Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=
Subject key identifier:   C0:78:95:AA:0B:A6:41:B8:88:52:D8:41:7D:95:2C:7D:FA:7C:E7:A8
Certificate issuer:       /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894
Certificate serial:       50F522C039B8E877D94B8D6697F763A7E60FB689
Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:58:06 +0000
ROA not before:           Sun 03 May 2026 02:53:06 +0000
ROA not after:            Sun 02 May 2027 02:58:06 +0000
asID:                     9341
IP address blocks:        103.179.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl
                          rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 08:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:22:c0:39:b8:e8:77:d9:4b:8d:66:97:f7:63:a7:e6:0f:b6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894
        Validity
            Not Before: May  3 02:53:06 2026 GMT
            Not After : May  2 02:58:06 2027 GMT
        Subject: CN=C07895AA0BA641B88852D8417D952C7DFA7CE7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8d:55:4f:c9:04:89:6f:23:75:a2:bf:24:e8:
                    23:af:2a:f1:82:08:e9:a6:2e:9f:f6:e1:fc:2a:0a:
                    5a:7e:51:84:8a:e0:f1:ff:a7:a5:2d:ed:00:37:b1:
                    9b:de:60:7b:da:97:2c:de:1f:2a:10:ce:16:06:da:
                    0d:05:26:a9:70:41:1b:b4:3f:21:37:e6:92:dd:46:
                    0a:f7:35:01:07:57:8b:35:9c:bf:26:1e:18:30:d1:
                    d9:f6:89:d7:16:37:2a:14:27:a9:a8:ad:96:50:f5:
                    a8:ce:37:90:1b:d7:7f:1d:77:ac:8d:c4:fb:b1:54:
                    ff:11:bc:a2:dc:aa:55:a6:c7:a6:23:f5:14:23:3e:
                    d5:e4:32:ce:8d:8e:10:a1:5d:a0:c4:5a:ed:3b:d8:
                    27:4c:28:2e:6c:67:cc:0c:43:6a:7a:b8:bb:38:8e:
                    93:27:af:fc:15:2e:1b:5a:15:36:43:bc:c3:a2:12:
                    08:58:f9:a4:2d:c1:07:6a:04:ad:c6:07:41:2f:14:
                    24:c5:e9:f2:77:59:94:c5:ac:fc:86:ab:5b:28:d6:
                    01:1c:40:80:6c:80:a8:1e:db:b1:22:ec:ce:4c:1f:
                    fc:e2:99:5b:e8:5d:80:16:18:02:b2:8b:0b:1d:3c:
                    97:1d:d1:d6:1c:38:48:06:22:63:c3:8e:c9:7b:8b:
                    ea:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:78:95:AA:0B:A6:41:B8:88:52:D8:41:7D:95:2C:7D:FA:7C:E7:A8
            X509v3 Authority Key Identifier:
                keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a4:3a:04:b9:8c:8b:6a:92:d2:57:8a:06:41:e4:e3:09:5d:
         8d:06:3a:34:64:98:d9:b9:99:1e:10:41:77:10:6a:65:35:06:
         74:47:49:47:57:4f:85:c6:5b:30:67:57:ce:1c:4f:4d:ee:dc:
         ff:c1:be:ed:e0:d7:0e:09:46:75:5c:75:92:28:49:78:19:21:
         46:28:2a:da:ff:7c:0c:9e:ce:9a:4f:dc:bb:ab:39:65:36:e2:
         1e:fb:b0:a5:10:bb:1c:72:5b:46:d1:f4:dd:0e:dc:32:e3:31:
         bd:08:7d:61:e0:e0:65:21:87:ba:4a:37:03:12:64:0b:52:5c:
         90:ed:72:4f:76:e2:87:96:68:e1:b2:33:2a:e2:b3:cd:88:36:
         ad:8c:5c:8c:5c:19:d0:c7:f9:51:9f:a0:70:54:0a:2b:68:ea:
         27:a3:10:c4:62:ba:f6:ef:21:e4:1d:9d:ff:7b:5c:94:71:c5:
         4e:0b:b7:38:d0:74:ab:83:bb:8a:51:e8:15:70:83:78:06:88:
         5c:7a:6f:80:21:57:ac:7f:06:e0:ca:db:27:b1:f0:6f:66:d4:
         77:55:52:74:85:5f:97:2e:37:d0:2b:f5:a9:d1:8c:e5:16:ca:
         e6:0c:9b:90:14:37:99:fa:0e:54:45:68:64:1a:cf:6d:48:2e:
         45:2d:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:30:08 2026 by rpki-client