Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e203338313635.roa
File:                     3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          glySjVWaeYKKJGdVLX98kL01SxrrhC2o5DvZ/OFZzes=
Subject key identifier:   88:B1:AB:2A:FB:69:89:1A:53:06:D5:AE:B6:44:F7:33:14:B6:B4:C1
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       65FDA19B02B4A787F7521D14A4CDB570EC8FACD2
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:12 +0000
ROA not before:           Sun 03 May 2026 03:13:12 +0000
ROA not after:            Sun 02 May 2027 03:18:12 +0000
asID:                     38165
IP address blocks:        103.247.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fd:a1:9b:02:b4:a7:87:f7:52:1d:14:a4:cd:b5:70:ec:8f:ac:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:12 2026 GMT
            Not After : May  2 03:18:12 2027 GMT
        Subject: CN=88B1AB2AFB69891A5306D5AEB644F73314B6B4C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:85:d9:0d:29:37:3a:a0:c8:bf:6d:ef:47:
                    f5:6f:10:89:c7:e2:33:08:ba:d2:89:bc:f7:49:52:
                    5b:f6:07:49:13:6a:03:3a:82:72:66:0e:58:54:12:
                    68:2e:fd:05:72:c4:b6:15:df:39:ad:5d:52:36:b7:
                    b4:a6:b9:d9:4f:33:de:f2:e4:dc:90:ab:38:05:a5:
                    4f:f1:3b:37:6b:e7:07:e4:8a:af:b1:ad:35:80:32:
                    21:c5:52:16:d7:a4:ff:95:ad:8c:89:b5:d4:26:f0:
                    75:9f:df:99:2c:19:7d:9b:6a:83:00:37:17:b4:ec:
                    33:04:d7:89:20:97:5e:e7:11:8a:cc:f9:db:fd:b7:
                    52:00:4c:89:d2:1a:5b:de:a1:96:b4:f5:40:e6:3a:
                    c5:60:1c:05:58:c0:2c:5b:4d:b9:35:eb:65:94:ab:
                    ab:f1:2b:b1:cb:5c:4d:fb:e8:62:d1:04:4c:c2:a1:
                    82:b8:4f:c7:fb:b9:41:81:6f:df:6f:f6:b8:ec:ac:
                    53:eb:98:e0:dd:0e:ca:48:3a:d8:b5:9a:c4:ec:69:
                    90:8c:c3:37:34:f6:fd:e5:b3:a1:8f:70:4a:2e:45:
                    1b:45:e7:7d:46:19:2b:00:2a:2e:09:f5:98:06:ea:
                    5d:1c:fe:5f:34:d2:16:d8:fe:b5:a5:77:5a:62:7c:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B1:AB:2A:FB:69:89:1A:53:06:D5:AE:B6:44:F7:33:14:B6:B4:C1
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ed:2e:cb:2b:52:26:89:ea:6b:ce:7e:42:80:2a:bc:fd:f4:
         d1:d7:51:4e:8b:36:48:77:24:5f:0d:34:21:39:5d:67:74:20:
         13:5f:a1:1e:3a:11:13:98:8b:56:28:5c:f0:cb:e4:30:4a:2f:
         e6:db:06:73:39:32:cd:e6:fe:6b:59:ad:50:7a:7a:25:67:0c:
         2f:dd:6e:07:d3:81:c9:8a:a5:ab:10:46:3a:99:a4:50:54:d6:
         b4:39:15:e5:d5:84:d6:1f:e3:d8:e8:21:39:2f:45:ac:06:4b:
         92:59:06:07:98:f8:42:cc:4f:66:a8:cf:27:4f:bc:46:c1:32:
         10:dd:06:45:8c:6b:e5:fd:94:7e:19:8c:98:c4:98:37:b1:fc:
         fb:b5:30:3e:06:35:fe:aa:93:3e:c4:2d:86:69:64:0d:44:a4:
         cf:e2:3d:27:e6:fc:19:d2:24:7c:7f:78:eb:4c:25:34:72:c9:
         20:d9:36:82:ee:19:99:5d:32:24:08:c8:2d:c1:8e:2b:ad:2c:
         1f:62:d5:d8:85:c1:a7:9c:fd:86:41:47:db:a8:b2:e1:67:a4:
         d9:c1:e2:ab:15:93:e1:1c:e2:97:6d:1b:6c:51:b4:bb:07:ef:
         e3:d4:5c:54:5b:3c:bc:b6:44:60:20:8d:45:19:b7:d5:84:74:
         b4:7d:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:07 2026 by rpki-client