Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/3130332e39312e34342e302f32322d3234203d3e20313336313035.roa
File:                     3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (raw, json)
Hash identifier:          3gsgdaMq9Jj1/PX8R0V/r0v44RenatE6Kq23gLzdu68=
Subject key identifier:   29:40:D8:FC:E9:CC:2A:B2:81:0C:5E:E0:81:B2:79:84:09:5A:07:0F
Certificate issuer:       /CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B
Certificate serial:       347739933E3ACD5E27BDA84B1F466360D8CB1073
Authority key identifier: 4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/3130332e39312e34342e302f32322d3234203d3e20313336313035.roa
Signing time:             Sun 03 May 2026 03:17:27 +0000
ROA not before:           Sun 03 May 2026 03:12:27 +0000
ROA not after:            Sun 02 May 2027 03:17:27 +0000
asID:                     136105
IP address blocks:        103.91.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl
                          rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:77:39:93:3e:3a:cd:5e:27:bd:a8:4b:1f:46:63:60:d8:cb:10:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B
        Validity
            Not Before: May  3 03:12:27 2026 GMT
            Not After : May  2 03:17:27 2027 GMT
        Subject: CN=2940D8FCE9CC2AB2810C5EE081B27984095A070F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:36:90:5a:67:09:61:64:55:e3:64:3d:27:
                    2a:b8:74:b6:29:f5:7b:4f:9b:00:84:e4:e8:f0:86:
                    bb:13:3a:f1:70:86:b3:f4:16:93:fd:22:bc:32:9f:
                    6d:d9:1b:53:7b:a7:1a:b8:58:d5:4f:c2:0f:d3:31:
                    2f:70:6d:b8:fc:8a:93:51:25:67:43:36:87:fe:45:
                    b4:b3:50:41:f5:27:0f:f5:81:d9:69:7d:a8:ae:ff:
                    5e:07:35:d4:da:ac:1a:74:44:68:86:f1:a5:23:44:
                    49:39:cb:3e:ee:73:c9:df:4e:c1:c4:0d:2a:0a:8f:
                    57:49:cf:68:2e:c3:67:af:b2:3a:66:c8:59:f8:2d:
                    38:75:b7:7b:2f:19:4d:8c:0a:b3:e8:ce:2d:6b:e3:
                    75:1e:4f:39:5b:00:cc:1a:4c:25:ca:97:dd:82:33:
                    be:13:92:43:6f:f2:4d:03:9d:68:30:d7:62:17:4e:
                    87:06:ab:b0:e5:e5:28:54:96:8f:3b:df:8e:51:f7:
                    bd:5d:e6:96:28:c8:9d:3a:9e:56:f6:12:9d:01:ea:
                    dc:f8:77:23:d9:22:e8:2a:c1:f2:1b:52:2d:71:66:
                    6e:f0:fe:32:29:10:53:b3:83:be:e0:f5:71:d9:f3:
                    43:58:77:1a:46:76:70:e4:3c:92:b0:e7:a6:36:90:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:40:D8:FC:E9:CC:2A:B2:81:0C:5E:E0:81:B2:79:84:09:5A:07:0F
            X509v3 Authority Key Identifier:
                keyid:4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/3130332e39312e34342e302f32322d3234203d3e20313336313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:73:2c:13:e0:f7:17:71:1e:bb:3b:27:8a:60:2e:44:78:dd:
         95:d7:17:e8:fc:c7:37:f1:3a:58:2a:18:6d:d8:d2:b2:6b:dd:
         0d:3d:73:c4:3f:47:de:44:58:a7:cd:16:f9:38:74:aa:d1:29:
         19:45:0d:dd:29:5c:68:1c:84:99:9a:23:26:16:2e:bf:e8:03:
         fc:f8:01:e3:3c:13:d4:f6:e0:f8:ce:95:0a:2a:9f:3b:ae:96:
         67:8b:d7:25:31:d8:8d:99:07:da:97:ae:75:d5:f5:91:e1:4f:
         98:d4:f6:a4:52:ae:dc:02:48:43:b5:50:e4:4c:cb:22:b9:35:
         fd:67:94:82:17:bc:c7:10:94:89:94:ae:5e:ed:fe:19:ec:89:
         46:52:0e:0e:66:af:35:8e:ab:33:28:a3:45:e2:c5:bc:d5:9d:
         d5:4b:24:ae:5b:40:68:68:e8:d8:aa:62:1c:15:f9:67:e3:a0:
         6b:65:22:b5:52:ec:40:e8:7e:a5:8b:ab:6c:7c:2c:09:13:95:
         ef:d8:29:ba:6c:81:57:ad:a9:29:70:88:8e:6b:7a:c0:9e:94:
         05:f5:83:23:ab:e5:ca:21:55:3c:06:7b:2e:96:cd:65:12:05:
         b4:74:c9:9e:e1:9f:05:e9:24:11:2d:1e:6e:09:d0:e3:1e:d0:
         e2:22:b8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:00:47 2026 by rpki-client