Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32332d3233203d3e2039333431.roa
File:                     3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          TvZUkrrCi0RH2KouESWHnYo6zKTg2B7NXoPHY3tduXU=
Subject key identifier:   67:2C:6B:87:12:A9:51:34:37:80:81:B8:3A:CE:C1:F3:B7:AF:96:B5
Certificate issuer:       /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7
Certificate serial:       7215696280FE61F12C87ECE9DA2CD0239548AC7A
Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:10:10 +0000
ROA not before:           Sun 03 May 2026 02:05:10 +0000
ROA not after:            Sun 02 May 2027 02:10:10 +0000
asID:                     9341
IP address blocks:        103.190.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl
                          rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 07:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:15:69:62:80:fe:61:f1:2c:87:ec:e9:da:2c:d0:23:95:48:ac:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7
        Validity
            Not Before: May  3 02:05:10 2026 GMT
            Not After : May  2 02:10:10 2027 GMT
        Subject: CN=672C6B8712A95134378081B83ACEC1F3B7AF96B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:b8:5f:6f:ed:75:d2:f0:19:0d:dc:6e:af:
                    37:e9:62:1e:ed:8b:3b:c7:05:0b:d5:96:bd:c0:a0:
                    74:8e:22:1c:5f:9d:a0:a4:3f:f5:af:a1:86:fb:2e:
                    ad:51:30:4c:4d:56:b5:9b:60:5a:3d:1a:8d:58:ca:
                    80:f7:b9:49:d5:2d:5a:67:ec:e3:c3:da:7d:56:dd:
                    d9:30:e4:83:53:8e:d8:0b:0f:71:7e:b0:cd:54:cc:
                    a4:99:31:89:ca:5f:3b:01:7e:52:60:68:80:de:3b:
                    82:d8:20:67:9a:39:fa:e9:52:94:a7:32:30:99:36:
                    2a:49:81:dc:28:41:7f:da:9f:e1:29:1f:32:50:36:
                    7d:07:2c:85:9d:f9:f6:78:74:11:30:38:a6:8b:7f:
                    48:fe:26:77:f5:c8:a9:2f:f9:56:87:70:17:39:19:
                    3f:d7:08:d2:5f:30:10:16:9c:b9:15:fe:b3:dc:26:
                    0b:92:c5:f9:0a:63:66:e5:3c:cd:10:d4:67:c3:87:
                    92:4f:c2:64:3c:df:34:a5:bc:96:ef:0b:0c:57:6e:
                    b6:20:54:e1:e2:75:84:b9:90:c2:79:f2:70:70:cd:
                    e0:ea:9f:b5:a2:36:f7:2c:9f:4c:a9:78:2f:84:1d:
                    04:36:de:68:eb:dd:17:ea:1f:4a:6e:84:bf:28:51:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2C:6B:87:12:A9:51:34:37:80:81:B8:3A:CE:C1:F3:B7:AF:96:B5
            X509v3 Authority Key Identifier:
                keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:02:56:7e:87:f8:cc:d7:3d:1d:97:dc:36:95:d8:d9:fc:76:
         69:0f:b3:f1:1a:34:c2:2a:70:04:20:90:6d:72:dc:6c:14:8a:
         43:93:0c:01:e6:4b:34:57:fc:af:ed:40:c9:18:70:47:bf:8f:
         21:2c:84:39:4c:45:e8:47:1e:84:df:74:ec:27:60:5a:00:d3:
         b0:f4:63:14:8c:30:3c:22:2c:54:05:86:85:3b:74:24:c7:2c:
         5f:ff:9a:22:a8:9a:fb:ff:c6:59:eb:5b:88:83:27:93:0f:05:
         0e:1b:f8:91:8b:5c:85:4f:d5:75:87:e2:d3:12:fe:1a:66:79:
         a3:4a:8e:fc:ac:78:cd:85:e0:f0:9c:33:6c:04:75:e9:c9:08:
         1c:81:3a:c8:ea:92:ac:6a:b9:9b:1b:7b:71:46:6b:f1:5c:4c:
         58:50:30:25:7f:b6:ae:43:03:40:81:38:4d:68:f1:b5:3c:f4:
         30:bd:8b:d4:2c:4a:3c:fe:91:ec:25:6a:61:f5:5b:84:00:b8:
         81:c6:1c:63:6a:b4:9b:47:69:69:bf:de:65:6a:8e:19:46:31:
         28:5f:59:de:fe:06:63:32:6e:69:d4:83:b3:6e:61:95:7b:54:
         97:58:2d:05:a8:d1:d5:58:49:c0:11:e4:ed:84:d3:85:85:f6:
         de:be:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:27:31 2026 by rpki-client