Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa
File:                     3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (raw, json)
Hash identifier:          zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=
Subject key identifier:   33:3C:28:DE:E9:35:E3:EC:39:8D:1D:7D:A3:27:F6:C3:DA:5F:2A:69
Certificate issuer:       /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD
Certificate serial:       0FBED771420A9B071823B855FDB2CABDCFC1E41A
Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa
Signing time:             Sun 03 May 2026 02:17:57 +0000
ROA not before:           Sun 03 May 2026 02:12:57 +0000
ROA not after:            Sun 02 May 2027 02:17:57 +0000
asID:                     149891
IP address blocks:        103.190.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl
                          rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 18:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:be:d7:71:42:0a:9b:07:18:23:b8:55:fd:b2:ca:bd:cf:c1:e4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD
        Validity
            Not Before: May  3 02:12:57 2026 GMT
            Not After : May  2 02:17:57 2027 GMT
        Subject: CN=333C28DEE935E3EC398D1D7DA327F6C3DA5F2A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:a6:99:07:d9:a8:18:86:2c:d3:6a:52:3f:
                    b8:39:db:15:4a:fe:a4:a9:8a:9c:aa:9d:46:a3:eb:
                    49:2a:77:16:55:4c:03:47:c0:90:60:3e:d6:c6:a2:
                    6d:4a:38:1a:f5:88:a3:44:90:f2:72:40:b7:af:77:
                    6f:e9:3c:27:06:37:db:1f:d0:67:4f:0d:20:67:8e:
                    c1:55:11:fe:98:1e:84:de:e8:3e:7b:31:eb:39:84:
                    38:f9:42:75:f2:17:b8:10:9d:ee:f8:d9:24:82:fb:
                    6a:42:45:04:94:51:02:25:d1:7d:11:99:9f:9b:5e:
                    f9:bf:53:f0:6b:95:d9:69:20:d5:ca:0d:13:4b:b8:
                    db:e3:f0:2b:c8:4c:62:4f:07:69:27:05:d3:ad:d8:
                    a9:61:ee:04:9a:ee:e3:75:43:46:11:86:d8:d0:41:
                    89:13:7f:c7:59:ad:e2:ec:10:7d:27:a6:ad:1c:e4:
                    ff:3c:f4:57:0a:3d:57:38:34:f4:47:a7:3e:98:fd:
                    0e:6c:05:ce:08:22:74:74:5c:41:7a:d5:b1:8e:65:
                    8f:9c:9b:cf:5b:84:ac:3c:fa:f1:f3:48:44:77:c6:
                    f3:cc:b8:18:e3:06:9d:59:da:cc:ff:1d:a4:b5:d3:
                    95:ec:09:96:fa:40:90:32:35:c4:bf:97:27:ca:fa:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3C:28:DE:E9:35:E3:EC:39:8D:1D:7D:A3:27:F6:C3:DA:5F:2A:69
            X509v3 Authority Key Identifier:
                keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:6d:3a:73:2a:40:4a:55:08:65:01:c3:f2:8e:21:ec:d6:c4:
         fa:f1:d4:4a:be:68:71:04:5c:2c:5a:75:c2:fb:17:e0:f8:6d:
         bc:76:e8:d5:60:fe:79:bb:12:1a:52:21:77:72:99:02:16:9d:
         f5:d1:16:e0:08:89:db:92:e2:59:83:1a:0e:3e:1b:34:e3:bc:
         fc:f5:54:bc:9c:00:e1:3e:93:67:d3:e7:06:11:70:72:ab:b5:
         ac:d2:2d:35:53:1b:57:e5:99:63:e3:40:5a:fd:e1:8a:dc:25:
         30:f2:dc:78:aa:ab:21:49:7a:ae:6d:b9:53:55:c0:28:70:a0:
         07:17:d1:22:f2:79:7b:09:a1:04:41:35:df:fa:4d:d9:c9:b9:
         68:d7:36:9a:6c:77:4d:91:e0:8f:b7:71:c0:e3:15:a1:e3:46:
         35:a6:d2:54:62:da:e8:25:10:b1:2a:fd:70:8e:5f:2b:13:dc:
         fc:f1:b5:ca:c4:7a:bc:c0:9b:01:28:0d:32:00:da:63:ed:8f:
         01:17:06:b3:a7:83:2c:5d:ca:60:31:0e:45:4a:48:83:64:74:
         26:f4:70:83:dd:dd:de:63:71:e0:28:1b:69:9f:a6:a5:51:98:
         e3:4a:47:c8:a2:00:c5:f0:80:6d:08:9f:2d:83:83:5b:55:b5:
         76:3a:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 10:32:41 2026 by rpki-client