Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa
File:                     3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (raw, json)
Hash identifier:          rDhWNdSE+MiC9nWV9xic84xxhEExen6QKYzm8hSRAZY=
Subject key identifier:   67:46:C6:52:BA:99:40:D9:A1:01:7D:3A:E5:8B:D7:E7:8F:BB:82:8D
Certificate issuer:       /CN=9E6973F078195021DC7E37753A16BDC3BD2CE345
Certificate serial:       118CC4EC05202BBF3CC6CACDCBD5D49251123CBA
Authority key identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa
Signing time:             Sun 03 May 2026 02:40:14 +0000
ROA not before:           Sun 03 May 2026 02:35:14 +0000
ROA not after:            Sun 02 May 2027 02:40:14 +0000
asID:                     134650
IP address blocks:        103.164.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl
                          rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8c:c4:ec:05:20:2b:bf:3c:c6:ca:cd:cb:d5:d4:92:51:12:3c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6973F078195021DC7E37753A16BDC3BD2CE345
        Validity
            Not Before: May  3 02:35:14 2026 GMT
            Not After : May  2 02:40:14 2027 GMT
        Subject: CN=6746C652BA9940D9A1017D3AE58BD7E78FBB828D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:60:5e:d3:b5:80:3c:c1:f4:f2:e4:b3:94:
                    3b:60:8b:f9:5a:4f:c5:45:8f:18:29:ef:ca:41:84:
                    7e:78:a7:ea:18:0c:60:34:d1:dc:c0:41:3f:7e:ac:
                    7b:65:22:12:0b:ad:20:fa:c1:2d:47:a9:53:d9:4d:
                    db:19:3a:a0:4a:c9:c7:05:40:ec:f9:c0:e6:8a:8e:
                    52:1b:95:a7:72:fd:29:72:43:f9:c4:7f:76:86:35:
                    81:f5:79:62:9a:83:1e:ed:fe:71:54:58:a8:26:46:
                    2d:a2:12:d3:fb:e2:e5:6e:1f:5f:bb:b3:3f:84:1e:
                    13:57:c5:bd:b0:d0:5d:f1:98:3c:f0:d7:9a:19:5a:
                    fa:19:55:e6:7d:5c:0b:b7:57:c5:77:85:73:6b:43:
                    66:cb:03:42:2b:d4:34:e8:30:03:b5:62:66:3e:29:
                    94:2c:b5:24:5c:1c:45:63:dd:f6:fa:b5:70:f5:15:
                    00:38:a8:7b:3f:6d:cf:52:63:48:13:1d:e6:c8:b7:
                    9a:f6:e7:e4:fa:5a:32:b0:63:b3:f3:79:cd:43:df:
                    81:69:82:8b:0d:d0:4b:9f:8d:75:40:06:2a:3c:84:
                    e2:ab:c3:97:12:e7:b0:f6:81:9f:77:14:6a:09:86:
                    33:97:25:27:31:45:60:7e:a7:79:9c:22:cc:54:72:
                    3a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:46:C6:52:BA:99:40:D9:A1:01:7D:3A:E5:8B:D7:E7:8F:BB:82:8D
            X509v3 Authority Key Identifier:
                keyid:9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:28:11:af:1f:81:95:4c:dd:1e:de:b0:97:da:fc:6d:4b:
         bc:f0:be:f9:56:e8:09:28:84:33:71:57:0b:59:37:6f:1e:3b:
         4f:b2:79:ad:4b:af:3b:cc:51:2c:f0:48:96:0a:89:c6:d9:d6:
         3c:6d:95:b4:9f:32:07:9c:86:c4:1a:46:7e:22:2f:96:01:ef:
         ba:35:27:81:10:c7:4a:b4:52:6d:86:35:71:cd:11:27:ca:c9:
         de:cb:d2:a9:46:39:66:7e:b1:f4:8a:4c:ac:35:e8:04:ac:79:
         79:1b:d2:74:bd:de:f6:fb:db:0b:5c:ce:bd:c1:92:94:34:51:
         2e:b7:ef:a6:1f:bb:71:12:cf:16:5e:6e:cc:16:eb:2a:56:15:
         18:74:75:e4:07:df:12:ca:ef:8b:89:a0:ca:a6:ae:f0:79:0a:
         11:af:b3:c0:42:4f:5f:a3:6a:55:2b:24:a0:6c:78:d5:ae:68:
         66:ef:40:53:a3:38:89:40:8c:f1:84:60:9b:11:f6:b1:18:77:
         52:db:c1:4a:e3:9b:fe:c3:0a:dc:b3:25:f1:2a:e6:d6:f0:92:
         1e:73:8f:68:15:74:ea:10:ab:26:a7:08:60:f9:98:20:14:36:
         7e:b0:1d:f7:af:5b:b9:3f:1a:ce:c8:ee:87:47:22:a1:9f:9e:
         ca:dd:4e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:35 2026 by rpki-client