Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa
File:                     3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (raw, json)
Hash identifier:          hRuNQymA0Kqk7Awfu8/hFwiPFpevo38okveHDPwRfwI=
Subject key identifier:   A4:17:9E:96:F9:CE:0A:0C:74:A5:E0:CB:67:50:BA:A7:A8:F3:54:D8
Certificate issuer:       /CN=9290697B92D08AFAAFB01253090BE0FE28871EA9
Certificate serial:       249506F06EC83B7863BD3C6D16B8CEBDFF4976F7
Authority key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa
Signing time:             Sun 03 May 2026 02:28:49 +0000
ROA not before:           Sun 03 May 2026 02:23:49 +0000
ROA not after:            Sun 02 May 2027 02:28:49 +0000
asID:                     141909
IP address blocks:        103.164.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl
                          rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:95:06:f0:6e:c8:3b:78:63:bd:3c:6d:16:b8:ce:bd:ff:49:76:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9
        Validity
            Not Before: May  3 02:23:49 2026 GMT
            Not After : May  2 02:28:49 2027 GMT
        Subject: CN=A4179E96F9CE0A0C74A5E0CB6750BAA7A8F354D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:09:a4:23:81:98:7e:36:c3:42:3d:57:63:
                    7b:0c:fd:32:5d:0f:47:ee:68:25:9b:5f:78:af:c6:
                    18:30:fc:51:29:ea:83:d3:a7:88:da:4c:7e:86:ca:
                    38:43:b2:a9:65:10:62:33:51:54:51:44:51:49:81:
                    ae:3f:64:72:aa:1c:18:a3:5b:ea:a7:21:7b:60:95:
                    6c:5c:a4:1d:6e:94:a2:af:70:e8:1b:96:28:a1:72:
                    c8:c6:4c:54:76:0a:3a:8e:f0:49:52:be:c2:4c:15:
                    e6:7f:e1:9c:80:59:59:49:c2:50:71:09:bc:e5:5e:
                    d4:87:e3:6b:39:24:84:31:1c:88:2b:71:bc:02:8f:
                    24:b1:32:86:ed:e8:bb:de:0d:04:c6:42:22:26:d5:
                    3a:43:41:d5:7c:ce:97:16:2f:9a:c6:3b:d2:ed:6a:
                    9b:95:1f:ab:7e:83:c0:4a:70:58:0a:8a:18:84:ec:
                    04:e3:7c:92:3a:2c:f9:12:51:19:dc:87:18:b0:0a:
                    11:d0:cb:ba:d8:dd:b9:87:7f:19:fd:33:ec:db:3b:
                    28:2a:c5:bb:2c:b0:96:1c:78:e6:b3:60:eb:8e:6d:
                    8c:e2:cd:7f:fe:47:cb:0b:c6:e7:9f:03:fc:fb:20:
                    0a:38:31:5f:f7:9f:96:64:a0:6b:52:ec:4b:30:d9:
                    8d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:17:9E:96:F9:CE:0A:0C:74:A5:E0:CB:67:50:BA:A7:A8:F3:54:D8
            X509v3 Authority Key Identifier:
                keyid:92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c0:e3:c6:dd:a9:db:be:29:c3:3f:12:86:34:40:e8:0a:25:
         b1:6b:1f:2b:97:10:4a:3d:c9:f5:3a:a0:71:4a:9c:54:9b:15:
         18:8b:b6:f0:e8:4d:43:a8:0a:8d:ec:6e:da:25:99:4b:1e:12:
         2b:20:ff:ac:6e:aa:81:37:25:46:0d:e4:40:4f:91:2d:f7:ab:
         0f:c8:62:9e:74:0f:d3:d1:23:0e:8b:b3:96:96:ae:09:c4:95:
         4e:9f:70:94:a8:c9:e4:29:83:0f:69:45:00:33:c9:5a:12:e3:
         61:f0:f7:ae:07:6c:2d:8a:ea:6c:11:88:7a:fa:18:16:2f:0e:
         48:fd:f9:4e:62:2e:90:fc:0e:bf:0c:32:08:03:12:f8:6f:07:
         ca:b3:ec:1b:c3:ea:55:f1:db:bd:9e:2f:0e:2a:b3:b3:93:96:
         21:bb:1a:b8:77:53:f1:89:0c:d9:e8:03:22:dc:11:5c:47:39:
         ac:c3:fd:61:a2:13:fe:f8:ae:31:e2:df:9f:bb:70:d7:ed:8a:
         c1:22:e8:8b:ab:fe:2e:b0:47:f5:79:23:41:bf:fb:04:53:df:
         c6:b7:4c:64:44:6e:84:4b:b1:7a:28:1b:fe:15:26:53:5d:db:
         97:a9:5b:eb:14:cb:93:95:50:87:dd:a8:35:1a:40:ed:d6:5b:
         76:8a:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:28 2026 by rpki-client