Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa
File:                     3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa (raw, json)
Hash identifier:          5cKt2GQ70RT9pJRr52o1J2ZJ8Szvc0mfOl2vwcEkNAw=
Subject key identifier:   11:53:52:62:D0:08:69:80:25:83:45:55:77:89:1F:57:30:C1:BE:DE
Certificate issuer:       /CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
Certificate serial:       602D6782D0B19B3FD637977A67431A3228CB2B0A
Authority key identifier: F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa
Signing time:             Sat 02 May 2026 22:58:18 +0000
ROA not before:           Sat 02 May 2026 22:53:18 +0000
ROA not after:            Sat 01 May 2027 22:58:18 +0000
asID:                     141933
IP address blocks:        103.166.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl
                          rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2d:67:82:d0:b1:9b:3f:d6:37:97:7a:67:43:1a:32:28:cb:2b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
        Validity
            Not Before: May  2 22:53:18 2026 GMT
            Not After : May  1 22:58:18 2027 GMT
        Subject: CN=11535262D00869802583455577891F5730C1BEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:8c:90:f9:9b:49:9d:81:b4:97:3a:23:be:
                    5b:19:29:a8:6d:2e:7a:22:75:43:f5:24:8f:73:91:
                    a4:b8:92:e1:4f:c7:a9:d4:37:74:06:b3:ef:8a:7d:
                    49:69:df:53:8c:6f:68:00:d7:7a:bd:74:7d:38:3a:
                    e7:72:0f:80:99:a8:f2:89:c0:7d:bd:80:82:1d:95:
                    79:69:c7:c0:47:45:d4:59:f8:67:c8:b0:17:a6:dd:
                    51:ca:8f:d8:38:6b:5f:7a:17:b7:a7:ae:aa:c8:14:
                    d5:c1:fb:c7:90:85:84:8c:1b:43:a6:df:b1:27:dd:
                    61:32:c5:c0:20:2c:76:b7:04:d1:f7:0d:d0:58:d4:
                    5a:82:be:60:98:c7:55:1f:87:b6:08:6f:82:e6:0c:
                    79:ab:90:1d:30:a4:e7:7d:10:27:f4:43:ad:27:ca:
                    26:c9:b3:f8:86:d3:2d:c0:18:2e:a4:8b:c5:82:8f:
                    6b:8a:b4:be:92:a2:36:94:95:28:e9:c3:28:28:08:
                    94:f6:39:71:d0:37:6b:97:97:0f:f4:2c:17:57:f6:
                    02:78:e2:5e:1a:1f:af:ba:4d:50:49:ed:18:fa:9b:
                    cf:4b:b5:ae:1f:f7:9e:62:3b:6f:ab:06:44:f7:d0:
                    af:ff:6b:86:7c:b5:41:a8:4a:9b:13:3b:83:7e:56:
                    d8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:53:52:62:D0:08:69:80:25:83:45:55:77:89:1F:57:30:C1:BE:DE
            X509v3 Authority Key Identifier:
                keyid:F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:88:43:1f:e2:6c:2e:46:78:f1:e2:14:21:95:31:1f:d8:
         6b:a6:65:95:66:25:f7:21:a0:40:22:6f:f2:57:fa:f4:dc:25:
         eb:ab:75:f1:0b:87:59:4a:d8:97:b2:c6:c5:64:bb:44:04:7c:
         02:3d:99:94:63:fd:5e:bb:a4:ef:dd:69:49:e5:3a:d0:f9:89:
         88:e4:42:2e:5f:56:85:21:bd:4a:00:be:b9:0a:61:90:98:af:
         4a:de:2b:ea:e0:9b:77:44:80:1a:1f:da:89:97:db:80:e6:d5:
         51:79:3e:12:f5:48:26:a1:db:b4:6e:68:3d:70:81:74:cf:1a:
         8c:50:da:5d:a3:9f:cc:17:4b:f8:07:d6:94:7c:5d:12:d6:bf:
         c4:16:53:e1:b7:c6:15:76:bb:c7:85:e8:36:68:a3:1a:6a:9f:
         e0:1c:24:af:f4:cc:4e:8d:36:11:ca:9c:e6:7d:8b:95:03:e9:
         a6:e9:23:c1:96:49:a4:cf:f2:80:26:98:07:ea:02:98:7e:25:
         0c:55:84:f4:83:54:20:99:04:52:80:de:55:97:26:fe:a7:a2:
         f9:0d:8c:6f:e3:17:1a:b4:a6:8a:c0:4f:ad:1f:da:11:a0:41:
         5a:ac:ca:b3:f8:4a:53:33:fd:5b:cc:dd:b8:36:7b:ce:3d:8b:
         0d:41:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:23 2026 by rpki-client