Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32332d3234203d3e20313431393232.roa
File:                     3130332e3136352e3135302e302f32332d3234203d3e20313431393232.roa (raw, json)
Hash identifier:          fbyQtezygAQ2Vtuvtn/pEzqltpTygJFu6isiiR3uTDQ=
Subject key identifier:   20:B0:14:3A:3A:00:77:2F:11:29:7E:B5:BE:E8:57:C9:C6:2D:1C:7B
Certificate issuer:       /CN=5F441BABFBED234BB058636F31EC54F08F118D05
Certificate serial:       276ED2FF1BC30E6C2FF95F4401AD02C6C5A596E0
Authority key identifier: 5F:44:1B:AB:FB:ED:23:4B:B0:58:63:6F:31:EC:54:F0:8F:11:8D:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F441BABFBED234BB058636F31EC54F08F118D05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32332d3234203d3e20313431393232.roa
Signing time:             Sun 03 May 2026 02:44:32 +0000
ROA not before:           Sun 03 May 2026 02:39:32 +0000
ROA not after:            Sun 02 May 2027 02:44:32 +0000
asID:                     141922
IP address blocks:        103.165.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/5F441BABFBED234BB058636F31EC54F08F118D05.crl
                          rsync://rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/5F441BABFBED234BB058636F31EC54F08F118D05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F441BABFBED234BB058636F31EC54F08F118D05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6e:d2:ff:1b:c3:0e:6c:2f:f9:5f:44:01:ad:02:c6:c5:a5:96:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F441BABFBED234BB058636F31EC54F08F118D05
        Validity
            Not Before: May  3 02:39:32 2026 GMT
            Not After : May  2 02:44:32 2027 GMT
        Subject: CN=20B0143A3A00772F11297EB5BEE857C9C62D1C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c2:ba:85:25:52:65:94:a8:27:ab:20:ec:f6:
                    41:b4:e2:dc:25:df:98:a5:21:8d:c4:6a:b9:d2:21:
                    c3:8f:8e:b5:34:5b:a2:37:b6:1f:4d:b0:f4:cf:31:
                    bd:c9:dc:44:b9:59:2b:9d:4f:20:a4:08:b4:6b:d8:
                    34:5d:18:ae:32:48:de:07:c0:f7:07:81:8e:e3:ef:
                    31:ec:77:82:0f:1b:e5:6c:04:d1:6d:0e:6e:5d:82:
                    66:c1:5a:31:39:ff:74:7c:81:b6:0d:37:e2:70:8d:
                    3f:ca:76:c9:b1:0c:f0:47:81:58:9a:74:e3:ab:4f:
                    c7:a8:a0:49:d1:1e:93:0b:b6:04:55:a6:8a:c0:f6:
                    f1:ad:9e:4c:a5:0b:b5:16:7d:79:6d:d6:6f:df:0d:
                    94:be:b0:3b:3c:c7:b6:be:3b:6e:8e:08:2b:4d:19:
                    22:37:0c:a0:8d:ef:b2:d5:1f:67:a2:f2:bf:14:6a:
                    0f:de:47:5c:8b:42:e1:a2:95:15:4d:0c:47:ef:04:
                    df:df:3d:27:30:fe:90:0f:d1:e2:2b:a7:f4:d3:eb:
                    c8:4e:af:89:fb:3b:62:d3:0f:43:b0:eb:92:13:e7:
                    73:94:32:ea:e9:2d:fd:88:7c:94:3b:c9:2b:9f:91:
                    fd:45:fb:41:9f:d4:0f:ea:9d:7c:a7:d3:61:81:92:
                    5e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B0:14:3A:3A:00:77:2F:11:29:7E:B5:BE:E8:57:C9:C6:2D:1C:7B
            X509v3 Authority Key Identifier:
                keyid:5F:44:1B:AB:FB:ED:23:4B:B0:58:63:6F:31:EC:54:F0:8F:11:8D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/5F441BABFBED234BB058636F31EC54F08F118D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F441BABFBED234BB058636F31EC54F08F118D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32332d3234203d3e20313431393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:95:00:04:04:73:7f:67:8a:c9:6e:61:9e:4a:54:a7:70:0e:
         ce:50:8e:6f:74:0b:a9:33:72:a2:c5:d8:f8:72:da:e2:30:72:
         01:d6:2a:8e:2b:74:f8:f2:21:8a:57:b5:9c:08:ab:57:cb:7d:
         2f:33:79:6d:42:09:07:2a:44:c3:4b:62:10:ca:de:0d:fa:06:
         ff:8f:17:5a:ee:b0:5e:54:df:b4:80:35:98:70:13:03:bc:ca:
         eb:d0:3f:91:d4:3f:c8:5c:9a:2c:22:04:53:02:7e:8a:1e:0b:
         db:e9:a6:b1:84:30:d8:dc:6d:02:0c:68:3e:7a:94:52:8c:68:
         d7:c6:d4:42:f6:c6:f5:75:94:1f:1b:d4:55:6c:6f:79:09:92:
         86:f5:9e:f6:6d:f5:02:fe:a1:f7:1e:08:8d:02:b8:26:bf:d0:
         2f:2f:fe:c7:7f:19:a4:c7:36:88:01:d5:7f:da:97:44:89:f5:
         d5:2a:f4:aa:63:13:c2:28:e3:ac:a3:88:15:a8:52:a0:0e:2b:
         51:f3:d9:f7:de:57:5a:c2:a7:01:b2:f5:90:1c:a6:e4:36:f5:
         96:21:72:be:e1:71:7e:c5:03:55:4f:a2:14:5d:06:13:4d:ec:
         d7:d9:7d:41:8e:31:85:9a:4c:1c:f9:59:0e:7d:01:62:3b:33:
         d5:a7:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:44 2026 by rpki-client