Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          42WVpxt8kPPzhN9E9uDvoLlTM1AZ+xhmNg0V+4liwbw=
Subject key identifier:   DD:33:F2:40:1A:01:56:7F:D3:86:6D:74:AD:A5:7C:D1:19:CC:23:4D
Certificate issuer:       /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7
Certificate serial:       6C492E4A1C68D73021B418DF31E28C3779312AF0
Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:10:10 +0000
ROA not before:           Sun 03 May 2026 02:05:10 +0000
ROA not after:            Sun 02 May 2027 02:10:10 +0000
asID:                     9341
IP address blocks:        103.190.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl
                          rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 07:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:49:2e:4a:1c:68:d7:30:21:b4:18:df:31:e2:8c:37:79:31:2a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7
        Validity
            Not Before: May  3 02:05:10 2026 GMT
            Not After : May  2 02:10:10 2027 GMT
        Subject: CN=DD33F2401A01567FD3866D74ADA57CD119CC234D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:4c:db:fb:4e:9f:18:f0:12:1e:6f:79:2e:
                    5c:1f:25:f2:c2:8b:0c:b4:1a:52:a9:b7:a7:80:2c:
                    21:88:a8:a3:a6:86:92:36:c9:e7:6b:5a:1d:40:48:
                    6c:64:4e:24:90:da:cf:2b:86:f2:15:cb:2f:ab:59:
                    ce:79:5e:5a:a3:6e:00:3d:8b:4c:6b:33:f1:b2:33:
                    c6:6d:d5:2e:b2:db:34:48:2d:27:3e:3e:8c:08:f7:
                    37:6c:85:51:36:23:a0:b7:96:ff:14:1a:8e:b1:9a:
                    fb:cf:88:47:39:9a:02:ed:42:51:62:36:04:c0:d0:
                    e8:db:40:2c:cf:fa:42:2a:d2:ca:a3:67:0d:8a:15:
                    b2:48:60:ac:c0:fd:f0:50:b9:c3:82:8f:9f:67:2b:
                    2f:54:f6:67:34:17:af:01:e3:e9:7e:7b:f1:d6:da:
                    f6:58:2a:18:2c:51:1b:98:21:37:8d:87:13:d8:a4:
                    00:90:ac:b1:ef:b9:6d:d7:70:43:00:75:56:52:e4:
                    9c:83:53:02:85:52:66:c1:6b:69:15:b2:d4:c7:2f:
                    7c:77:39:47:86:33:28:26:6d:cd:6a:1a:3e:41:f7:
                    eb:57:e1:c0:59:5e:b6:97:c7:8a:fe:c5:d5:11:57:
                    a7:4b:9a:b6:92:32:33:18:d8:ef:80:2e:7d:a7:1b:
                    60:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:33:F2:40:1A:01:56:7F:D3:86:6D:74:AD:A5:7C:D1:19:CC:23:4D
            X509v3 Authority Key Identifier:
                keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:29:a9:a7:e4:b7:84:9b:da:6c:a0:ae:05:99:b5:81:c7:a1:
         84:05:31:93:6e:95:07:95:a0:e0:b3:4e:3f:e2:46:bd:95:39:
         72:da:94:25:df:18:55:59:48:59:b3:b3:1d:3a:f3:9b:90:fe:
         07:1d:fe:aa:d9:b6:eb:f0:ac:f6:ec:01:f6:74:5d:08:b7:84:
         c9:1f:fa:d8:80:85:fe:36:32:d1:b8:fa:a9:0d:b3:ac:53:40:
         a1:90:91:e0:00:c1:4e:2b:d6:10:29:b4:60:53:16:7f:85:3a:
         a6:69:e5:72:c1:bd:71:ab:a0:25:3d:f4:2f:f5:26:8b:47:c6:
         66:76:46:b7:5c:31:bc:55:2b:15:cd:b5:2e:8c:a5:b3:47:f3:
         3b:94:9f:2f:8a:8a:8e:0a:83:ce:ca:95:8c:bc:a4:ea:62:f1:
         ec:fc:47:2e:cf:2c:b0:9f:fd:96:35:b3:87:40:2a:43:6b:b2:
         fb:c8:28:5d:42:29:39:79:54:13:bc:47:f6:55:67:f4:05:19:
         59:e1:bf:b9:41:a4:38:68:2b:4c:9e:5d:5b:c9:69:a4:ef:b0:
         25:59:2e:41:37:05:a7:db:9f:2c:1d:b3:67:e5:d5:57:49:13:
         d4:ec:20:3f:c1:bf:a8:39:62:a9:59:d0:81:24:fa:ea:db:09:
         9f:e5:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:28:57 2026 by rpki-client