Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35312e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          xnCevyudli2t9um2DVMk2wF4GvogAhTTvOVWqK7SaCE=
Subject key identifier:   CF:BB:F6:CA:80:8B:75:83:80:E7:BA:3C:23:B6:9D:2E:56:17:20:EF
Certificate issuer:       /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074
Certificate serial:       443C67F071A5C08A0A2DBCC100B0835440B454EF
Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35312e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 03:17:50 +0000
ROA not before:           Sun 03 May 2026 03:12:50 +0000
ROA not after:            Sun 02 May 2027 03:17:50 +0000
asID:                     9341
IP address blocks:        103.190.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl
                          rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 09:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3c:67:f0:71:a5:c0:8a:0a:2d:bc:c1:00:b0:83:54:40:b4:54:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074
        Validity
            Not Before: May  3 03:12:50 2026 GMT
            Not After : May  2 03:17:50 2027 GMT
        Subject: CN=CFBBF6CA808B758380E7BA3C23B69D2E561720EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:66:97:7d:94:45:79:17:db:9e:96:88:0d:
                    e0:e4:46:17:e9:59:1e:7d:50:5b:73:c8:74:1f:58:
                    67:f7:59:9e:fb:31:1a:13:30:b4:21:74:48:39:85:
                    93:75:c2:1a:32:11:d9:d2:e9:40:d7:32:5a:5d:dc:
                    9e:db:55:38:58:b0:cf:b4:47:fd:a5:ca:6a:dc:de:
                    e3:6c:6e:72:b5:26:39:f6:ca:0e:be:e1:4d:e0:c3:
                    19:86:32:3f:34:3b:a1:3c:e5:99:5f:32:c2:9a:aa:
                    a1:73:8c:f7:7d:45:ee:71:25:37:1f:fc:79:69:8a:
                    6d:d2:2c:c2:c4:b5:17:b5:23:3a:19:63:6a:cb:23:
                    20:73:bf:87:d7:7a:c5:62:0e:6b:10:62:a9:4a:55:
                    27:e9:45:e8:22:56:11:8b:e2:69:36:d6:5a:16:7b:
                    ba:f8:d5:54:ee:b6:0f:5e:e5:a1:79:a9:70:83:11:
                    81:bf:15:40:cd:f4:2e:d7:38:bc:b0:ef:f7:a1:9b:
                    db:cf:06:30:55:bb:8a:08:7b:e4:c6:7f:e0:cc:72:
                    ca:6b:71:a7:ed:42:d4:0e:45:f9:28:1c:e3:4e:4a:
                    dc:72:7f:2e:7e:7a:c5:f4:b8:7c:e7:d0:22:5e:e2:
                    a0:84:0f:4e:de:1e:f8:1f:7b:29:f6:e6:da:51:c4:
                    38:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BB:F6:CA:80:8B:75:83:80:E7:BA:3C:23:B6:9D:2E:56:17:20:EF
            X509v3 Authority Key Identifier:
                keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:37:2f:ea:be:ba:20:d9:6b:5b:df:b5:2f:69:aa:32:97:46:
         c1:09:f4:61:a0:19:24:3b:b2:18:0c:88:27:bf:8c:4c:4c:51:
         02:96:56:20:c2:66:d1:e2:1e:e0:d2:ec:20:94:28:35:18:e7:
         25:50:8b:60:47:46:00:5b:cf:21:96:07:08:74:6a:22:4e:92:
         ec:50:4d:90:bd:80:17:63:e6:9f:7d:60:a7:00:65:ef:92:f4:
         bf:7e:55:b5:fd:ad:1e:3a:ba:8f:b8:88:95:40:81:4a:05:77:
         79:36:de:01:18:f0:22:72:7a:3b:c7:11:0a:bd:8c:25:88:b6:
         33:d7:ca:41:6b:53:0c:ff:90:c6:23:ee:fb:2f:67:45:30:99:
         58:b2:f9:fa:18:3c:55:80:4f:48:ee:4d:80:eb:2a:0e:bb:46:
         01:8e:b8:12:95:dd:a7:ff:22:62:ca:00:f1:65:db:dc:21:14:
         de:14:cf:ed:8f:c1:a2:a9:55:f2:4e:32:27:bb:3b:be:ed:2b:
         89:03:03:0d:3e:46:de:f7:2b:4c:f9:8e:fc:53:3c:8a:d6:8d:
         ea:af:07:08:fd:15:a5:67:70:7f:70:4c:25:e9:3f:28:c1:42:
         60:12:70:6f:6b:2b:6d:01:9f:80:27:b2:71:63:e6:0f:47:f6:
         67:21:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:27:35 2026 by rpki-client