae:60:64:d7:a4:8c:
         a9:ab:d5:9f:5d:ed:8f:91:b2:0c:44:0f:01:3c:8e:5b:74:87:
         6b:56:a7:de:78:aa:77:15:58:d9:4b:24:49:83:37:26:9d:9f:
         b0:b1:0f:86:66:69:8e:a6:27:9f:3d:d4:78:ee:9b:b4:76:cf:
         82:1e:f5:14:d3:df:6b:a6:4f:eb:43:8f:aa:58:79:1f:b1:86:
         e1:5d:48:d4:79:c7:77:07:8e:1a:63:bb:a1:e6:30:3a:65:fd:
         9e:45:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:27 2026 by rpki-client