Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231332e302f32342d3234203d3e203338313439.roa
File:                     3130332e332e3231332e302f32342d3234203d3e203338313439.roa (raw, json)
Hash identifier:          4HkIjmLq+65ZiJXFH/gsCmpX9OJtzZO2CDLQtviREzo=
Subject key identifier:   FA:B9:DA:C6:90:D4:1C:BA:12:55:2F:33:E2:52:57:8B:C9:0C:37:B6
Certificate issuer:       /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Certificate serial:       4EEFB5105D73E374AF315923E55CC0501FEC78FE
Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231332e302f32342d3234203d3e203338313439.roa
Signing time:             Sun 03 May 2026 03:10:31 +0000
ROA not before:           Sun 03 May 2026 03:05:31 +0000
ROA not after:            Sun 02 May 2027 03:10:31 +0000
asID:                     38149
IP address blocks:        103.3.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
                          rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ef:b5:10:5d:73:e3:74:af:31:59:23:e5:5c:c0:50:1f:ec:78:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
        Validity
            Not Before: May  3 03:05:31 2026 GMT
            Not After : May  2 03:10:31 2027 GMT
        Subject: CN=FAB9DAC690D41CBA12552F33E252578BC90C37B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:e3:28:89:ab:32:75:e9:dd:73:14:60:7d:
                    9f:61:9a:92:39:f5:32:f4:86:42:8f:b2:82:6a:39:
                    b6:69:47:5b:bd:d9:e4:92:fe:44:ec:6f:e3:e5:be:
                    1f:f8:4e:47:ed:86:d7:13:79:f3:88:d4:da:09:fa:
                    6c:22:d0:46:f3:dd:83:bd:d6:59:ce:0b:d0:eb:ae:
                    08:a9:dc:76:a3:f0:5a:9b:13:36:97:27:be:c0:05:
                    d6:ed:0f:e9:69:ab:e2:dd:bd:d1:d6:52:9a:46:35:
                    9b:1c:fa:8f:6d:42:a3:72:12:72:96:51:f9:47:ed:
                    01:9b:c5:71:b8:d8:f9:ce:67:ef:2d:31:f3:60:c9:
                    78:a5:42:e5:21:b7:c4:c9:da:65:c8:7d:3d:f8:05:
                    3c:42:92:59:e5:62:a4:e9:05:15:ca:e5:e2:57:6a:
                    4b:cb:99:d9:f1:1b:28:30:f8:52:6c:1c:9d:70:52:
                    c3:36:47:25:37:6d:45:9d:8a:17:a1:8b:c0:e0:0c:
                    7d:32:93:4b:46:55:98:c9:bc:fd:da:6c:c9:29:1a:
                    30:9c:45:1f:3e:84:26:a9:bb:b5:40:d7:04:f7:d1:
                    0a:48:7b:db:e0:ed:bf:4c:a5:06:f5:fa:2f:51:b7:
                    af:13:57:af:09:1c:e8:42:b1:0b:87:93:56:32:7a:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B9:DA:C6:90:D4:1C:BA:12:55:2F:33:E2:52:57:8B:C9:0C:37:B6
            X509v3 Authority Key Identifier:
                keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231332e302f32342d3234203d3e203338313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:7a:2b:ae:8d:1b:f8:e0:43:61:dc:c7:d0:67:1b:2c:76:4c:
         37:74:aa:3c:d5:de:86:90:bc:71:b0:d7:98:bd:73:d5:b0:1b:
         4d:27:46:a2:b2:dc:4a:d2:f2:25:2c:d1:97:d6:e6:f5:24:d9:
         45:aa:01:85:dd:c3:1f:c1:da:32:ab:cb:a4:72:48:88:62:93:
         43:7e:dc:0f:2c:e4:fd:3d:62:23:cd:67:03:f8:16:db:3f:42:
         03:4c:49:9b:4e:70:44:57:83:fc:43:8a:d6:c9:46:7e:50:37:
         0b:f5:14:3f:ea:58:6f:f3:fc:0b:31:24:74:bc:e1:52:56:b4:
         22:9f:15:8a:94:a1:bf:57:fa:c3:6c:fa:e7:09:21:29:2d:cf:
         dc:89:b4:1f:93:ff:a8:4b:79:b6:34:95:a5:3e:aa:45:0f:68:
         87:43:82:9c:40:d1:57:d9:84:30:85:b0:41:6f:5f:09:c2:ac:
         21:bc:91:df:a8:ad:01:af:d9:79:e0:20:16:c9:73:da:d0:48:
         7a:b4:e6:9c:d8:74:10:d5:b5:b0:80:2b:64:b5:33:9e:99:47:
         89:83:b8:a0:5b:5e:db:54:48:04:e5:6c:4c:54:08:c8:61:29:
         df:ac:86:85:2d:b0:aa:0d:92:92:85:bf:74:c4:83:5f:9b:17:
         f7:49:9d:ec
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUTu+1EF1z43SvMVkj5VzAUB/seP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3
NEY0QUFDNDAeFw0yNjA1MDMwMzA1MzFaFw0yNzA1MDIwMzEwMzFaMDMxMTAvBgNV
BAMTKEZBQjlEQUM2OTBENDFDQkExMjU1MkYzM0UyNTI1NzhCQzkwQzM3QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9eMoiasydendcxRgfZ9hmpI5
9TL0hkKPsoJqObZpR1u92eSS/kTsb+Plvh/4TkfthtcTefOI1NoJ+mwi0Ebz3YO9
1lnOC9Drrgip3Haj8FqbEzaXJ77ABdbtD+lpq+LdvdHWUppGNZsc+o9tQqNyEnKW
UflH7QGbxXG42PnOZ+8tMfNgyXilQuUht8TJ2mXIfT34BTxCklnlYqTpBRXK5eJX
akvLmdnxGygw+FJsHJ1wUsM2RyU3bUWdihehi8DgDH0yk0tGVZjJvP3abMkpGjCc
RR8+hCapu7VA1wT30QpIe9vg7b9MpQb1+i9Rt68TV68JHOhCsQuHk1YyenYRAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU+rnaxpDUHLoSVS8z4lJXi8kMN7YwHwYDVR0j
BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4
MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB
QUM0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h
YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzAzMzJlMzMyZTMyMzEzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnA9UwDQYJKoZIhvcN
AQELBQADggEBAJN6K66NG/jgQ2Hcx9BnGyx2TDd0qjzV3oaQvHGw15i9c9WwG00n
RqKy3ErS8iUs0ZfW5vUk2UWqAYXdwx/B2jKry6RySIhik0N+3A8s5P09YiPNZwP4
Fts/QgNMSZtOcERXg/xDitbJRn5QNwv1FD/qWG/z/AsxJHS84VJWtCKfFYqUob9X
+sNs+ucJISktz9yJtB+T/6hLebY0laU+qkUPaIdDgpxA0VfZhDCFsEFvXwnCrCG8
kd+orQGv2XngIBbJc9rQSHq05pzYdBDVtbCAK2S1M56ZR4mDuKBbXttUSATlbExU
CMhhKd+shoUtsKoNkpKFv3TEg1+bF/dJnew=
-----END CERTIFICATE-----
Generated at Wed May 13 03:59:57 2026 by rpki-client