Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/3130332e3136372e322e302f32342d3234203d3e20313431393637.roa
File:                     3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (raw, json)
Hash identifier:          yDrVyoeowwpodsmIoAkE1qIpwTZ6W9Penvq2Oshsmwc=
Subject key identifier:   ED:09:D6:1D:71:32:40:A9:AD:EF:06:73:85:01:CB:93:84:51:FC:3E
Certificate issuer:       /CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD
Certificate serial:       53D8B0E784368A13E1E5CFC386C8E30515F288E3
Authority key identifier: FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/3130332e3136372e322e302f32342d3234203d3e20313431393637.roa
Signing time:             Sun 03 May 2026 02:45:55 +0000
ROA not before:           Sun 03 May 2026 02:40:55 +0000
ROA not after:            Sun 02 May 2027 02:45:55 +0000
asID:                     141967
IP address blocks:        103.167.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl
                          rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d8:b0:e7:84:36:8a:13:e1:e5:cf:c3:86:c8:e3:05:15:f2:88:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD
        Validity
            Not Before: May  3 02:40:55 2026 GMT
            Not After : May  2 02:45:55 2027 GMT
        Subject: CN=ED09D61D713240A9ADEF06738501CB938451FC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:9f:ad:04:9d:b7:f2:24:92:7f:f2:1f:cb:
                    b5:fe:ed:a8:37:01:d9:52:9d:37:3d:21:7e:22:cb:
                    b3:4d:e4:12:72:64:0d:91:f4:9a:9f:b8:b6:18:9d:
                    b2:5d:40:e4:7f:f5:7c:e4:fc:10:5c:d4:60:be:33:
                    6d:63:17:cf:5d:1f:31:ab:5c:ca:84:10:bd:11:e2:
                    66:21:67:11:22:4f:41:ed:97:24:c8:cb:75:17:1e:
                    de:3e:6e:ad:e2:20:68:83:e9:96:44:e2:fe:b3:c7:
                    25:c7:06:1a:0a:3e:40:ea:6f:52:4e:58:7f:f2:61:
                    77:76:73:57:63:17:c2:1c:5a:8a:3f:26:dc:21:1c:
                    80:d3:9c:39:db:50:64:04:98:4e:b2:38:cf:36:34:
                    dd:bc:7f:24:74:1f:dd:cf:d6:ee:5b:97:81:8d:ff:
                    a2:98:60:73:5d:f5:5f:2b:b6:57:35:91:78:8e:e9:
                    8a:7c:d7:51:c5:76:dd:94:ab:fc:4b:b2:8e:39:6e:
                    08:c2:0c:1b:9c:b0:43:d3:d9:5d:95:6a:66:39:3f:
                    cc:e6:75:c4:19:4f:ae:8d:7f:47:2b:49:9f:c9:d1:
                    06:c8:d5:2f:0c:e9:eb:f4:9b:f9:d3:b8:3b:49:1b:
                    b3:87:d0:d7:7b:a7:a7:1e:d0:25:74:fb:09:8d:3e:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:09:D6:1D:71:32:40:A9:AD:EF:06:73:85:01:CB:93:84:51:FC:3E
            X509v3 Authority Key Identifier:
                keyid:FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/3130332e3136372e322e302f32342d3234203d3e20313431393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:91:f1:49:1b:f5:82:7e:dc:0c:04:62:93:16:a1:8f:0e:67:
         08:ab:ce:93:a8:bd:96:a8:29:ad:76:45:dd:b6:6e:6d:f6:5e:
         c2:04:a1:2d:bc:50:cf:fd:66:37:a5:6c:9f:2c:0f:ff:7e:47:
         bf:23:51:19:c9:f5:29:99:ba:6b:1e:6f:f3:fd:eb:08:8d:a9:
         71:93:12:96:59:0d:1a:18:8b:dd:a5:f5:2c:f0:86:41:35:1a:
         39:03:1f:44:ec:7a:72:90:ad:38:28:5f:be:36:1d:7c:3c:74:
         ac:b9:80:b2:7e:15:c5:5e:d9:c1:b3:2f:d8:b9:03:9d:d8:fb:
         1d:a2:e0:81:07:60:c7:f4:3d:25:a0:08:55:96:67:3d:15:e2:
         c4:9c:34:b4:f9:a1:88:6d:8e:10:55:76:9f:7d:17:f6:6e:86:
         24:06:f9:6b:41:de:5f:ba:c2:1c:9a:b1:6c:3f:88:3f:8a:53:
         90:11:64:3e:b8:a1:bd:34:d2:26:c0:c1:0c:a6:b2:3a:4a:c9:
         1a:25:5a:a3:8f:48:05:d7:a7:72:6d:a5:3f:6f:b5:d9:b7:78:
         7c:fb:0d:91:4e:30:83:97:25:c9:d2:8b:13:eb:24:97:15:99:
         f2:36:58:83:64:60:1f:b3:c8:3e:4b:53:f8:fc:28:38:cf:18:
         73:19:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:23 2026 by rpki-client