Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa
File:                     3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (raw, json)
Hash identifier:          bTctqXrHoddHLmiHRZEAbvepwDnyNZuBmN3yjSF/QUg=
Subject key identifier:   A9:93:2D:5F:19:81:D0:7A:26:1E:00:F2:13:39:74:E8:45:D2:09:2A
Certificate issuer:       /CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Certificate serial:       70138693E095C1EFF2A325C525CE256DADC91271
Authority key identifier: 9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa
Signing time:             Sun 03 May 2026 02:42:39 +0000
ROA not before:           Sun 03 May 2026 02:37:39 +0000
ROA not after:            Sun 02 May 2027 02:42:39 +0000
asID:                     140407
IP address blocks:        103.122.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
                          rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:13:86:93:e0:95:c1:ef:f2:a3:25:c5:25:ce:25:6d:ad:c9:12:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
        Validity
            Not Before: May  3 02:37:39 2026 GMT
            Not After : May  2 02:42:39 2027 GMT
        Subject: CN=A9932D5F1981D07A261E00F2133974E845D2092A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:d3:30:52:a9:42:5d:ac:03:24:8e:29:89:
                    2e:ee:59:2e:f5:67:8e:63:07:2e:da:d4:d5:07:30:
                    a4:3b:49:93:d3:42:b0:3b:c7:11:e9:cd:92:6b:05:
                    d2:cf:0e:75:49:64:f1:57:7b:b4:7c:97:ce:77:49:
                    fb:0b:bf:24:e3:2c:79:4f:19:2d:f6:64:91:03:36:
                    c6:e3:d7:7b:b6:fc:82:ce:97:47:17:3c:17:9a:eb:
                    45:d7:5d:0a:b2:36:f9:5e:b1:5b:56:02:a4:f3:d6:
                    b5:cc:df:35:e8:e5:12:72:3c:d9:19:fa:55:5d:f6:
                    ad:4c:b7:fc:86:b2:14:12:68:c5:75:a0:51:c7:6d:
                    c9:aa:9b:e2:46:75:07:ce:97:cb:aa:51:c2:83:a6:
                    14:fd:1c:16:b4:8e:47:59:90:57:0d:11:3f:af:8f:
                    de:a2:85:e9:3c:86:56:db:30:62:56:3b:9c:4b:f7:
                    62:a3:8c:59:bf:52:2d:91:32:1b:d4:28:77:59:83:
                    11:ca:f4:45:ef:8e:bc:5b:63:f4:71:95:bd:46:83:
                    2d:26:1a:0c:f1:e0:6a:01:55:15:1d:7d:06:10:db:
                    f1:d7:da:ea:6c:9c:00:a6:68:29:4e:0b:d9:c9:35:
                    08:89:ca:da:41:f4:20:1e:6f:60:8e:33:b6:a0:ea:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:93:2D:5F:19:81:D0:7A:26:1E:00:F2:13:39:74:E8:45:D2:09:2A
            X509v3 Authority Key Identifier:
                keyid:9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:d1:1c:fe:ab:49:7d:8d:f7:df:a9:c8:ed:03:8e:d4:5f:
         63:98:54:3f:08:ce:78:43:26:fd:89:d6:a3:47:07:66:b2:ad:
         b3:76:d8:ad:41:b6:20:34:59:b3:3b:93:56:28:39:a1:e3:62:
         96:f6:97:3c:8f:6a:9d:37:ff:b6:2c:22:87:6e:ac:f8:20:b7:
         c7:03:9b:a9:38:3b:47:66:d5:cc:fe:47:15:f9:26:3f:da:b0:
         b6:ac:5e:0a:10:68:c7:74:c1:03:c8:61:58:52:b2:5d:94:d0:
         a5:cf:f6:24:f9:ab:42:e7:f6:63:c2:7b:d8:03:10:f7:f0:c7:
         e7:f8:dd:71:84:43:4e:fa:43:dd:da:ef:57:1d:53:2a:fe:09:
         5a:18:43:f5:bf:fe:74:8f:f6:40:45:af:55:2b:90:19:44:b0:
         2c:5b:03:ef:7c:0c:18:72:d2:79:46:67:6b:fc:48:27:d5:21:
         d8:a7:9f:a9:ba:8f:4c:86:e2:02:5c:67:79:59:c2:17:f4:e2:
         5c:31:2e:27:df:c3:17:35:6d:6f:fd:60:38:37:b1:4f:1d:21:
         fe:0c:71:db:b9:5a:e9:9d:5b:42:79:05:ff:cf:bd:2c:15:e9:
         a3:6b:50:84:21:b3:d3:4c:d5:96:5d:f8:73:11:73:5e:5a:cf:
         a2:00:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:42 2026 by rpki-client