Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa
File:                     3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (raw, json)
Hash identifier:          lAAUV9z8f3t9czOX/VqnympJr8MrNtNyhxmHLT5vnzY=
Subject key identifier:   9C:CC:C8:51:B1:04:6B:38:66:AA:EE:59:AE:DD:92:72:91:E0:1D:84
Certificate issuer:       /CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
Certificate serial:       4220BD981973FF46A979C303BCEDE5B947BCE2D7
Authority key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa
Signing time:             Sun 03 May 2026 03:14:22 +0000
ROA not before:           Sun 03 May 2026 03:09:22 +0000
ROA not after:            Sun 02 May 2027 03:14:22 +0000
asID:                     149917
IP address blocks:        103.191.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl
                          rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:20:bd:98:19:73:ff:46:a9:79:c3:03:bc:ed:e5:b9:47:bc:e2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
        Validity
            Not Before: May  3 03:09:22 2026 GMT
            Not After : May  2 03:14:22 2027 GMT
        Subject: CN=9CCCC851B1046B3866AAEE59AEDD927291E01D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:b4:9c:3d:ba:fc:d9:f4:7a:31:24:5e:fc:
                    a6:e4:5d:44:cd:f2:f0:3f:2d:bd:16:ed:97:91:e3:
                    5d:ca:8f:19:8b:95:29:0b:22:6f:69:48:87:dd:92:
                    e8:6c:92:13:56:56:de:c1:36:34:bb:16:9e:9d:d2:
                    80:8b:18:68:02:d3:27:66:fc:65:7b:6e:2b:3c:a5:
                    7a:0f:27:63:d2:70:13:3c:de:42:1d:8f:63:43:15:
                    a5:bc:00:ae:e1:24:bf:dd:89:4b:7b:86:a5:78:36:
                    01:99:39:d9:85:ec:bc:ee:a5:f2:8f:d8:60:8f:30:
                    30:f0:26:55:8a:8d:48:c1:73:48:a4:f6:d5:e1:6c:
                    97:e0:7b:3d:46:f7:17:2d:1e:56:ed:3e:63:f0:79:
                    a7:7c:c3:e4:6c:98:52:46:10:a0:80:9c:19:c8:87:
                    0b:cb:70:3a:f3:ff:92:cb:ae:70:fb:d8:84:88:2f:
                    db:d3:c4:50:dc:79:54:2c:12:c1:ca:6b:3e:d1:38:
                    ea:6d:df:83:09:a2:5a:1d:b1:2d:1d:de:ef:2b:1d:
                    5c:42:a5:05:6a:d9:bb:a2:3a:f6:e8:22:f1:a1:86:
                    7d:e4:c0:4c:2e:98:89:34:b5:ed:30:f5:11:fb:0d:
                    dd:36:bd:8f:18:60:cd:5b:91:45:c8:6d:ff:0b:ae:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CC:C8:51:B1:04:6B:38:66:AA:EE:59:AE:DD:92:72:91:E0:1D:84
            X509v3 Authority Key Identifier:
                keyid:E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:53:2c:c2:8e:c4:3a:f9:d5:86:c2:9f:a5:bb:ed:fd:c5:e3:
         58:c3:11:17:89:31:0e:36:c6:c7:14:88:12:11:49:bb:1d:61:
         55:06:fa:85:59:5f:f6:8b:89:0d:29:f6:4c:b8:ef:53:93:a1:
         57:05:75:bc:71:f1:57:ab:28:8f:4a:d7:a0:85:24:12:b3:d7:
         ff:a7:61:9b:65:c4:4e:f8:6c:ee:0e:15:e9:37:d7:b7:e5:26:
         ef:d9:72:6d:d8:8a:b6:00:ad:8c:f4:6a:11:8c:f4:b2:c1:c0:
         ae:88:9b:61:fe:f9:f3:fa:a1:f4:b1:4e:8b:22:39:ae:70:e1:
         ab:08:5b:22:7a:2f:c6:c2:0e:51:95:00:de:6f:7a:b4:93:3d:
         61:af:43:48:89:57:ff:ce:bc:2d:4b:2a:d3:17:80:77:c0:29:
         46:8a:1b:2c:f8:93:c6:cf:fd:46:66:44:91:65:ad:41:9b:df:
         34:a3:33:0e:3f:da:f9:0d:d3:e4:0e:3e:90:c7:0e:f5:28:46:
         fb:7e:0b:8f:dc:1c:5a:b5:f7:c9:23:87:30:13:a5:83:2d:07:
         2f:c1:03:a3:6a:08:da:c4:e9:68:a4:7a:b4:5b:9c:51:f6:7b:
         da:5c:21:25:b8:56:25:33:df:7a:31:31:f8:59:6d:cb:48:b1:
         bc:f2:32:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:46 2026 by rpki-client