Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa
File:                     3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (raw, json)
Hash identifier:          IZSn7ER9gKZENb7Yh0xyvq6Sz0bKmm3RwSLw7ctssto=
Subject key identifier:   15:C6:94:22:55:85:48:43:1B:5E:81:51:6F:52:0A:17:43:0B:3C:D8
Certificate issuer:       /CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0
Certificate serial:       3823388F8CC7E8CBF4BB5402038A70EEEA00CCF3
Authority key identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa
Signing time:             Sun 03 May 2026 02:43:37 +0000
ROA not before:           Sun 03 May 2026 02:38:37 +0000
ROA not after:            Sun 02 May 2027 02:43:37 +0000
asID:                     149934
IP address blocks:        103.191.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl
                          rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:23:38:8f:8c:c7:e8:cb:f4:bb:54:02:03:8a:70:ee:ea:00:cc:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0
        Validity
            Not Before: May  3 02:38:37 2026 GMT
            Not After : May  2 02:43:37 2027 GMT
        Subject: CN=15C69422558548431B5E81516F520A17430B3CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:70:77:69:d7:17:e2:6d:3a:db:ed:8d:53:
                    98:e6:07:c3:bb:df:d3:19:7d:77:f8:dd:c7:8f:6a:
                    8d:3e:bc:22:c3:c4:14:89:28:ad:c5:b4:63:07:0b:
                    14:29:8a:1c:45:0a:07:f1:54:c7:7b:52:b8:06:1d:
                    e0:5b:30:71:33:b1:51:46:5b:47:d4:4e:b9:bf:eb:
                    c7:a1:d4:00:ed:2d:f7:fb:73:80:6d:d6:9a:62:d6:
                    0c:33:32:13:fa:45:66:cc:42:a3:a7:79:fe:08:be:
                    58:f7:ff:8c:f8:f5:96:c5:58:36:32:a0:fa:b7:40:
                    f3:45:dc:f6:f4:ae:96:c0:5d:93:32:f3:49:38:3d:
                    67:fc:94:0b:f2:39:f6:bf:95:19:7e:a5:cf:bd:02:
                    4b:41:16:3d:8b:cf:a4:c5:10:5f:cf:7a:4a:e9:a5:
                    2f:c2:79:8d:26:29:68:9a:6c:a0:38:6f:87:bf:8a:
                    9b:98:fd:ab:22:49:ad:d1:5f:9c:93:fe:44:6b:62:
                    ef:35:e3:76:d1:23:8d:3a:8e:f3:b5:41:ff:6c:19:
                    7c:42:0d:79:16:18:c3:74:2a:c5:d4:b8:65:23:94:
                    7c:ba:11:72:5e:e7:12:20:2f:d7:b5:c0:f3:6c:0a:
                    80:df:ff:17:f9:19:20:ea:e8:40:a0:56:47:d5:98:
                    57:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C6:94:22:55:85:48:43:1B:5E:81:51:6F:52:0A:17:43:0B:3C:D8
            X509v3 Authority Key Identifier:
                keyid:C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:9c:bf:b9:86:20:94:2e:50:5a:68:a9:c3:5d:ab:c4:7a:3b:
         fc:d9:98:cd:ea:6c:13:be:fe:ad:a2:0a:b0:f1:e0:a5:f0:fb:
         0b:36:29:18:a9:b6:5e:01:ac:ef:46:7d:5c:70:01:b0:58:a9:
         ab:b2:a0:01:55:e5:f2:8d:e8:61:31:14:0d:67:48:ef:f9:2e:
         89:e8:96:45:7e:0d:66:de:5d:5c:f2:3b:6a:28:57:b1:67:10:
         2a:5e:ed:17:6f:3e:5e:c5:85:de:10:e0:8c:12:8a:dc:8c:80:
         f6:09:9d:f9:7c:e0:fc:13:36:14:b1:1e:53:0b:58:cd:8b:a5:
         63:0e:1d:b7:cd:ab:80:ec:93:11:38:b9:68:b6:e1:6f:40:a6:
         e0:a5:de:da:e6:c1:f7:f0:e4:ad:ba:62:51:71:2b:48:4c:20:
         36:10:40:06:e5:14:08:55:1b:2a:d0:ad:ea:ca:77:78:fe:93:
         bc:23:f0:ce:b2:7b:0f:a8:01:15:f8:b4:5e:b7:c9:cf:75:01:
         59:e0:0a:1a:95:c8:95:38:7a:5e:00:a5:b5:11:1d:5b:4b:7e:
         6d:f7:43:76:b7:62:57:ab:32:09:03:f1:db:c9:8f:72:2f:a4:
         3e:84:ba:8e:aa:3a:4c:49:1c:9c:f9:c7:a0:59:52:30:e5:df:
         52:67:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:55 2026 by rpki-client