Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231342e302f32342d3234203d3e20313431313436.roa
File:                     3130332e332e3231342e302f32342d3234203d3e20313431313436.roa (raw, json)
Hash identifier:          tuXz1WBHQLGtpa6jqBSO+zM+s1veNX1L+r9GJ7yl5zg=
Subject key identifier:   D7:0F:08:E6:4F:FB:08:EB:D7:D5:AA:62:9F:C9:EE:CF:EE:75:ED:F0
Certificate issuer:       /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Certificate serial:       2D84C4BC819F20141DA2A0952687907A94E78372
Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231342e302f32342d3234203d3e20313431313436.roa
Signing time:             Sun 03 May 2026 03:10:32 +0000
ROA not before:           Sun 03 May 2026 03:05:32 +0000
ROA not after:            Sun 02 May 2027 03:10:32 +0000
asID:                     141146
IP address blocks:        103.3.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
                          rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:84:c4:bc:81:9f:20:14:1d:a2:a0:95:26:87:90:7a:94:e7:83:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
        Validity
            Not Before: May  3 03:05:32 2026 GMT
            Not After : May  2 03:10:32 2027 GMT
        Subject: CN=D70F08E64FFB08EBD7D5AA629FC9EECFEE75EDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:a0:46:bc:49:9d:d3:6b:6e:59:3a:2b:f0:
                    a1:e5:05:15:ce:6d:c0:48:f1:7a:9d:60:25:2d:3d:
                    8f:96:88:c7:5a:ed:88:28:cf:e4:05:99:22:dc:73:
                    0e:ad:0b:94:7d:34:4c:a5:d6:38:d1:c2:bf:a7:a2:
                    f1:7a:10:83:ce:ba:20:45:6f:17:3a:52:b5:90:b2:
                    05:3c:af:06:bc:d9:34:9d:b9:0c:1c:10:30:ea:64:
                    69:95:9c:5a:88:03:3e:c9:9c:c3:a5:b4:a4:9e:01:
                    05:b2:74:25:fc:c9:a0:79:1a:65:af:97:d2:81:ea:
                    39:22:a9:4c:23:ed:d3:1f:75:bb:a0:b4:9a:67:c0:
                    f1:37:6a:4c:ef:fd:1e:ec:b0:f1:66:40:27:78:38:
                    da:66:ca:c4:31:8e:05:13:f1:d7:6d:b9:0e:0a:b2:
                    cb:54:6b:30:1b:4a:47:30:75:cf:8e:a0:d9:d1:43:
                    b1:69:2c:c4:87:c5:a1:06:73:72:3d:48:da:05:ce:
                    b8:83:d7:5d:d5:20:09:6d:5d:ea:be:be:e0:5e:b4:
                    e6:fb:60:00:66:28:52:6c:83:f5:7e:9f:02:b9:f1:
                    86:9d:cd:b4:b5:14:32:80:8f:ad:8b:a5:20:74:ca:
                    f8:7a:c4:10:5e:58:6f:8e:a3:9b:4f:32:39:a7:78:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0F:08:E6:4F:FB:08:EB:D7:D5:AA:62:9F:C9:EE:CF:EE:75:ED:F0
            X509v3 Authority Key Identifier:
                keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231342e302f32342d3234203d3e20313431313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:70:5e:18:ac:04:22:8a:46:84:f2:1f:d3:5e:90:ba:6c:a9:
         9b:42:c7:5d:24:9b:e6:b8:a5:40:87:60:6b:23:33:00:ea:cc:
         91:b8:20:a4:e6:cb:1c:9c:1e:43:de:91:3d:9f:bf:67:2b:a4:
         4c:f9:85:89:22:f7:13:76:65:9c:95:04:be:5a:1e:31:e0:91:
         29:23:05:9e:bf:dc:da:45:cc:50:31:d6:bb:20:df:40:0a:8f:
         9f:ab:00:73:1e:f0:39:ad:2f:d8:ce:bd:cc:8c:95:7c:5d:a8:
         a2:e3:ed:cc:30:f5:7f:2e:4f:cd:b5:54:e1:34:8a:5d:cf:f4:
         ed:f6:04:3c:b8:68:32:d8:be:4d:1f:4e:6c:f1:ff:e7:74:aa:
         42:cf:a3:d7:48:ee:9b:43:78:b5:87:fc:de:7f:33:6e:f4:45:
         80:96:69:42:73:f3:16:32:ec:31:c8:c2:66:85:71:2a:61:6d:
         9b:a9:85:1b:f3:63:fd:da:76:86:05:e7:56:e8:f6:43:4d:1d:
         45:54:12:63:71:b3:2c:69:e5:4e:d9:e0:5a:ae:74:44:69:e7:
         f6:bf:8b:82:1a:cc:c9:11:4b:93:80:4c:7f:b2:17:0c:95:d7:
         bb:4b:1a:93:85:c0:a2:f9:86:83:92:24:62:47:23:48:7e:4f:
         ee:62:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:02 2026 by rpki-client