Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa
File:                     3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (raw, json)
Hash identifier:          A+RPn25HxKi9IyMz0fxzOncy7UdZahFmQBMwYHaLTLU=
Subject key identifier:   47:A5:AD:69:B6:71:A1:5E:C6:12:9F:8E:CE:E6:4D:1A:8D:5A:20:C1
Certificate issuer:       /CN=A41E81A674D539D19E0045B0769140AE1C59B2A6
Certificate serial:       56BFE1ED04A5D3C57D9075D3849B0FE9AE164ACB
Authority key identifier: A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa
Signing time:             Sun 03 May 2026 02:11:40 +0000
ROA not before:           Sun 03 May 2026 02:06:40 +0000
ROA not after:            Sun 02 May 2027 02:11:40 +0000
asID:                     150917
IP address blocks:        103.192.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl
                          rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bf:e1:ed:04:a5:d3:c5:7d:90:75:d3:84:9b:0f:e9:ae:16:4a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A41E81A674D539D19E0045B0769140AE1C59B2A6
        Validity
            Not Before: May  3 02:06:40 2026 GMT
            Not After : May  2 02:11:40 2027 GMT
        Subject: CN=47A5AD69B671A15EC6129F8ECEE64D1A8D5A20C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0a:e8:94:2c:39:1f:71:e4:9a:3a:c5:fe:72:
                    e3:e4:43:23:8a:bf:32:06:42:9f:32:60:b7:e9:1f:
                    6a:ff:88:19:25:6d:61:e9:13:fe:67:8d:09:96:de:
                    8a:41:fa:3e:66:ce:9f:62:6d:c1:c4:80:cb:e6:56:
                    8f:8b:95:64:ea:83:37:cb:28:21:20:a7:39:a8:f7:
                    fa:32:63:1f:1f:fb:ee:5a:29:a9:64:24:c9:ea:9f:
                    66:d4:69:2b:f2:2d:ea:45:0c:1e:c2:82:e2:a6:45:
                    e8:2c:0d:33:d4:6a:5d:7a:3d:7a:b4:76:ce:0f:33:
                    8e:24:01:bd:9c:a9:ef:9b:32:04:09:b3:20:53:40:
                    a4:f2:8d:10:92:e9:a5:bd:e5:cc:60:79:18:5a:bb:
                    27:82:71:ff:8b:35:7e:9a:3c:52:94:c2:a7:ba:27:
                    21:0f:86:d4:02:73:7d:6a:22:05:bb:7a:9a:e0:82:
                    a7:48:04:50:e6:2d:e4:d2:65:34:d9:62:b3:90:bc:
                    3a:ce:bc:1f:18:e3:bf:36:a6:98:a8:d8:fa:56:e4:
                    1c:32:92:7b:83:31:cb:dd:28:e5:0c:cd:d5:c5:98:
                    6d:15:ea:d2:1d:12:73:00:db:b6:2c:0e:d2:3a:4d:
                    e8:48:5c:c8:b0:20:50:f1:45:d4:db:4a:9e:40:14:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A5:AD:69:B6:71:A1:5E:C6:12:9F:8E:CE:E6:4D:1A:8D:5A:20:C1
            X509v3 Authority Key Identifier:
                keyid:A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:09:b0:40:f1:84:a8:1f:a0:35:b0:95:c2:ce:be:ee:34:
         7e:7b:08:6e:93:47:9c:42:68:0a:91:8e:ce:d5:ff:19:66:f6:
         76:dd:87:d8:61:56:37:1b:ff:10:92:ca:e4:da:4f:64:7f:9e:
         72:10:6a:e1:41:b0:ae:b4:0e:b1:25:b6:13:99:34:8d:a5:c5:
         88:31:b9:44:5c:a7:16:63:da:41:d7:c6:94:be:b6:fa:83:c2:
         f3:72:7c:30:83:0f:16:8e:d1:fd:97:aa:4f:dc:b6:30:94:3e:
         f1:ae:e4:20:e8:c9:59:36:fa:4a:21:da:ba:87:86:09:fe:cf:
         f5:26:e3:d2:dd:fc:67:7b:0b:03:d9:87:96:15:f0:9c:c1:d3:
         3b:c0:e7:95:1c:dc:cc:3d:f9:fc:d3:24:6a:3d:bd:b4:2e:30:
         8a:44:d4:70:67:17:90:bf:11:9f:df:57:f8:4b:37:41:d9:4c:
         e6:fc:2d:e6:c9:48:39:c9:d9:c8:b1:2d:87:65:3b:e9:c2:3b:
         35:1c:3e:46:92:65:bc:ae:a3:e8:f7:77:e4:3e:d9:e3:ce:a0:
         c0:f4:51:4e:74:8e:27:28:04:0e:29:f1:fa:db:e0:c2:41:db:
         22:50:a7:ad:5e:30:66:e5:a4:0a:15:81:2b:56:64:18:6f:b3:
         4a:47:4e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:16 2026 by rpki-client