Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/3130332e3230372e3233382e302f32342d3234203d3e20313334363434.roa
File:                     3130332e3230372e3233382e302f32342d3234203d3e20313334363434.roa (raw, json)
Hash identifier:          JTxpplIuLbvb/wIkHn+HBBE3fJ4/SdghGzTObYJPQAE=
Subject key identifier:   B4:84:2F:2D:F6:CC:7D:0C:48:44:44:91:95:B4:5D:70:4E:18:2B:3C
Certificate issuer:       /CN=F92C9917A30302FCE264D46D8FE65A1CEA194138
Certificate serial:       4441D7711A5EA0B08CAAFE40D38359023717B7B0
Authority key identifier: F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/3130332e3230372e3233382e302f32342d3234203d3e20313334363434.roa
Signing time:             Thu 08 Oct 2026 18:27:33 +0000
ROA not before:           Thu 08 Oct 2026 18:22:33 +0000
ROA not after:            Thu 07 Oct 2027 18:27:33 +0000
asID:                     134644
IP address blocks:        103.207.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl
                          rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 23:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:41:d7:71:1a:5e:a0:b0:8c:aa:fe:40:d3:83:59:02:37:17:b7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F92C9917A30302FCE264D46D8FE65A1CEA194138
        Validity
            Not Before: Oct  8 18:22:33 2026 GMT
            Not After : Oct  7 18:27:33 2027 GMT
        Subject: CN=B4842F2DF6CC7D0C4844449195B45D704E182B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:a1:82:52:3f:6f:c2:a9:41:52:5a:8e:75:
                    0e:d4:08:92:c9:73:67:22:4d:cf:d4:82:17:83:54:
                    df:ab:cd:09:7f:9e:af:f0:36:11:dc:07:42:e5:80:
                    ad:66:23:1c:48:a4:96:7c:67:4d:26:5c:4e:b4:20:
                    c7:b0:87:9b:f8:5a:bc:6c:9b:4b:86:7d:bb:eb:f8:
                    ad:11:4c:ab:69:10:37:3e:e9:78:30:95:0b:47:ad:
                    31:51:5e:b7:c1:73:1d:cc:cd:0a:a1:96:16:ee:ff:
                    66:67:ab:46:53:c3:44:73:96:3e:ed:7f:63:87:58:
                    fc:95:f3:bb:14:77:1f:13:a1:32:b4:09:a2:f4:39:
                    3f:86:af:60:be:f5:cc:98:6c:5e:31:70:01:94:a8:
                    61:79:e8:33:ff:f1:08:a2:ed:3d:00:41:5a:43:fb:
                    05:8f:55:a7:cd:cf:60:70:e4:ab:89:de:b3:2d:fd:
                    da:bc:ef:d4:b0:0f:dd:e8:62:15:e7:4a:33:1b:ac:
                    1c:3c:fb:37:2d:af:d4:63:b7:bc:f6:cd:56:cb:f7:
                    0c:a6:2d:46:32:a6:32:66:24:18:cd:60:ea:f9:51:
                    86:05:f9:e7:bc:9b:4d:1c:a0:19:08:0d:56:65:20:
                    de:7c:96:52:f8:4c:b1:a1:40:0c:1f:26:0a:16:e4:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:84:2F:2D:F6:CC:7D:0C:48:44:44:91:95:B4:5D:70:4E:18:2B:3C
            X509v3 Authority Key Identifier:
                keyid:F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/3130332e3230372e3233382e302f32342d3234203d3e20313334363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:5e:68:e4:02:0d:b4:22:d6:85:a0:fe:29:68:e8:5a:72:
         3a:0b:79:0a:a9:65:e5:a2:9a:7b:53:fd:36:d6:bc:df:16:13:
         c0:86:7b:64:10:93:6a:05:57:bf:9c:30:70:c8:0f:aa:d6:27:
         e6:18:a3:21:b8:28:e5:75:79:77:8a:02:b6:9c:d8:c1:e8:2a:
         e0:80:bf:12:43:c1:ea:d2:81:59:a2:59:74:75:55:d0:72:b9:
         9e:28:44:26:d7:22:43:fa:eb:c1:77:52:63:c6:38:a4:de:96:
         a5:e4:7e:df:9f:c7:69:0f:60:29:64:3d:11:70:79:6a:d2:67:
         6b:a8:1f:af:a2:76:19:2a:0b:df:c9:61:ab:5f:9f:2b:f5:58:
         fd:ef:54:3f:5a:07:22:2c:da:63:63:17:09:34:97:9b:7f:83:
         fe:54:13:0e:0c:1c:b9:ea:b2:15:27:65:0f:e2:02:ef:8e:8c:
         9f:4f:5b:e1:e2:d6:fd:ab:c0:f1:9e:0f:a0:67:d0:f0:15:a4:
         3f:1c:f1:63:27:0c:ea:6c:0f:57:bb:41:78:dc:5e:f3:08:36:
         3c:3c:ae:07:e2:61:92:cb:88:cb:4e:66:8f:0e:3b:f5:72:b9:
         d3:2e:59:ef:b7:85:0e:e7:80:06:f4:ec:91:d9:c1:b5:c8:01:
         95:82:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 16:39:51 2026 by rpki-client