Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32342d3234203d3e203338313439.roa
File:                     3130332e332e3231322e302f32342d3234203d3e203338313439.roa (raw, json)
Hash identifier:          kD6oNGgLKqH7iqk+24uVETlxN5nYgl4ztpk81F99Ka8=
Subject key identifier:   1F:C8:B5:CA:44:8A:C4:9A:03:72:99:2B:8F:4A:D0:B2:9E:12:5F:09
Certificate issuer:       /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Certificate serial:       0E03F0DB281CE87FC8A6B6FB30DBCFBC5B565721
Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32342d3234203d3e203338313439.roa
Signing time:             Sun 03 May 2026 03:10:37 +0000
ROA not before:           Sun 03 May 2026 03:05:37 +0000
ROA not after:            Sun 02 May 2027 03:10:37 +0000
asID:                     38149
IP address blocks:        103.3.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
                          rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:03:f0:db:28:1c:e8:7f:c8:a6:b6:fb:30:db:cf:bc:5b:56:57:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
        Validity
            Not Before: May  3 03:05:37 2026 GMT
            Not After : May  2 03:10:37 2027 GMT
        Subject: CN=1FC8B5CA448AC49A0372992B8F4AD0B29E125F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:f9:61:f1:ef:ff:e7:ea:d6:95:b7:5f:3c:
                    fa:cf:65:8a:67:22:5c:62:1a:6c:fd:d2:b5:f0:af:
                    08:fb:00:97:65:87:9f:01:ea:23:80:a5:47:f8:92:
                    73:c2:b9:7c:74:87:31:6f:44:e6:8f:d6:9c:01:34:
                    53:28:80:df:5f:e6:af:4f:76:ec:58:86:6f:23:46:
                    2a:e0:28:85:c9:dd:1b:e6:fd:c6:d7:44:17:1f:88:
                    31:14:7e:db:13:b2:56:00:9a:51:07:2d:cb:b1:e6:
                    42:5b:61:9b:43:a1:40:b8:08:26:c7:a9:52:38:66:
                    77:4f:ff:b4:83:1b:24:97:9e:32:a6:4c:23:8c:4c:
                    87:48:bb:28:78:92:46:9b:81:1c:ac:60:11:ba:31:
                    ac:7f:f4:d7:9d:2c:c8:f8:2c:f9:a0:2d:7f:d5:c7:
                    43:bc:f3:9e:15:51:03:cc:01:8b:26:82:d2:4c:2b:
                    5c:aa:80:21:72:e2:43:84:ec:c2:ce:10:57:d9:6a:
                    bf:f6:5b:4a:6d:0c:d8:09:09:e8:8d:49:37:c4:3b:
                    51:70:59:f8:23:ec:2b:52:50:f8:df:ea:00:e1:dd:
                    68:1a:34:c9:d7:57:77:ec:6a:3d:a3:e6:f3:a7:e9:
                    21:36:72:81:0c:ea:14:38:cc:a9:50:23:ba:5c:1b:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C8:B5:CA:44:8A:C4:9A:03:72:99:2B:8F:4A:D0:B2:9E:12:5F:09
            X509v3 Authority Key Identifier:
                keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32342d3234203d3e203338313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:68:2b:3b:36:f9:4c:29:41:d6:c3:68:5c:55:98:8e:26:34:
         79:1d:e1:70:09:24:73:a6:6c:92:bf:b5:91:34:8c:25:97:26:
         f2:2a:55:ab:50:c1:83:f6:81:71:b2:d2:42:c6:ac:4b:2d:10:
         35:94:aa:dd:75:cd:09:fc:d5:5d:83:ce:a0:5a:c7:17:ff:ce:
         05:3c:7d:7f:00:bd:c0:32:a2:e9:79:19:1b:70:37:73:34:52:
         4b:92:aa:05:1c:7f:3f:27:3c:56:d2:44:5b:2b:70:db:ff:5c:
         4a:44:fb:b9:4e:0b:94:c9:48:7f:5e:30:70:5e:03:93:c2:d2:
         6c:6d:a2:47:6c:4e:62:12:5a:2d:a1:af:c2:4a:77:fc:d4:d1:
         6d:e8:cf:44:ea:2a:d5:26:41:d5:7e:bb:06:06:24:94:35:7d:
         92:4f:3a:9a:97:e3:cb:d2:f5:1d:c5:9b:0d:f5:51:03:19:09:
         6e:d7:e6:c9:0e:50:cc:52:cc:fc:04:9f:36:25:8c:b4:93:43:
         8b:39:b8:c1:7a:e9:59:38:cc:2d:9a:5d:57:3d:db:48:b9:6a:
         52:05:f6:6c:6d:84:f5:45:10:6c:ce:ae:b3:c2:62:58:51:60:
         b9:46:c8:59:15:9d:3c:9a:74:2c:4d:ed:ac:33:9f:db:00:4b:
         2e:5d:72:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:09 2026 by rpki-client