Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32342e302f32342d3234203d3e203536323432.roa
File:                     3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (raw, json)
Hash identifier:          CRlStcVLlPbgkaOXZGS+9wEQ7WP2ijdeiyB/zUIWiTs=
Subject key identifier:   94:93:F1:4B:75:1D:FE:09:61:70:31:37:08:CA:73:D4:83:FD:91:2A
Certificate issuer:       /CN=636964CD271D2009F5B6D34255EB744F3791245D
Certificate serial:       39F4F5C25FBE59C76A213E88978E35279E5CBD64
Authority key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32342e302f32342d3234203d3e203536323432.roa
Signing time:             Sun 03 May 2026 02:39:40 +0000
ROA not before:           Sun 03 May 2026 02:34:40 +0000
ROA not after:            Sun 02 May 2027 02:39:40 +0000
asID:                     56242
IP address blocks:        103.143.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl
                          rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f4:f5:c2:5f:be:59:c7:6a:21:3e:88:97:8e:35:27:9e:5c:bd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636964CD271D2009F5B6D34255EB744F3791245D
        Validity
            Not Before: May  3 02:34:40 2026 GMT
            Not After : May  2 02:39:40 2027 GMT
        Subject: CN=9493F14B751DFE096170313708CA73D483FD912A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:51:e3:ae:46:ea:ce:0c:99:7e:ca:18:38:
                    4f:26:10:0b:7f:c4:52:3c:b3:57:f1:2a:72:a1:24:
                    70:78:93:de:e1:00:02:63:9a:4f:5b:76:7c:af:7b:
                    4e:21:d3:da:27:5c:30:75:6e:f7:83:75:0c:c6:e8:
                    19:5d:b1:53:c1:72:44:4b:c0:5b:e3:ba:ec:e3:94:
                    d3:12:86:95:fd:74:b6:ac:8a:7d:8c:49:7a:83:c3:
                    6d:ad:da:54:23:a3:99:6b:9b:6a:7b:68:2a:f1:a5:
                    46:50:a6:f3:e6:67:6e:3f:0a:0d:a3:db:da:0d:81:
                    57:75:0d:f0:e0:ee:bc:d6:eb:28:d2:e5:1d:57:42:
                    11:19:94:dc:48:36:d3:ec:3c:32:0b:82:66:49:0f:
                    59:a9:59:4e:d4:78:2c:5a:39:f4:76:86:cf:f3:11:
                    51:99:80:15:6f:7a:88:67:0f:75:cf:90:8f:75:67:
                    c8:a1:0b:98:0d:28:28:f2:95:bf:97:70:e3:1d:30:
                    9f:43:da:3d:85:86:25:32:39:cc:6c:09:0f:88:fc:
                    2c:ca:5a:0e:c2:68:a6:b4:fc:ac:c8:6b:28:4a:ed:
                    42:44:d5:cd:57:ae:0d:b0:19:77:3d:17:08:d4:ff:
                    36:02:db:b1:7d:74:e7:55:93:38:3b:e5:20:24:cb:
                    55:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:F1:4B:75:1D:FE:09:61:70:31:37:08:CA:73:D4:83:FD:91:2A
            X509v3 Authority Key Identifier:
                keyid:63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32342e302f32342d3234203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d3:c0:f5:09:24:13:55:96:42:e5:41:8f:d2:55:ee:f1:30:
         a9:eb:71:a9:72:16:b5:0e:64:49:e6:3a:3c:85:01:cb:36:53:
         b6:93:ed:ba:81:a9:bb:27:a5:f9:62:d0:1c:de:93:cc:d3:17:
         de:cd:0b:d4:d7:cf:ad:26:4f:93:10:c3:31:3f:0f:87:dc:35:
         43:55:66:7e:99:5d:91:9c:30:66:07:d8:84:96:c4:d3:44:f7:
         1c:30:ba:f5:2e:dd:7b:d3:b2:49:02:2c:28:b7:f9:ab:33:d8:
         e8:f9:04:89:c6:bc:7a:e7:f6:42:6a:45:0e:03:8f:56:a9:c4:
         c7:63:a7:93:76:ce:5e:af:4b:df:75:ac:0d:4d:e8:94:eb:a3:
         fc:52:ca:96:1c:9e:65:4d:9e:85:f7:41:05:de:93:49:af:48:
         e9:8d:3c:a2:e7:50:c7:5a:01:02:93:c3:c0:45:5d:c7:50:f5:
         42:23:8b:b7:20:ff:9e:b5:68:b6:b8:b1:5f:fa:49:ce:c8:12:
         c6:88:92:5a:b1:16:57:03:d3:42:4c:b8:43:b1:81:98:98:c1:
         b8:a3:69:a9:aa:17:18:c7:8c:0c:91:9d:20:c8:85:d5:3c:8a:
         fd:06:1f:58:d2:de:0f:29:ee:3a:b2:a7:0b:2f:a7:75:3e:27:
         7e:6a:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:45 2026 by rpki-client