Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa
File:                     3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          8cSHk4Qmt00Rlx//RoPVD8OhEt2winz9iHDLk522or4=
Subject key identifier:   78:08:D3:D6:42:A0:A1:BB:98:8A:70:88:8E:BE:09:FE:1A:FE:C6:AD
Certificate issuer:       /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074
Certificate serial:       12ACD8936A2085AE21528D56CE70722A4BBF1EF1
Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 03:17:50 +0000
ROA not before:           Sun 03 May 2026 03:12:50 +0000
ROA not after:            Sun 02 May 2027 03:17:50 +0000
asID:                     9341
IP address blocks:        103.190.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl
                          rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 09:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ac:d8:93:6a:20:85:ae:21:52:8d:56:ce:70:72:2a:4b:bf:1e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074
        Validity
            Not Before: May  3 03:12:50 2026 GMT
            Not After : May  2 03:17:50 2027 GMT
        Subject: CN=7808D3D642A0A1BB988A70888EBE09FE1AFEC6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:05:b5:45:58:d7:54:e8:e7:d4:54:2e:8c:
                    f8:f6:d7:cd:78:15:02:3c:b9:3f:dd:cb:01:29:ca:
                    93:79:40:61:a2:c9:12:7d:8d:ce:35:a2:05:d8:2a:
                    63:59:e6:45:bc:0b:5d:d9:1e:e3:32:0c:db:f8:f4:
                    72:68:60:e0:35:bf:d9:18:68:ec:31:95:98:4f:4f:
                    a7:d7:8c:86:f5:63:16:ce:84:aa:02:93:5a:b5:eb:
                    89:5e:d3:d6:5e:5f:df:e0:71:80:29:2f:e0:04:d4:
                    f3:42:bb:56:9f:ab:35:0c:ec:b5:38:bb:a6:fa:14:
                    d4:0f:c2:11:8c:13:e1:17:ab:58:34:7b:e5:f8:81:
                    6b:27:9a:18:d8:dc:f0:b4:82:f1:84:59:26:fa:ec:
                    22:da:a8:ea:3b:5e:79:1f:06:3a:0f:cb:00:84:04:
                    37:0a:c1:8c:06:37:65:76:3a:7b:92:29:ce:c4:4e:
                    46:d0:d1:46:ae:53:a2:13:f3:29:ec:da:1d:a9:54:
                    bb:59:24:e1:fa:67:c6:05:8c:a7:7a:72:75:43:45:
                    e4:8b:88:cd:31:bb:c9:8b:b6:45:c6:5d:d8:c0:7a:
                    6a:d7:be:b6:68:d9:dd:61:8c:51:55:be:76:de:45:
                    c4:88:47:88:e5:bd:95:c8:40:51:0a:84:f8:2c:aa:
                    bb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:08:D3:D6:42:A0:A1:BB:98:8A:70:88:8E:BE:09:FE:1A:FE:C6:AD
            X509v3 Authority Key Identifier:
                keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:0f:b1:a7:94:2f:f3:54:84:07:0b:74:3e:88:06:be:09:0a:
         7d:15:36:55:25:c7:73:13:31:f4:2f:c4:0a:a9:ba:66:74:25:
         85:b1:dc:98:e9:e8:1c:41:6e:8c:83:d2:e5:57:31:12:39:d4:
         60:8b:c5:29:bd:f3:80:62:f7:e5:ed:86:39:72:a8:35:63:da:
         ac:28:c4:e8:46:c7:c3:33:f8:f0:78:bf:9b:a9:3a:a7:1b:55:
         20:15:a9:e5:9f:e6:f0:cb:f3:d9:66:31:6f:b2:77:67:ae:5a:
         9b:db:a4:ac:07:42:88:01:06:37:e7:37:af:ce:66:d2:b5:70:
         14:e8:6f:89:20:08:25:04:9c:a0:cc:bd:84:db:6f:7c:d0:a8:
         6f:9f:35:4e:54:dc:07:60:d2:8d:2a:a9:40:79:62:0f:66:e9:
         4f:7c:3b:5f:ca:4d:76:04:87:01:be:97:41:3b:75:d6:e0:54:
         82:30:b0:eb:45:75:5f:87:09:28:31:13:97:ad:71:a2:d2:a4:
         45:05:4b:95:6e:55:d0:bf:40:db:fc:08:53:f0:dc:fe:57:94:
         f7:00:4b:2a:4f:89:ca:9b:90:ac:7c:64:68:b1:0d:c4:d4:4a:
         64:6b:11:f9:02:fb:ed:a4:6b:78:71:50:3a:c0:ab:eb:11:39:
         f7:6c:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:26:43 2026 by rpki-client