Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa
File:                     3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=
Subject key identifier:   C3:A8:EC:63:9B:FB:7B:D7:C8:CF:75:50:E3:48:C3:CC:27:7A:52:D8
Certificate issuer:       /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5
Certificate serial:       2EDFFC2F6FD8543A71FC170A233857638A2563AC
Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa
Signing time:             Sun 03 May 2026 03:09:47 +0000
ROA not before:           Sun 03 May 2026 03:04:47 +0000
ROA not after:            Sun 02 May 2027 03:09:47 +0000
asID:                     38758
IP address blocks:        103.131.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl
                          rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:df:fc:2f:6f:d8:54:3a:71:fc:17:0a:23:38:57:63:8a:25:63:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5
        Validity
            Not Before: May  3 03:04:47 2026 GMT
            Not After : May  2 03:09:47 2027 GMT
        Subject: CN=C3A8EC639BFB7BD7C8CF7550E348C3CC277A52D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:ea:d8:ff:a4:38:f0:7f:f7:b3:f0:48:f2:
                    91:86:33:5c:12:0e:d6:52:85:8b:bf:f6:e4:6a:44:
                    35:97:ab:57:2b:4a:ce:1f:9a:2d:41:1f:6f:22:f7:
                    e7:1e:83:24:6a:eb:99:19:76:66:e8:54:d6:3b:c2:
                    df:b9:b5:71:c4:ae:2d:6d:d3:17:56:6e:c6:e0:b1:
                    dd:b1:9e:69:0d:79:48:25:74:83:68:0c:93:64:e8:
                    cd:36:0e:fe:d0:82:d3:23:c2:08:16:e6:fc:27:31:
                    58:3c:38:84:28:3a:42:eb:11:b3:85:a7:89:93:3c:
                    87:a7:c4:e6:4c:01:4a:40:76:a4:c8:c6:b7:a1:52:
                    e4:de:e5:21:a0:ad:19:a5:98:48:c6:00:00:82:15:
                    0f:df:81:6e:b7:8f:87:94:5f:80:ce:03:86:0b:0c:
                    a7:5f:c9:5b:ac:a6:fa:02:c5:51:24:ea:91:70:8d:
                    77:a2:74:50:5b:df:fb:30:9d:3f:95:e6:c3:91:37:
                    0a:cc:36:86:8f:74:d6:6e:ee:07:06:e2:91:07:5e:
                    34:cd:0b:70:0d:94:78:e0:e6:bf:8f:de:9d:1e:aa:
                    74:24:d0:01:39:29:a7:bc:7d:e6:2d:f0:d7:00:a9:
                    55:d0:57:4a:06:a7:1c:ff:9d:c8:1d:22:c3:87:fe:
                    0c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A8:EC:63:9B:FB:7B:D7:C8:CF:75:50:E3:48:C3:CC:27:7A:52:D8
            X509v3 Authority Key Identifier:
                keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:3c:74:da:46:1f:9d:60:a5:03:bc:e2:b1:e5:3f:49:a5:b1:
         e2:5b:f9:59:a2:dc:da:05:4e:b7:66:3f:25:32:74:8b:cd:e9:
         90:cf:a8:3c:c0:0b:f0:78:fe:ff:f0:51:cd:9a:91:9d:24:0d:
         dd:e3:6d:c1:73:0d:49:11:6f:a9:8a:78:6f:09:c7:89:35:97:
         45:ea:0f:c9:43:69:fc:17:1d:91:76:45:be:63:38:6e:5f:f4:
         ce:55:ff:4f:16:a4:86:22:f3:d6:5a:a7:cd:7b:b0:37:1c:34:
         9b:d5:ab:c2:6a:03:4c:71:80:12:2e:80:9c:22:c4:47:78:db:
         a7:4f:57:f9:53:4c:ea:63:d5:6e:ce:56:ff:8a:88:eb:b1:64:
         66:20:e9:0b:51:cb:22:57:7b:db:f5:13:2d:8c:5c:78:35:86:
         41:9c:b1:39:f5:50:0c:88:cf:3a:f7:14:27:30:11:01:3a:b3:
         77:f2:9b:4e:4e:9a:f7:68:4a:9f:95:ab:4e:53:01:bd:77:49:
         e2:24:87:98:ed:a4:42:e9:6a:ed:35:33:9e:4d:ef:3d:d1:cf:
         86:98:55:94:f5:6a:c5:02:cd:e6:7b:8b:de:33:4b:a6:fa:59:
         4f:43:5f:08:20:2c:c6:f1:74:fc:36:1c:04:12:a2:69:de:40:
         f5:86:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:04 2026 by rpki-client