Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa
File:                     3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (raw, json)
Hash identifier:          m8ctD+xav7ZeI0n+/CZUY0lL5X8THNniko/PGJK1gwE=
Subject key identifier:   D7:52:69:C4:C5:09:80:A7:DC:27:5F:A5:E7:A7:33:82:E6:41:47:6B
Certificate issuer:       /CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5
Certificate serial:       EEDF685D40D0607DB5B16F2CB7BF0BD1F5767D
Authority key identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa
Signing time:             Sun 03 May 2026 02:32:14 +0000
ROA not before:           Sun 03 May 2026 02:27:14 +0000
ROA not after:            Sun 02 May 2027 02:32:14 +0000
asID:                     136064
IP address blocks:        103.83.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl
                          rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ee:df:68:5d:40:d0:60:7d:b5:b1:6f:2c:b7:bf:0b:d1:f5:76:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5
        Validity
            Not Before: May  3 02:27:14 2026 GMT
            Not After : May  2 02:32:14 2027 GMT
        Subject: CN=D75269C4C50980A7DC275FA5E7A73382E641476B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:d6:5e:ac:ec:4a:e5:97:95:ae:73:26:40:
                    8f:11:00:bd:ed:ba:ce:e2:aa:7a:34:ed:71:33:13:
                    3d:a6:43:43:ae:97:6e:6c:59:c3:6d:78:8d:1e:d0:
                    9c:81:36:db:5c:7d:35:35:98:28:ae:a7:e5:69:1f:
                    80:19:9a:5a:d7:2a:4d:ab:48:67:49:0c:ce:2c:9e:
                    13:d4:3a:3e:f9:a3:0f:d0:13:d6:1a:a3:16:04:c2:
                    a8:68:ba:93:00:02:bf:ae:67:ed:4a:a6:ef:fa:f2:
                    f7:c4:b7:a0:a8:ec:f3:a0:c7:dd:ad:b8:04:5c:1e:
                    89:85:5e:6d:22:a1:7f:38:58:c6:3f:8c:2e:d8:59:
                    51:88:bf:aa:ba:2d:71:9d:08:d4:20:8c:73:3a:aa:
                    a4:59:dc:6b:24:56:c0:7a:06:98:84:df:5b:b9:0a:
                    b3:2d:27:74:89:f8:1f:9e:9d:5f:e6:9e:e4:63:39:
                    07:41:58:75:5a:29:13:f0:d8:6c:b0:f7:27:ac:20:
                    74:c5:f8:6d:50:a0:d4:4d:c2:0a:b2:41:65:1e:f0:
                    6c:8e:25:cd:36:bf:a1:68:25:f6:80:74:dd:60:ba:
                    92:16:66:62:c9:7c:1e:5c:73:3a:bd:46:5c:13:a4:
                    ac:56:ed:5e:9a:82:ce:b6:c6:76:9e:71:c5:89:f6:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:52:69:C4:C5:09:80:A7:DC:27:5F:A5:E7:A7:33:82:E6:41:47:6B
            X509v3 Authority Key Identifier:
                keyid:79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:27:3a:bc:e4:b4:71:f1:fe:03:cc:84:c5:4c:57:63:10:bb:
         bd:68:74:05:74:b6:09:79:dd:9c:c7:0c:28:5e:ee:22:6f:99:
         21:3b:df:e3:de:87:23:da:8c:54:fe:1a:6f:58:45:80:6f:fb:
         fa:a4:cf:7c:0a:4e:71:4f:4d:71:71:dc:c7:0f:10:a1:e9:87:
         07:c1:c8:c2:68:e7:78:2d:1b:a3:2e:7c:9f:35:0e:04:ad:0c:
         5b:4d:68:86:66:d2:5d:32:b1:e2:69:ce:e4:92:89:39:f1:8e:
         61:0a:66:ed:22:d7:d4:59:c6:e0:99:f0:80:40:dc:25:d7:e7:
         a5:cc:47:e4:71:9a:c7:f3:9a:68:2b:e9:a4:d8:6e:5f:f1:de:
         1c:83:94:d0:2f:e6:de:a6:bb:50:e6:c5:ea:3d:7f:13:18:59:
         05:a9:ee:69:a2:21:44:d6:58:95:8a:95:63:d1:8a:9b:d8:1e:
         1f:b7:fb:ad:4b:f5:48:07:be:a4:59:87:11:e9:53:57:35:82:
         29:61:b6:02:68:57:aa:45:72:2f:00:38:a1:e3:ce:62:1f:e1:
         0b:a8:6b:94:b7:9d:11:bd:91:48:02:cc:8f:ef:23:b7:38:2a:
         86:e3:23:74:15:ba:e1:a4:5c:dc:c0:72:00:6d:ef:49:98:33:
         e9:9f:26:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:20 2026 by rpki-client