Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa
File:                     3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (raw, json)
Hash identifier:          YhKAzrow8fDAadjaSnduhgqC89vTvIB1S39dbE3C1og=
Subject key identifier:   12:1B:64:20:54:9D:2E:5C:5B:50:22:CB:16:DF:FE:AE:9C:54:CC:01
Certificate issuer:       /CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC
Certificate serial:       631509751CAF9112BCA6F97C88D13F17D05FA989
Authority key identifier: 1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa
Signing time:             Sun 03 May 2026 02:40:13 +0000
ROA not before:           Sun 03 May 2026 02:35:13 +0000
ROA not after:            Sun 02 May 2027 02:40:13 +0000
asID:                     142370
IP address blocks:        103.169.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl
                          rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:15:09:75:1c:af:91:12:bc:a6:f9:7c:88:d1:3f:17:d0:5f:a9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC
        Validity
            Not Before: May  3 02:35:13 2026 GMT
            Not After : May  2 02:40:13 2027 GMT
        Subject: CN=121B6420549D2E5C5B5022CB16DFFEAE9C54CC01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:93:44:2c:be:fc:b0:a4:2d:45:f8:54:09:
                    d4:e8:62:03:6f:f7:b7:d3:74:f6:4e:53:ad:a2:bc:
                    e8:a7:70:99:77:12:98:cb:47:9a:47:ef:fb:3e:8f:
                    fb:5d:c3:7e:73:55:dd:5f:95:f7:45:1e:42:e5:14:
                    03:43:a2:50:97:6c:5d:a5:05:6b:d6:83:2f:20:a7:
                    bc:7e:6a:0a:22:7d:48:4b:b9:69:25:81:c3:34:5d:
                    e5:de:14:0c:ae:0a:3e:2b:a9:24:b6:5b:dd:6d:04:
                    3d:00:5d:d2:4e:9a:8c:eb:fb:5b:6d:ac:cc:d3:17:
                    1f:e6:14:ea:20:33:2a:4d:01:02:14:ab:12:27:9c:
                    52:b7:a1:87:10:b3:ac:f8:4d:96:96:cb:36:85:c4:
                    62:ef:2d:95:4d:49:71:98:76:e1:88:ad:ce:2e:64:
                    6f:77:07:4d:13:55:3f:f7:b2:c8:fb:c8:ae:1c:e2:
                    57:bd:ac:fc:71:4d:43:fe:66:5d:e8:e8:a7:5e:df:
                    b9:8b:0f:38:29:8e:7a:a5:52:4c:ec:b1:d1:e6:88:
                    b0:e2:a7:69:c1:d6:53:fd:50:63:97:c4:c6:b4:e5:
                    51:a2:0b:2f:f1:30:cf:e2:1b:bb:4a:bf:92:cc:86:
                    dd:8a:03:95:71:c4:0c:97:95:6c:40:49:be:1f:80:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1B:64:20:54:9D:2E:5C:5B:50:22:CB:16:DF:FE:AE:9C:54:CC:01
            X509v3 Authority Key Identifier:
                keyid:1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:d5:98:53:a0:c0:bb:5f:6c:00:60:c1:2e:90:1d:9f:53:bc:
         6b:2a:80:79:3f:d4:e7:35:9d:79:fa:5d:ef:35:b1:a3:0f:73:
         81:1f:93:a6:fa:db:ed:2d:56:9b:0f:7c:7a:af:80:aa:f3:b3:
         7e:e0:a8:1a:13:d2:e8:4e:95:64:e1:3c:c1:eb:cc:39:a8:3b:
         41:40:74:fb:0c:ca:6d:5a:bb:b1:05:34:2b:2f:d0:a5:4a:ed:
         8b:bc:71:f8:dd:45:46:70:76:c2:77:a5:30:37:2a:dd:9d:86:
         8f:9b:d6:3f:b1:5e:5e:1d:3e:5c:68:8e:db:d2:a1:ad:0d:67:
         b6:d7:bb:fb:08:7a:72:e2:23:1c:d3:b1:d7:72:e9:29:0d:e0:
         a6:44:8e:30:d6:2d:1a:46:d5:1b:21:8f:03:df:5b:a4:32:e3:
         b5:52:7a:5c:6e:b6:da:c3:64:a3:44:4d:eb:81:7a:4a:fc:aa:
         fb:82:39:0d:eb:92:a3:69:c6:bb:32:85:76:8e:3d:a1:f6:37:
         2c:df:3b:61:c2:73:46:73:b6:d2:43:e5:07:f4:70:9b:1e:19:
         cd:03:bb:66:c3:08:61:70:3d:b1:da:9a:c9:87:4e:76:ee:36:
         c4:db:99:41:39:2a:6c:87:b3:6f:89:2c:82:a7:03:35:86:1a:
         65:b1:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:17 2026 by rpki-client