Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa
File:                     3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=
Subject key identifier:   F4:84:A7:13:46:1F:BB:59:11:41:E8:55:E2:73:D7:7D:E6:E3:F5:D9
Certificate issuer:       /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5
Certificate serial:       1F2029B34A3CF4647F943EBA50A6D9CDEC7821EB
Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa
Signing time:             Sun 03 May 2026 03:09:47 +0000
ROA not before:           Sun 03 May 2026 03:04:47 +0000
ROA not after:            Sun 02 May 2027 03:09:47 +0000
asID:                     38758
IP address blocks:        103.131.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl
                          rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:20:29:b3:4a:3c:f4:64:7f:94:3e:ba:50:a6:d9:cd:ec:78:21:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5
        Validity
            Not Before: May  3 03:04:47 2026 GMT
            Not After : May  2 03:09:47 2027 GMT
        Subject: CN=F484A713461FBB591141E855E273D77DE6E3F5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:64:4f:96:07:53:62:ef:85:5e:2a:5c:74:
                    23:c4:a8:23:e8:e4:30:42:e6:07:c4:41:98:e7:04:
                    a6:0c:e7:d5:13:e7:71:dc:a7:be:d8:c0:4e:09:06:
                    c2:9c:dc:09:0f:f2:ec:7a:13:6a:4b:2f:50:22:a4:
                    b7:75:30:61:1c:26:8c:07:38:f9:bc:21:f0:09:bc:
                    a4:1d:84:23:f2:51:04:6a:5b:65:48:0f:00:84:08:
                    ee:e0:4d:88:b4:b5:6a:94:cd:f6:fa:0e:06:5b:da:
                    fb:97:7d:79:7b:d6:67:47:1b:39:1c:10:24:2e:a5:
                    40:2a:fc:42:dc:45:db:55:20:3d:95:fe:3d:5b:8d:
                    74:e2:cf:a9:e0:94:3a:d0:d1:51:b2:54:45:69:d1:
                    68:03:ae:9c:6c:23:4a:79:9f:3d:7e:50:f1:23:b8:
                    b7:a3:ea:b8:4f:63:f8:f7:2e:31:b5:f6:d4:c3:a6:
                    29:2a:52:86:3f:a7:b7:d3:97:d7:91:79:04:36:e8:
                    02:d9:a6:29:55:e5:b3:5c:95:44:88:1e:04:ea:83:
                    1c:16:8f:dc:09:ba:54:b3:89:2b:5d:a8:a3:31:f7:
                    07:16:fe:98:63:f9:eb:de:09:16:9e:5c:5a:74:be:
                    33:26:40:be:26:b2:2c:82:51:47:11:e6:1e:8c:a2:
                    1d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:84:A7:13:46:1F:BB:59:11:41:E8:55:E2:73:D7:7D:E6:E3:F5:D9
            X509v3 Authority Key Identifier:
                keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:06:fb:99:ca:81:4b:32:6e:35:27:d8:0a:c2:ff:0e:bf:97:
         77:65:77:62:80:99:d9:86:29:44:66:f3:1b:a3:74:cc:4c:17:
         93:19:c2:2c:44:20:fd:18:36:38:e5:83:a0:25:1b:ee:23:5f:
         29:f4:d2:82:40:58:78:dd:c9:d0:e1:0d:02:5c:11:32:fb:80:
         d6:65:17:dc:3a:04:4c:66:0b:41:aa:3b:9b:ae:a9:7c:e3:77:
         ff:4b:1a:4c:d0:cb:25:eb:41:37:80:a8:5a:3d:e3:e0:66:6a:
         58:58:90:a2:96:9f:45:f2:b7:f8:7e:4c:18:46:85:cf:2f:7c:
         36:05:ec:16:d7:42:c3:08:49:68:e3:38:d1:55:82:65:70:77:
         fd:c9:b6:e8:47:17:93:24:7c:e9:09:8a:dd:53:e7:65:d4:4b:
         d5:a7:83:39:03:08:5a:0f:ed:0b:3a:6f:ce:c2:56:7b:af:82:
         14:05:d3:b6:54:e6:98:bd:70:34:40:17:41:78:ba:2b:9e:e1:
         d5:b9:32:f2:35:23:ff:8b:21:79:64:e6:78:5f:9f:32:e2:4d:
         c8:1f:13:40:56:d6:99:0d:b9:ce:07:cc:b7:5c:62:69:62:41:
         50:a8:ca:d3:ef:bb:7e:01:29:6b:14:33:5d:65:b8:95:06:06:
         cd:59:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:19 2026 by rpki-client