Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          kbVyFpYowQRxd/2pyb5bI0NF4XwTRcPV5F3s1QVQKnw=
Subject key identifier:   39:75:41:3C:E5:B6:DB:6B:99:78:50:DE:A1:5B:0F:6D:14:F2:3D:E5
Certificate issuer:       /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7
Certificate serial:       50410B8F7BA266D696BC1771B65B27A6C6B83507
Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:10:10 +0000
ROA not before:           Sun 03 May 2026 02:05:10 +0000
ROA not after:            Sun 02 May 2027 02:10:10 +0000
asID:                     9341
IP address blocks:        103.190.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl
                          rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 07:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:41:0b:8f:7b:a2:66:d6:96:bc:17:71:b6:5b:27:a6:c6:b8:35:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7
        Validity
            Not Before: May  3 02:05:10 2026 GMT
            Not After : May  2 02:10:10 2027 GMT
        Subject: CN=3975413CE5B6DB6B997850DEA15B0F6D14F23DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:22:79:bb:ea:76:8f:fd:a4:b8:91:a9:7c:
                    f9:11:25:ce:8e:32:c6:9b:c5:69:1f:6a:68:46:87:
                    b1:bf:d0:dc:70:7b:c7:02:ae:17:37:68:e9:0b:e6:
                    a1:3a:87:d5:27:28:dd:1c:b4:f2:05:76:15:32:ea:
                    8a:f8:94:1d:12:f3:09:30:80:4d:c3:47:96:61:3d:
                    ee:b2:c4:e4:2c:d6:77:c0:81:b4:46:4f:73:98:46:
                    28:b8:67:11:d9:d6:0d:50:a7:14:26:4e:ef:2c:d0:
                    a0:00:1b:22:9d:03:ac:a4:a3:b6:43:5b:72:6e:dd:
                    e9:5b:b8:3b:8c:ec:e9:32:77:7d:b7:78:e9:85:60:
                    da:97:7b:ea:65:78:d5:bb:cd:6f:ad:14:ed:eb:53:
                    59:5e:7d:25:b6:02:2d:04:b2:ef:ce:1d:70:d6:67:
                    c1:b9:76:e5:16:e8:61:c9:ba:db:de:99:ba:71:d5:
                    93:83:3c:f1:38:dc:fd:69:5f:30:c2:b3:5e:8a:47:
                    ce:9a:8c:30:4e:31:3e:1b:6a:a4:83:16:a5:7b:76:
                    94:31:e3:92:64:af:81:6f:58:ff:7b:dc:77:b7:10:
                    bc:31:f3:ac:4d:e0:5c:6c:dc:a9:29:22:ee:93:cc:
                    a2:3f:0d:9b:b8:48:46:69:53:3c:20:e6:24:c4:2f:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:75:41:3C:E5:B6:DB:6B:99:78:50:DE:A1:5B:0F:6D:14:F2:3D:E5
            X509v3 Authority Key Identifier:
                keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:4d:60:2a:d6:70:0f:3f:05:b1:05:a7:2f:7b:8b:15:ee:9f:
         9e:01:fa:02:d4:7f:27:a1:f5:7c:c6:11:95:05:31:a4:f8:a5:
         51:bb:70:ad:05:12:80:95:d2:30:fa:b5:62:f9:81:f9:1d:b6:
         66:4c:3f:e9:79:8b:12:9c:ac:92:fe:19:bc:21:e4:f8:03:07:
         81:a5:25:bb:9d:9c:aa:86:c2:8b:c7:8c:7c:1f:81:7d:07:08:
         40:4b:db:90:63:29:ec:75:d6:f3:6c:0c:41:e8:65:be:f9:a6:
         8b:b6:5d:11:90:03:31:be:68:08:6a:47:87:48:2f:4d:cd:49:
         bc:06:f1:36:6e:84:3a:42:66:c6:d1:11:bd:dd:01:e6:e8:65:
         c4:fd:40:ca:3e:56:6f:9e:87:11:a6:2a:97:70:69:29:8a:c5:
         4b:e1:8a:af:fb:57:06:f5:89:ab:d0:51:dd:16:7b:c0:7f:5d:
         92:e5:95:fa:f7:37:5d:15:a5:c8:e5:bf:c9:70:cc:35:25:dc:
         c5:48:41:4b:05:bd:48:db:f2:a0:0c:6c:8a:41:31:65:39:b0:
         99:6f:b7:6a:a9:25:52:51:e9:75:b3:22:c7:f2:14:cf:78:cd:
         da:2c:2e:3a:05:0e:61:60:e4:00:13:01:77:17:ef:bf:76:8c:
         45:9f:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:28:41 2026 by rpki-client