Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa
File:                     3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (raw, json)
Hash identifier:          KpYQSU+oal444FTCzAQqpO+RSPbHAZ+ta2JoMh51nbo=
Subject key identifier:   9D:6D:2A:6D:F6:0A:45:9A:4E:FB:45:BB:AB:E6:BA:6C:7F:26:12:0E
Certificate issuer:       /CN=4FE0444622A2C111B372D11A38DAFE7648673D36
Certificate serial:       543E091FECF810C86A51A0049E62235DD08269A3
Authority key identifier: 4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa
Signing time:             Sun 03 May 2026 03:12:56 +0000
ROA not before:           Sun 03 May 2026 03:07:56 +0000
ROA not after:            Sun 02 May 2027 03:12:56 +0000
asID:                     64024
IP address blocks:        103.210.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl
                          rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3e:09:1f:ec:f8:10:c8:6a:51:a0:04:9e:62:23:5d:d0:82:69:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE0444622A2C111B372D11A38DAFE7648673D36
        Validity
            Not Before: May  3 03:07:56 2026 GMT
            Not After : May  2 03:12:56 2027 GMT
        Subject: CN=9D6D2A6DF60A459A4EFB45BBABE6BA6C7F26120E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:09:2e:73:33:89:ab:4c:20:99:f6:c8:24:
                    c3:f0:e5:61:59:4e:37:67:6c:4d:c8:c0:2c:bd:55:
                    a7:c8:ab:a2:c2:94:cf:7e:7c:66:ca:e9:bd:d2:28:
                    5a:8e:dc:28:68:36:07:a4:74:2d:76:a3:d4:a2:3b:
                    d4:5c:37:67:72:1c:19:f5:9b:83:96:c5:1e:fe:bd:
                    f9:36:34:a3:ab:fa:13:a7:16:25:28:d1:66:25:95:
                    1e:12:c0:6d:88:db:3e:e9:cf:5f:14:6a:37:3f:2c:
                    fa:ca:2b:c4:d8:1e:3d:c9:00:37:cd:b9:c7:08:88:
                    67:9b:d2:d5:d9:c4:26:a7:a0:be:5e:98:87:5b:f4:
                    24:be:e2:7c:e0:64:ec:80:90:c0:ba:ee:02:b4:81:
                    74:8d:12:67:37:3f:89:19:2d:db:83:71:0b:d8:dd:
                    09:a0:d7:ce:0b:08:d2:ff:fb:23:2d:45:6a:9e:86:
                    71:4d:8b:ac:76:74:d1:83:21:41:be:a3:1b:78:b4:
                    81:65:cb:4a:cb:55:90:a3:77:8e:09:10:0e:0e:60:
                    e2:26:d6:97:cc:b8:8f:a3:a7:7d:e3:1c:41:de:9c:
                    40:f6:d3:2a:6e:3a:47:d0:d0:d2:33:3e:f5:06:05:
                    63:bf:69:8b:ac:e6:a9:73:52:2d:27:c8:9a:db:35:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6D:2A:6D:F6:0A:45:9A:4E:FB:45:BB:AB:E6:BA:6C:7F:26:12:0E
            X509v3 Authority Key Identifier:
                keyid:4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:de:51:90:8e:1e:f7:90:92:53:b9:e8:f0:d0:9c:dc:97:ed:
         0f:5f:4c:90:d8:44:84:f4:aa:ed:78:4c:09:66:fe:f0:b7:e8:
         2e:9e:1c:79:78:f7:a2:a8:ec:9b:83:3c:e1:5b:a9:d4:72:82:
         ab:73:e3:66:36:f7:76:95:73:a9:63:dd:4d:aa:de:9d:23:54:
         ed:61:f7:34:a7:82:e2:94:77:75:2e:41:30:4c:08:54:26:5c:
         28:6d:65:43:ce:a2:80:b8:4d:00:51:91:dd:d6:1d:f8:1f:17:
         ba:fa:e5:58:4b:d2:21:d3:31:a3:49:9b:b4:72:5e:b4:1f:3e:
         a2:0e:40:0a:d6:0c:ab:b1:19:3d:09:c0:dd:56:c8:3c:33:c4:
         86:11:12:3c:0c:0b:e6:be:07:3e:74:cd:9c:dc:bb:3d:9f:7c:
         02:2c:52:66:be:c0:a3:0d:88:cb:c6:7d:e6:aa:1b:9c:71:f8:
         be:90:b8:b6:e9:9a:e8:84:db:5d:db:25:9d:ed:87:05:ff:4c:
         11:32:c5:9a:b1:5b:46:05:bd:36:3e:4e:42:f1:58:08:fe:75:
         06:8b:1a:da:49:35:49:d9:29:a0:25:12:0a:07:63:fb:66:08:
         43:2d:e7:35:6c:64:60:a7:2d:ac:41:22:4e:35:f4:69:ad:09:
         81:e3:a5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:18 2026 by rpki-client