Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa
File:                     3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (raw, json)
Hash identifier:          guj2wYIy2OeBYkQ4ioJGOVZvTeDH758uPYwCniNJbeE=
Subject key identifier:   A8:4C:0B:DC:E1:79:71:9B:D7:AF:63:35:84:0D:F3:3F:ED:D5:8B:73
Certificate issuer:       /CN=12099D13750CE0704F5D87C255E4B056E703B28D
Certificate serial:       100DE91E14FEA7D91C73AA070D780779DA321FFE
Authority key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa
Signing time:             Sun 03 May 2026 03:18:22 +0000
ROA not before:           Sun 03 May 2026 03:13:22 +0000
ROA not after:            Sun 02 May 2027 03:18:22 +0000
asID:                     151537
IP address blocks:        103.247.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl
                          rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0d:e9:1e:14:fe:a7:d9:1c:73:aa:07:0d:78:07:79:da:32:1f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12099D13750CE0704F5D87C255E4B056E703B28D
        Validity
            Not Before: May  3 03:13:22 2026 GMT
            Not After : May  2 03:18:22 2027 GMT
        Subject: CN=A84C0BDCE179719BD7AF6335840DF33FEDD58B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:75:67:09:74:e0:3e:e3:43:19:77:ed:88:
                    46:2c:b6:95:51:74:cc:43:93:6d:03:2c:09:21:5f:
                    bc:86:97:8a:a2:fc:fe:55:ef:f4:bb:bf:a1:40:ef:
                    4f:d7:a1:2d:4c:5d:ae:f6:03:ed:f5:10:b1:29:55:
                    0d:d9:8f:65:63:ea:07:e8:2f:5a:b0:d6:18:61:72:
                    0b:42:85:ac:2c:48:3d:e7:8a:0c:0d:03:25:d6:98:
                    16:5d:9a:ae:30:ef:b2:12:f0:55:ef:f9:fd:da:cc:
                    9e:8f:9d:a3:fc:3b:e5:62:99:10:b4:92:80:b9:ca:
                    95:ea:21:f2:0e:79:c5:e0:15:3f:48:98:3b:29:54:
                    2c:f6:d5:71:7b:9e:a9:64:85:75:e3:7e:60:86:01:
                    ec:a2:dc:4c:c6:fe:0c:b7:12:9a:ef:17:fc:2e:c5:
                    35:11:f2:7d:40:1f:c0:16:4b:f6:a0:79:f6:b3:de:
                    0c:88:aa:93:e2:5c:0f:66:76:c2:71:fe:c7:87:97:
                    ff:49:3f:a7:9d:ac:f3:9f:15:01:07:72:58:fd:34:
                    53:46:2f:5d:cc:6a:13:96:82:f3:c9:52:68:08:1c:
                    94:2a:80:43:2e:cc:49:d6:8e:ad:a4:8d:bf:d3:75:
                    ce:52:f3:93:14:65:86:bc:cd:17:3d:22:6c:5e:ce:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4C:0B:DC:E1:79:71:9B:D7:AF:63:35:84:0D:F3:3F:ED:D5:8B:73
            X509v3 Authority Key Identifier:
                keyid:12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:72:52:f2:a4:4b:47:15:29:df:59:95:3d:f6:7b:3d:cb:
         50:31:78:0a:80:ef:12:f8:68:84:7b:f9:0f:aa:b6:58:61:6c:
         68:83:52:f0:9c:b6:bb:da:7c:a3:de:0f:ba:b9:3b:43:16:e0:
         04:41:83:cc:33:ca:b0:a5:1e:58:f1:ca:1f:66:4a:b1:2e:41:
         51:b1:7d:58:8e:03:48:c5:b2:52:22:bf:b1:5d:90:d0:9d:5e:
         10:f9:c9:61:a7:c9:6c:98:2d:c7:ec:80:5d:a2:59:b9:7f:26:
         5f:3d:15:ba:9b:3a:46:8e:5b:c2:90:da:8f:71:37:ae:61:fd:
         52:76:1a:3c:4b:b1:0d:22:ed:b9:5a:97:a7:fb:d0:8c:ff:bc:
         40:69:9e:3d:18:09:3e:6f:c8:cb:74:49:a3:28:d0:d3:8b:1c:
         29:5d:f7:c2:51:37:f6:e4:48:12:c5:bd:91:c4:1e:5c:26:85:
         7e:4b:40:38:9a:a0:a0:f0:66:b4:e2:e3:0e:83:3f:a4:0d:79:
         21:ca:f1:71:69:70:4b:0d:e8:25:20:7e:de:c1:80:5d:3b:c4:
         7f:dc:6c:49:a9:62:92:5f:78:78:6c:87:b2:e1:41:7c:d8:a9:
         a9:4c:0a:55:32:52:a2:94:e2:1b:f7:d5:5a:85:52:f8:41:6d:
         f0:8f:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:35 2026 by rpki-client