Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa
File:                     3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (raw, json)
Hash identifier:          bL7nWexv3dr33uLwywkImAJrJWec+y7OgTN8pZ5ywaw=
Subject key identifier:   65:0B:45:ED:93:5F:65:A0:16:12:1C:A8:F9:B5:38:92:B3:F2:A5:57
Certificate issuer:       /CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
Certificate serial:       7363E4609378F84F535E1CE68F494C621BC906C0
Authority key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa
Signing time:             Sun 03 May 2026 03:14:21 +0000
ROA not before:           Sun 03 May 2026 03:09:21 +0000
ROA not after:            Sun 02 May 2027 03:14:21 +0000
asID:                     149917
IP address blocks:        103.191.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl
                          rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:63:e4:60:93:78:f8:4f:53:5e:1c:e6:8f:49:4c:62:1b:c9:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
        Validity
            Not Before: May  3 03:09:21 2026 GMT
            Not After : May  2 03:14:21 2027 GMT
        Subject: CN=650B45ED935F65A016121CA8F9B53892B3F2A557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:66:94:50:cc:5b:8b:88:49:f2:07:1b:c3:
                    46:24:5a:50:01:1c:d3:1f:77:a4:31:bc:18:6d:41:
                    b8:dd:d8:51:0a:4d:e5:a0:bb:1e:fc:02:33:f9:0b:
                    ec:2b:a1:48:f9:02:9e:a5:ab:4e:ff:48:56:7c:90:
                    e8:21:22:6c:4f:01:73:52:13:43:ca:1c:94:db:63:
                    4f:ca:46:1c:a4:8d:6c:e8:1b:e5:d7:63:32:28:03:
                    84:56:a1:99:13:56:ec:3b:98:1c:60:41:2c:37:9c:
                    47:6d:3a:f4:73:c2:cf:38:68:c1:69:d0:13:1e:37:
                    71:24:91:60:66:c5:ba:5b:66:ab:e8:8c:6c:1f:fd:
                    a5:8b:f0:b0:48:76:34:f6:24:cf:79:e1:8c:25:65:
                    bc:29:76:45:81:bf:e4:9f:57:cf:f5:85:b1:25:12:
                    1b:f0:c6:04:2f:e8:a6:9b:4d:3c:b4:7a:32:b5:a1:
                    67:ab:16:91:6c:25:7c:b2:31:54:d1:a9:4f:29:39:
                    1b:f9:56:26:88:36:2c:7d:42:b5:b4:66:6d:22:44:
                    1b:a9:21:bc:29:73:3c:3e:76:e7:dc:9f:56:12:0a:
                    b5:aa:28:77:79:99:67:43:f5:89:ec:e6:9f:ed:76:
                    0a:34:73:f8:04:43:dc:90:e5:e2:09:9c:a6:2b:dd:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0B:45:ED:93:5F:65:A0:16:12:1C:A8:F9:B5:38:92:B3:F2:A5:57
            X509v3 Authority Key Identifier:
                keyid:E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:0a:a9:78:40:b4:22:3c:db:be:af:30:3c:83:cf:6e:6f:
         94:0f:9d:ed:be:ec:de:31:c6:ee:9c:f8:85:93:9d:a4:56:f6:
         e2:4b:4a:46:83:a4:fa:9a:a7:e1:89:e1:fb:63:b5:76:db:4c:
         7d:89:17:f8:e9:05:3d:a8:fc:3e:a1:4f:a0:f8:9c:b9:91:eb:
         5f:07:70:82:50:43:b3:b2:1b:4d:e9:7f:34:21:30:2b:f8:b6:
         59:e4:b3:c2:e7:c2:cd:18:ae:bd:51:56:53:3e:8f:f6:7e:75:
         d1:59:14:65:15:0d:e5:74:78:22:d2:de:ac:26:a9:88:c5:0e:
         5a:88:ba:3a:50:4b:1b:e9:7d:d8:e4:0d:58:02:48:ce:dc:1e:
         78:b9:fe:69:7f:7d:b7:99:66:91:15:34:74:98:25:82:dd:96:
         46:a3:27:b5:a0:c5:78:db:1e:0a:0d:df:8a:10:87:7e:69:eb:
         33:6a:80:de:d5:51:5b:37:71:06:09:7a:5d:0d:98:42:3e:12:
         74:14:d9:ee:2b:67:71:27:c2:7d:86:4c:88:36:33:6d:16:a2:
         e9:5b:2e:fa:9c:be:dd:44:ff:30:b9:38:d8:89:7a:2a:37:80:
         d7:5c:d3:4c:3b:70:b7:08:a4:65:c5:23:f4:ee:27:a7:e1:9e:
         a7:02:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:41 2026 by rpki-client