Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/3130332e37342e3134332e302f32342d3234203d3e203436303334.roa
File:                     3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (raw, json)
Hash identifier:          Nk1xhHZXV5Jyg1FLRsoF8BjuMkVYDKCRPbEV62yPbSM=
Subject key identifier:   CF:01:DD:6D:8D:3C:17:26:2B:E6:00:3B:F2:34:82:A2:BE:8D:01:A6
Certificate issuer:       /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692
Certificate serial:       66EF4292D76C617B9EF571EE6DA052CEBBB3E149
Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/3130332e37342e3134332e302f32342d3234203d3e203436303334.roa
Signing time:             Sun 03 May 2026 02:32:30 +0000
ROA not before:           Sun 03 May 2026 02:27:30 +0000
ROA not after:            Sun 02 May 2027 02:32:30 +0000
asID:                     46034
IP address blocks:        103.74.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl
                          rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ef:42:92:d7:6c:61:7b:9e:f5:71:ee:6d:a0:52:ce:bb:b3:e1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692
        Validity
            Not Before: May  3 02:27:30 2026 GMT
            Not After : May  2 02:32:30 2027 GMT
        Subject: CN=CF01DD6D8D3C17262BE6003BF23482A2BE8D01A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:70:ec:bb:71:b8:eb:00:71:d5:f9:4e:7f:
                    a1:7c:5b:15:78:94:80:30:81:10:6c:67:01:37:76:
                    07:0d:96:f3:6c:ad:4d:b9:e3:21:30:da:df:72:0e:
                    85:fc:77:10:a1:17:24:c6:2c:0d:20:f7:fc:60:8a:
                    e7:a1:36:8c:b0:dc:70:72:40:10:d6:15:42:2e:b8:
                    82:18:08:e3:1e:ee:48:b6:92:fd:c3:b6:53:f7:5a:
                    bd:d6:5c:22:74:7a:e8:75:24:d1:fc:f0:8d:ea:7b:
                    45:7f:d7:4d:ed:6a:07:59:79:98:6c:25:cc:1e:12:
                    46:93:e7:d7:9e:37:f9:50:3b:da:5f:14:d8:d7:1c:
                    d1:be:8d:19:46:53:de:f7:33:c9:6a:3d:74:8f:d9:
                    a6:69:29:1e:d2:60:48:d1:11:9c:1a:5a:a5:ad:cb:
                    e7:ac:48:de:1a:50:37:f5:72:2f:51:bd:29:78:ad:
                    3a:33:cd:f3:31:0e:3f:b4:2c:5c:34:60:07:d0:07:
                    73:de:5d:b5:9d:e1:e6:f0:cd:c3:44:de:fb:ee:fb:
                    73:ad:ac:59:69:34:19:84:68:ae:45:92:12:21:b0:
                    55:37:81:c2:b1:09:02:4a:81:5e:af:91:61:d0:ac:
                    70:3d:8a:82:92:49:13:2d:cd:3b:a4:2d:b3:ad:de:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:01:DD:6D:8D:3C:17:26:2B:E6:00:3B:F2:34:82:A2:BE:8D:01:A6
            X509v3 Authority Key Identifier:
                keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/3130332e37342e3134332e302f32342d3234203d3e203436303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:91:cd:8d:fe:09:bf:88:b4:ee:76:ed:f6:a0:62:fe:95:34:
         ff:91:d6:09:a2:d3:c7:df:58:d5:55:9d:9f:77:4f:e2:e9:7b:
         2a:73:72:9c:2e:59:47:d9:0e:43:60:4b:e5:cd:b2:98:56:4b:
         cf:a1:2a:b3:2a:f3:7d:ef:03:39:bb:56:b6:03:07:c4:c6:8f:
         82:45:29:28:73:dd:60:f0:02:fa:2a:87:cb:6a:aa:3c:e4:11:
         b1:b5:1d:64:49:e0:00:2b:7c:17:3b:58:df:21:47:d8:9a:8d:
         c1:5c:f4:0c:15:57:22:ed:91:e6:79:c9:8a:5f:8b:77:7f:d1:
         6b:84:c2:29:26:d7:d2:6c:c3:19:28:97:73:9a:f0:55:bd:d0:
         84:04:96:ac:15:21:41:84:d8:e8:07:35:d1:97:51:99:08:14:
         47:71:c6:6b:f6:4d:24:47:cb:94:72:a3:f3:29:49:5c:0f:79:
         2d:2a:31:e9:2a:21:5e:a2:e5:50:3b:12:48:7f:6b:45:3b:e9:
         a8:db:06:b3:55:4a:a8:4e:a7:fa:5c:70:b3:e0:f3:b1:20:9d:
         f1:a2:22:1e:bd:05:07:3e:b6:6a:a8:a2:6f:d3:9b:90:79:5a:
         4c:14:4b:dd:f3:28:1a:b3:4d:14:cd:f6:e5:d7:3f:03:cd:77:
         12:ba:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:56 2026 by rpki-client