Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203438343635.roa
File:                     3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=
Subject key identifier:   AD:8B:C1:F4:0E:AB:33:86:CC:E2:B9:15:41:0C:F6:50:21:B8:3E:1C
Certificate issuer:       /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Certificate serial:       3FDC15A96106EF1089BCBFBFDD2EE887F4E444F7
Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 03 May 2026 02:42:20 +0000
ROA not before:           Sun 03 May 2026 02:37:20 +0000
ROA not after:            Sun 02 May 2027 02:42:20 +0000
asID:                     48465
IP address blocks:        103.13.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
                          rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dc:15:a9:61:06:ef:10:89:bc:bf:bf:dd:2e:e8:87:f4:e4:44:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
        Validity
            Not Before: May  3 02:37:20 2026 GMT
            Not After : May  2 02:42:20 2027 GMT
        Subject: CN=AD8BC1F40EAB3386CCE2B915410CF65021B83E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:6e:6a:ec:81:d3:71:9f:55:33:3e:a0:61:
                    8e:5c:0b:44:86:e4:a2:8e:67:f3:29:90:fb:85:69:
                    d4:30:6c:c5:87:5d:20:55:53:86:24:aa:da:58:70:
                    07:1c:80:ec:b6:1b:9f:aa:87:fa:9b:bf:97:ba:49:
                    3d:09:4d:39:de:26:09:13:99:1e:1f:5f:c1:ab:62:
                    c9:d3:a5:cd:09:a3:eb:e7:e9:f8:9a:35:9b:6e:8b:
                    c2:54:dd:7b:2d:d8:f2:73:e9:85:eb:26:f9:42:49:
                    a0:9b:de:da:21:47:f4:96:32:8b:4b:8c:14:8c:7d:
                    3e:22:d0:6c:69:2d:f5:97:e1:e2:94:b7:7f:04:0f:
                    dd:04:16:f2:dc:b8:82:3f:54:8d:ae:54:a6:f8:d4:
                    85:ae:6a:e0:5b:4a:18:64:9a:db:89:83:4b:8f:2d:
                    83:00:25:2d:ed:f2:41:fb:1f:92:93:c2:dd:da:e9:
                    35:4d:ba:7b:3b:0c:84:54:ce:2b:c4:d8:8c:3f:ee:
                    a6:6f:c2:d0:71:ac:fa:ee:ad:c0:c7:15:8b:55:75:
                    d1:60:64:f4:a8:42:30:30:5a:fa:98:45:37:a9:54:
                    15:a0:da:0d:3b:d3:00:b9:5d:ea:17:52:f3:00:74:
                    45:5c:95:a2:01:d2:13:14:6b:3c:60:e0:16:9f:0f:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8B:C1:F4:0E:AB:33:86:CC:E2:B9:15:41:0C:F6:50:21:B8:3E:1C
            X509v3 Authority Key Identifier:
                keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:a8:08:d2:a9:a4:5d:3f:1b:4b:85:84:64:f9:fc:86:be:5a:
         cf:d0:2d:6f:ee:19:d0:b0:a3:0d:90:0d:aa:6b:a8:81:a1:55:
         96:4c:80:11:c3:97:f2:05:95:ea:a4:ba:70:f9:b9:91:cc:5b:
         67:a7:bf:83:1d:24:ee:f7:e2:60:ce:9b:45:a7:6a:a7:6e:f3:
         85:a2:be:aa:58:26:a7:93:68:29:ff:80:15:04:07:77:86:5e:
         2c:19:2b:3d:61:d6:fc:3a:7a:a8:32:dd:e4:f9:ef:29:09:3e:
         85:09:c2:5a:03:b9:dd:ea:5b:ce:7a:05:fd:b5:a7:6e:d8:f7:
         91:eb:f1:72:c7:56:d7:72:6e:e9:f0:5b:f2:b3:48:2e:40:0c:
         00:9b:a9:82:00:a5:57:5b:bb:28:d1:b3:f6:a7:d2:dd:39:f2:
         e6:80:56:a4:4a:7a:fc:3e:6f:b8:6a:cc:01:08:7f:f0:b6:0d:
         b9:a9:06:87:8e:7d:00:8f:15:dd:cc:d9:ca:a5:fc:17:e9:d6:
         11:b1:02:64:b1:8f:04:7d:c6:69:a8:26:f5:22:f1:27:13:d2:
         a3:c4:ee:9e:13:bb:57:7f:88:ac:b7:11:75:b8:e3:f3:99:dd:
         89:26:c7:3c:a3:ab:3b:bb:a4:94:23:64:30:ed:9f:c8:81:87:
         30:d5:59:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:55:11 2026 by rpki-client