Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa
File:                     3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (raw, json)
Hash identifier:          aeQ9NN7n3Js6ilpMlf3iKltx6poDEG/MLFH04LVivcI=
Subject key identifier:   3C:04:D1:1C:C6:9F:16:E3:E8:37:4E:62:19:4B:81:C9:7F:D8:2F:B9
Certificate issuer:       /CN=F69314440BEB879DDDA166C5976A2F1F6A19E031
Certificate serial:       159259C28E4F5A387BF817E8BC9BFBD183CDBDED
Authority key identifier: F6:93:14:44:0B:EB:87:9D:DD:A1:66:C5:97:6A:2F:1F:6A:19:E0:31
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa
Signing time:             Sun 03 May 2026 02:12:18 +0000
ROA not before:           Sun 03 May 2026 02:07:18 +0000
ROA not after:            Sun 02 May 2027 02:12:18 +0000
asID:                     46055
IP address blocks:        103.198.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.crl
                          rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:92:59:c2:8e:4f:5a:38:7b:f8:17:e8:bc:9b:fb:d1:83:cd:bd:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69314440BEB879DDDA166C5976A2F1F6A19E031
        Validity
            Not Before: May  3 02:07:18 2026 GMT
            Not After : May  2 02:12:18 2027 GMT
        Subject: CN=3C04D11CC69F16E3E8374E62194B81C97FD82FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:e8:1a:de:fa:cf:e0:77:d5:90:25:7d:2b:
                    ba:5a:a3:66:16:2e:51:7d:75:f0:91:f7:2b:9e:6c:
                    6c:cf:ee:b3:0c:95:84:90:b4:3c:45:6c:76:aa:d7:
                    12:ee:77:cc:9e:76:7a:93:3c:ad:88:9c:d2:7a:56:
                    e9:1d:9d:89:d4:2d:1e:13:d9:a4:7a:ba:6a:b8:3f:
                    44:89:22:74:3c:d7:6e:10:7e:a8:98:3d:eb:79:a6:
                    24:22:12:f4:96:e8:d6:6c:e2:f6:b9:d9:ee:a2:38:
                    e1:e2:34:f7:e1:0e:3f:ad:84:c4:89:21:d5:6e:b8:
                    39:34:7d:77:5a:14:23:57:28:47:e2:a4:59:3f:68:
                    63:23:10:ed:b1:42:a8:6d:55:01:31:6c:12:c0:76:
                    65:2d:2c:9b:d3:d8:8d:c0:95:7f:28:9c:dc:ff:5d:
                    a8:87:3a:62:06:43:31:bc:94:94:14:f4:db:35:08:
                    e7:49:03:d5:8b:5c:60:f5:95:e3:cb:ed:e9:fa:a8:
                    63:81:0f:f4:10:3d:60:21:67:59:80:b1:a7:e6:8c:
                    2c:f7:9a:af:51:d4:b5:4d:d7:57:b1:2a:e5:a0:04:
                    8e:b8:84:52:71:75:ce:df:4c:63:cd:80:3f:29:93:
                    90:e8:37:3d:b6:ec:92:0e:e7:42:09:5d:3b:b1:06:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:04:D1:1C:C6:9F:16:E3:E8:37:4E:62:19:4B:81:C9:7F:D8:2F:B9
            X509v3 Authority Key Identifier:
                keyid:F6:93:14:44:0B:EB:87:9D:DD:A1:66:C5:97:6A:2F:1F:6A:19:E0:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:01:e5:ba:33:47:cc:a8:ea:15:0c:c9:ab:31:3f:f7:a6:62:
         ee:94:b7:8f:33:fa:95:b2:ad:f8:90:4b:97:ab:4c:13:b0:4b:
         9e:0b:f3:e4:12:07:ca:ab:91:2b:79:d6:ec:cd:7b:37:3f:66:
         8a:33:93:ce:dc:53:8a:52:5d:81:af:2f:76:18:ec:d3:28:6a:
         f9:11:42:9d:f7:c1:d6:0d:bc:d9:31:fa:26:8a:7d:c5:a6:b6:
         6e:98:e9:01:81:07:63:8d:7a:69:c8:c7:6b:b8:12:d9:1d:ec:
         94:3b:21:52:fb:00:74:15:4d:64:87:c1:72:d6:a0:de:6c:4b:
         87:00:a8:0a:61:25:1d:6f:74:76:77:9e:f6:50:5f:b7:c9:9e:
         bf:8f:fe:4f:40:0b:b1:1b:6d:17:6d:c4:7e:88:20:ab:f2:c2:
         20:57:b3:5d:fe:09:19:f3:9e:85:8c:8f:23:1a:fb:47:ae:65:
         b6:ad:c2:d4:cd:80:91:c2:89:7d:27:8e:69:10:3c:03:0f:91:
         07:69:26:20:1d:f8:bd:33:ca:6b:5c:3b:a6:67:25:39:a0:4c:
         70:42:28:17:52:0b:5f:b7:8e:f6:0d:08:85:75:48:a7:de:80:
         ed:86:01:f0:b1:99:d0:4c:81:91:05:2d:90:b5:3b:fa:b9:e1:
         0c:4f:31:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:51 2026 by rpki-client