Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa
File:                     3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier:          D+vBT8RjuXQRENNs+sRNnv0u+qOPPua7Ci6xauViEhY=
Subject key identifier:   B4:F4:E7:6E:DC:9C:EB:FE:36:4F:AC:10:C4:0C:B1:8C:12:A8:9D:11
Certificate issuer:       /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Certificate serial:       78D3ED5756BCD70D06FEA5BFFF88E165AB14FB46
Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa
Signing time:             Sun 03 May 2026 02:32:22 +0000
ROA not before:           Sun 03 May 2026 02:27:22 +0000
ROA not after:            Sun 02 May 2027 02:32:22 +0000
asID:                     141968
IP address blocks:        103.42.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
                          rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d3:ed:57:56:bc:d7:0d:06:fe:a5:bf:ff:88:e1:65:ab:14:fb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
        Validity
            Not Before: May  3 02:27:22 2026 GMT
            Not After : May  2 02:32:22 2027 GMT
        Subject: CN=B4F4E76EDC9CEBFE364FAC10C40CB18C12A89D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:31:7e:c6:74:dd:98:c8:9a:ad:9c:6e:63:
                    5d:e7:41:a8:53:1b:97:3f:0c:88:41:88:f7:ff:dd:
                    f9:1b:6d:1e:87:50:47:64:a5:f2:d3:bf:ba:0b:b2:
                    f6:a0:06:a3:f6:5b:0c:c3:d8:05:86:b2:1b:2c:a5:
                    a9:b3:92:b6:62:6b:58:32:76:3a:0e:a7:85:f1:0c:
                    d9:90:46:2c:a8:4d:f5:2c:63:b9:3a:e5:0d:f7:5d:
                    bf:85:1c:50:f4:18:fa:de:53:5b:e4:c5:60:66:57:
                    91:89:f4:71:b6:8c:06:f0:b1:63:c3:65:8f:e7:87:
                    6b:2f:7e:24:e0:ab:eb:8b:51:e4:7b:b3:3c:f9:5b:
                    10:ea:5b:70:83:a3:39:e9:18:35:c8:d5:86:7e:24:
                    cb:93:c1:74:38:d4:5b:04:1c:0e:0b:a2:1d:81:d3:
                    d6:12:5d:fa:22:cb:8d:d3:12:62:44:84:6d:bf:4a:
                    cc:21:54:b9:54:11:ca:f6:44:e8:ea:6b:94:52:1b:
                    04:6b:5c:c0:dd:fc:ba:99:15:9d:da:23:5b:37:71:
                    23:c1:ab:73:60:e0:c6:55:13:0e:37:18:b7:72:27:
                    86:84:c1:62:86:c1:35:73:75:43:1c:c5:a5:37:8b:
                    64:35:f5:56:23:36:d7:b0:ee:62:c5:c5:75:0d:93:
                    63:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F4:E7:6E:DC:9C:EB:FE:36:4F:AC:10:C4:0C:B1:8C:12:A8:9D:11
            X509v3 Authority Key Identifier:
                keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:c9:27:c7:4a:fd:2c:1e:16:64:44:da:ee:12:92:dd:ef:
         42:79:22:7a:1e:b3:d8:f2:01:00:2a:7a:31:5a:03:23:5f:1f:
         92:21:bb:58:ca:50:ee:4f:20:94:f2:5a:a9:f3:23:26:b5:02:
         b2:a2:c8:07:8d:89:d6:f1:a3:47:cb:13:45:f0:29:60:87:83:
         48:fb:19:94:d5:6e:32:96:fb:69:f0:63:1f:bd:88:f8:ef:8b:
         c8:68:9f:82:1b:10:50:ca:03:85:67:ab:18:bb:e9:d0:e2:c9:
         9a:cd:81:ba:d6:e0:62:5a:9f:69:59:36:af:48:46:95:f6:95:
         15:aa:2b:22:28:1b:0a:06:b6:36:82:55:e4:bb:d2:76:b1:d4:
         b3:fc:7e:28:c1:be:f2:43:89:e0:27:ce:a3:65:99:5e:50:33:
         f3:9c:d9:74:36:30:a5:88:61:77:7e:13:34:a9:c3:c3:d7:69:
         e5:b5:57:42:6d:93:13:aa:61:32:74:89:97:7a:cc:a5:93:e9:
         8d:2f:c8:61:ce:fc:47:51:3c:8e:e9:fd:21:10:a4:36:0f:63:
         da:44:df:11:db:43:f1:59:6e:17:78:e3:cb:30:7b:f5:53:05:
         49:3d:67:e2:d8:6f:50:a9:cd:27:f6:51:c5:49:3a:7d:9f:17:
         b1:b8:ca:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:45 2026 by rpki-client