Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          VJ6XHTgP+LYfJ1kWwqo0lBWI8ymcoW5/lJHqRYH+GxY=
Subject key identifier:   F6:F8:FD:92:89:32:62:CD:88:2A:05:43:F7:8C:62:8E:E8:EA:83:D4
Certificate issuer:       /CN=40929298F65205185DF4DD6F4BE251452B43C09A
Certificate serial:       0B1F6519A7369186B63E328F957720DB42F81538
Authority key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:16:10 +0000
ROA not before:           Sun 03 May 2026 02:11:10 +0000
ROA not after:            Sun 02 May 2027 02:16:10 +0000
asID:                     9341
IP address blocks:        103.189.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl
                          rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1f:65:19:a7:36:91:86:b6:3e:32:8f:95:77:20:db:42:f8:15:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40929298F65205185DF4DD6F4BE251452B43C09A
        Validity
            Not Before: May  3 02:11:10 2026 GMT
            Not After : May  2 02:16:10 2027 GMT
        Subject: CN=F6F8FD92893262CD882A0543F78C628EE8EA83D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:7b:80:5d:fb:54:c9:31:c0:ae:28:1a:cc:
                    24:af:a8:31:7b:9d:80:d9:0c:9a:e6:8b:b6:95:85:
                    46:57:f3:a4:31:b8:1f:dd:84:d3:db:7b:9f:e0:95:
                    a8:f1:bf:66:d6:d7:f9:4b:6f:72:42:22:b7:b1:ad:
                    8f:18:44:a7:f1:9a:35:36:8e:04:f1:16:64:1a:ad:
                    c0:04:a1:70:fb:6c:cd:8d:cc:93:b9:f4:0d:51:01:
                    a7:70:bd:07:ce:cb:1a:3e:3a:97:c5:bc:79:43:e9:
                    53:34:e4:43:af:cd:b6:6a:3d:d3:31:aa:48:5d:64:
                    e4:03:26:2e:63:18:68:70:dd:89:bd:aa:02:f1:c3:
                    a1:75:d0:49:d3:04:fd:01:c4:a6:37:16:c2:19:6a:
                    d9:2c:10:86:70:6e:89:45:9f:e2:c4:dc:e1:14:15:
                    b3:cd:59:c5:7b:38:81:5d:9c:50:ba:68:c9:5d:e3:
                    2a:b0:38:69:5b:ac:e9:6d:6d:70:81:0e:4f:f8:78:
                    7f:67:43:26:00:40:2b:24:6b:f7:7f:5f:d2:c8:f0:
                    c2:c0:c0:0c:04:6c:c6:2a:0f:43:e2:c4:fe:e0:5d:
                    3b:97:93:25:11:d8:4c:79:47:64:2b:41:3a:00:c2:
                    d2:0e:8e:6e:7b:92:63:fe:71:cb:dd:0f:91:66:bf:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F8:FD:92:89:32:62:CD:88:2A:05:43:F7:8C:62:8E:E8:EA:83:D4
            X509v3 Authority Key Identifier:
                keyid:40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:5d:46:6a:59:02:4d:f3:c7:35:d4:38:3e:4b:e2:29:e1:
         81:27:d5:d7:61:20:63:95:86:d4:59:99:80:d9:79:d7:3d:c6:
         bf:c6:5e:b1:90:06:08:8c:5c:df:75:f4:4a:d5:cd:d0:d5:db:
         0b:00:ce:63:c5:24:7e:25:56:93:ce:b0:15:e3:94:ae:4e:3a:
         c2:6d:be:1c:ea:f6:48:84:6a:2b:58:d8:a3:d2:7d:24:44:16:
         bb:25:ea:85:11:74:74:8c:a2:78:66:75:c1:b9:16:9c:6a:ca:
         fe:10:b4:67:5c:21:6b:fd:9d:b0:aa:0b:9d:00:f6:97:e3:ce:
         9d:e6:67:1c:a7:71:f9:82:dd:7a:c1:0f:80:5b:1d:b2:6e:ef:
         84:4d:c1:7e:09:bd:a4:0c:16:5c:c3:b7:dd:93:db:56:6d:af:
         7b:bf:6d:48:c5:29:33:de:18:7f:fd:fd:92:0f:99:45:63:f8:
         ec:b4:af:32:a6:e4:ef:71:94:46:42:7f:c9:d4:20:f6:b0:d8:
         aa:09:7d:95:f1:21:db:56:9b:b0:49:72:42:9c:01:30:5e:ac:
         43:7d:53:ab:10:db:7a:51:f2:ec:f9:fb:43:df:d5:6c:23:3d:
         40:da:e1:9c:d1:c2:cd:2c:aa:13:04:3f:93:a6:ad:1f:ef:41:
         88:d3:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:31:47 2026 by rpki-client