Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa
File:                     3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (raw, json)
Hash identifier:          dBbvr3vnMoWgLvpZmo0fsQX3iK4npJkSb3PT2yQQy7k=
Subject key identifier:   37:DF:3D:36:AF:DF:F0:23:28:E9:2A:56:8E:3A:45:AB:19:9F:D1:4D
Certificate issuer:       /CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
Certificate serial:       22649D31610F77D1B5523657F3366A88C8453BE9
Authority key identifier: F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa
Signing time:             Sun 03 May 2026 02:10:19 +0000
ROA not before:           Sun 03 May 2026 02:05:19 +0000
ROA not after:            Sun 02 May 2027 02:10:19 +0000
asID:                     139401
IP address blocks:        103.142.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl
                          rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:64:9d:31:61:0f:77:d1:b5:52:36:57:f3:36:6a:88:c8:45:3b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29E13162A7FAF445019923879EB8E64CC4CFA65
        Validity
            Not Before: May  3 02:05:19 2026 GMT
            Not After : May  2 02:10:19 2027 GMT
        Subject: CN=37DF3D36AFDFF02328E92A568E3A45AB199FD14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:4f:ff:fd:43:28:db:88:f7:59:9c:3a:08:
                    d8:d7:a3:59:95:24:45:82:42:df:cc:35:c4:83:52:
                    6e:1c:fb:fa:a1:4f:5b:ea:17:01:2e:e6:1e:8c:b5:
                    f7:80:6b:f9:da:72:43:1d:cd:49:66:4b:e5:44:9e:
                    cc:17:e9:05:60:58:84:02:86:b9:dc:b6:fd:65:a9:
                    20:12:13:90:bf:db:3e:3a:83:51:88:fc:0a:5b:d1:
                    de:fc:71:e2:2d:09:71:11:ea:e3:13:cb:fd:3f:e8:
                    38:77:32:93:8c:36:1b:5e:1c:b7:3e:5d:5b:02:64:
                    b3:cb:ec:0a:0d:f8:cd:1e:9c:f9:d2:74:0d:1d:50:
                    a5:d8:41:30:d8:67:e4:02:a7:6f:8c:2d:03:45:1a:
                    58:a1:61:a2:e6:c2:12:5c:0d:17:22:0d:bc:f6:a0:
                    1d:81:52:4a:ea:9f:0b:16:97:c6:49:59:36:09:a4:
                    04:14:8f:1a:65:51:66:13:07:f1:e2:fb:3b:f5:08:
                    4f:a4:9b:40:05:c9:2c:97:8c:aa:63:35:10:87:aa:
                    d2:d0:c7:dc:49:01:7f:7d:13:0e:9d:aa:98:ff:21:
                    dc:91:f1:c9:88:a3:90:4c:57:f6:74:8c:fe:ea:c7:
                    3e:52:04:29:9f:5a:85:d2:85:24:6c:33:37:b8:23:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DF:3D:36:AF:DF:F0:23:28:E9:2A:56:8E:3A:45:AB:19:9F:D1:4D
            X509v3 Authority Key Identifier:
                keyid:F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b4:17:c8:84:58:e5:e2:94:ba:96:94:70:e7:82:f9:9c:d6:
         ff:19:4f:79:0f:8a:73:16:49:5c:90:44:f5:c2:a8:a9:f5:83:
         8c:7c:5e:87:47:f8:a2:07:85:a9:ae:51:11:15:d7:fb:a9:6f:
         b8:71:96:5e:66:22:0c:84:1d:31:9b:62:ec:3b:8a:b2:d8:3e:
         be:7d:8e:71:54:a6:e9:49:f2:f0:85:34:08:72:ab:bb:ab:cf:
         e3:e5:aa:1c:41:1d:3c:a0:54:48:b9:05:95:f4:12:0b:20:31:
         ff:04:ca:2b:20:c7:f3:ba:37:00:dd:bd:ac:1b:62:cc:98:84:
         33:48:f4:ac:50:94:26:c1:c2:e9:83:7d:14:07:54:54:86:a8:
         0f:71:da:38:14:48:88:b2:de:c1:2c:e2:37:71:46:42:5e:7b:
         39:30:e3:07:eb:e2:59:a4:49:1a:f0:e2:35:7f:f2:30:9d:e4:
         ca:b6:9e:5f:f5:59:f6:14:d5:f2:aa:f5:7c:9f:ba:8e:d9:1e:
         58:78:cb:0c:26:44:1f:c6:38:ff:e3:a1:83:77:3d:9d:6c:cb:
         6a:5f:6c:fb:60:26:4c:36:ba:4a:ba:5e:a4:7e:05:f4:e2:ec:
         01:5f:15:65:1b:d2:0c:44:fd:fb:fe:a9:5f:87:0a:62:87:72:
         18:65:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:13 2026 by rpki-client