Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e342e302f32342d3234203d3e20313339343034.roa
File:                     3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (raw, json)
Hash identifier:          trtJ6caoi9E2cPVadT/x0hsZneaEQLzf3GDB3mta1B8=
Subject key identifier:   66:9B:6A:15:40:1F:E5:22:8A:AB:28:07:98:DB:9C:5B:78:38:40:FB
Certificate issuer:       /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20
Certificate serial:       1B8F4D3186F5EFB401982323D0C90F4689410849
Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e342e302f32342d3234203d3e20313339343034.roa
Signing time:             Sun 03 May 2026 02:44:30 +0000
ROA not before:           Sun 03 May 2026 02:39:30 +0000
ROA not after:            Sun 02 May 2027 02:44:30 +0000
asID:                     139404
IP address blocks:        103.143.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl
                          rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8f:4d:31:86:f5:ef:b4:01:98:23:23:d0:c9:0f:46:89:41:08:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20
        Validity
            Not Before: May  3 02:39:30 2026 GMT
            Not After : May  2 02:44:30 2027 GMT
        Subject: CN=669B6A15401FE5228AAB280798DB9C5B783840FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:6e:53:69:15:75:41:d7:9f:fd:4b:c5:b8:
                    3f:0f:fb:4c:6a:73:3d:b8:80:61:e7:c8:58:2d:e0:
                    e5:e9:ba:1d:2a:2d:19:e4:0a:5e:42:fd:33:45:92:
                    07:ed:41:64:18:c9:34:a5:cd:93:fa:5f:0f:4a:34:
                    6f:c7:ca:32:41:69:e9:22:29:04:b6:fa:a2:9a:37:
                    21:13:cc:ab:f3:e4:be:40:ee:ae:d1:3e:26:5b:c8:
                    ea:8e:e2:a9:10:f6:b0:19:bc:ed:22:4c:df:89:84:
                    f5:39:75:ce:62:58:26:c0:cc:32:70:30:3c:96:2c:
                    2e:b3:47:5a:03:95:d5:09:c5:78:7a:c0:44:1e:5b:
                    e4:53:9a:d7:7a:1c:2e:95:52:25:2d:87:79:b8:a6:
                    61:8a:04:b9:f2:45:7d:42:cc:c8:e3:45:29:10:dc:
                    f0:bf:49:d1:0a:24:c5:93:0b:5e:03:af:4b:59:d8:
                    38:c9:a4:2c:62:86:d0:b7:04:ad:f2:66:9f:e0:41:
                    c8:a8:57:d7:1d:da:24:07:2b:af:1c:9d:6a:65:3d:
                    db:db:35:12:3b:0c:a9:2b:f5:d1:04:74:74:d1:95:
                    9a:6b:3f:6b:e8:19:e0:7a:43:b0:10:87:df:aa:25:
                    98:e5:e2:e3:2f:28:10:c7:14:6b:92:e0:3c:91:e1:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9B:6A:15:40:1F:E5:22:8A:AB:28:07:98:DB:9C:5B:78:38:40:FB
            X509v3 Authority Key Identifier:
                keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e342e302f32342d3234203d3e20313339343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:d4:8c:31:41:c2:37:3e:65:09:ec:98:e6:4d:c9:94:1d:64:
         9d:3d:d5:44:c0:eb:35:6c:a7:06:2a:0f:ee:a7:83:8a:6f:f2:
         67:3e:39:20:c6:18:49:a5:10:2f:c5:61:f2:70:6a:e9:da:4e:
         a7:49:90:18:c0:a1:a3:a8:e3:cd:fc:10:0f:3f:e4:60:6d:db:
         31:03:71:92:a6:ff:4b:a8:94:6b:7b:a1:b1:a1:52:51:43:3c:
         c9:a3:93:9c:94:35:4a:d0:5b:93:ef:75:bc:9d:f2:41:3f:c9:
         23:d1:12:33:03:c2:f4:28:e8:ef:d1:18:ae:ff:f2:72:c5:3d:
         7e:d1:b1:3e:76:cc:96:7e:d9:3c:b7:02:4a:01:09:40:80:74:
         e0:b0:fd:fc:9a:15:14:96:ad:fc:bb:13:86:9e:ee:bf:ee:0d:
         7c:4a:46:30:0d:80:0b:21:d8:83:1c:cb:65:9a:62:12:fe:cb:
         b5:d0:81:7d:f9:33:d9:9d:49:05:94:ee:9d:d9:2f:43:b9:c8:
         77:16:95:c0:a4:54:0d:c2:2a:3f:32:24:d6:3a:bd:b6:27:8c:
         3c:b9:cc:0f:ec:bb:69:30:46:20:04:f3:8c:ac:6f:40:50:76:
         a2:3d:9d:8a:e0:be:47:7f:03:b0:b2:28:c4:14:35:c7:1e:a1:
         67:3e:42:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:12 2026 by rpki-client