Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e392e302f32342d3234203d3e203435373232.roa
File:                     3130332e39342e392e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          OEfd+CS8IY4J+a4u9rVfClWlOVRIWkchPzHhfbtOYRo=
Subject key identifier:   AA:9A:56:7C:BD:7F:0E:9D:43:09:F2:19:DB:CA:BE:41:92:2C:D8:A7
Certificate issuer:       /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Certificate serial:       37369D2238A6E49EBD25C8CD27A31164988452
Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e392e302f32342d3234203d3e203435373232.roa
Signing time:             Sun 03 May 2026 03:13:55 +0000
ROA not before:           Sun 03 May 2026 03:08:55 +0000
ROA not after:            Sun 02 May 2027 03:13:55 +0000
asID:                     45722
IP address blocks:        103.94.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
                          rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:36:9d:22:38:a6:e4:9e:bd:25:c8:cd:27:a3:11:64:98:84:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
        Validity
            Not Before: May  3 03:08:55 2026 GMT
            Not After : May  2 03:13:55 2027 GMT
        Subject: CN=AA9A567CBD7F0E9D4309F219DBCABE41922CD8A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:30:89:aa:ae:11:ad:f5:cc:4d:14:ba:2e:
                    25:77:48:83:e2:d5:3e:c4:81:ef:fa:09:cf:f9:8d:
                    36:b7:57:39:83:3b:88:22:71:53:84:36:07:87:50:
                    50:cc:62:80:7c:3b:17:c3:60:4c:95:38:0b:07:31:
                    02:4e:9d:36:4d:d9:3c:78:9a:f4:45:86:a0:46:42:
                    48:85:fd:3a:de:15:c5:56:af:8f:66:8f:6e:aa:31:
                    67:4e:f7:1d:47:c9:4e:95:e1:65:bb:68:a9:eb:03:
                    e2:46:02:c8:5b:88:91:46:22:35:fc:46:87:da:f2:
                    60:03:35:35:7a:69:a3:5a:79:7a:d0:c7:cb:49:c7:
                    34:82:b2:20:04:5c:62:d5:c8:e9:c7:60:37:10:09:
                    a6:ed:34:eb:d2:06:88:0d:58:70:18:0e:a7:3e:88:
                    52:f2:ac:3e:57:c9:a2:1a:cd:53:00:af:c0:9e:74:
                    c2:c9:d8:05:28:d4:d9:be:cd:84:1e:15:c6:5a:c7:
                    5d:95:af:95:a1:de:3b:bd:da:c0:d2:ba:83:0a:43:
                    4a:8c:1b:66:42:82:06:5a:8a:e2:00:b3:58:2d:51:
                    b4:df:91:50:03:aa:81:ba:f8:5a:06:d7:c9:0c:28:
                    f1:38:02:0d:09:5e:b4:0b:c9:2d:3c:4c:1b:77:39:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9A:56:7C:BD:7F:0E:9D:43:09:F2:19:DB:CA:BE:41:92:2C:D8:A7
            X509v3 Authority Key Identifier:
                keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e392e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:36:40:d9:33:86:81:c4:a2:f2:8d:5f:83:7c:f5:d6:13:3b:
         b1:cf:2f:35:75:1b:95:af:55:fc:b9:83:fd:d9:9a:31:95:60:
         f8:67:4d:6e:d8:8d:e0:88:14:34:7c:3a:d4:77:e8:34:c4:dc:
         ca:57:d9:a0:32:98:5e:97:49:32:b2:74:f3:65:f0:a9:3e:c6:
         54:58:d8:06:b7:45:50:04:5f:dd:2b:23:0b:14:91:3d:ef:7b:
         e1:d9:a8:7f:cd:e5:97:70:38:f0:38:3f:a8:db:61:78:b0:1c:
         bf:cb:56:34:35:b3:6a:70:7d:c2:d7:16:55:6c:3d:78:c8:27:
         24:5d:09:52:9f:43:d1:6e:cd:5f:d4:68:56:51:52:76:7d:ed:
         2c:24:7d:09:e3:09:e3:58:ce:dd:9a:e3:d6:e2:03:df:3d:e0:
         96:4d:cd:a1:15:78:76:5e:85:82:0c:63:39:b2:11:f5:de:68:
         9e:51:e2:3d:04:8e:fe:37:b4:cd:3a:14:e2:d9:55:ff:a0:23:
         cc:65:de:bd:96:44:a0:56:f5:b6:80:78:db:ec:b9:38:b4:be:
         80:43:bc:a6:5a:29:61:7f:96:6b:b0:ac:2d:5d:4a:24:3a:df:
         ba:0e:a9:17:4a:91:15:a5:f6:72:88:17:53:8f:3a:4a:8c:7d:
         e4:1e:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:25 2026 by rpki-client