Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa
File:                     3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier:          8HBG0p89815vWKkauI6Wn4NeMLGP4fCVAgDc4tDqrGk=
Subject key identifier:   92:04:10:F3:47:DD:63:67:94:84:99:8B:E6:B5:1A:CD:CD:B1:B1:49
Certificate issuer:       /CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC
Certificate serial:       3935B755270326237252E2830825425B760563
Authority key identifier: 9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa
Signing time:             Sun 03 May 2026 02:47:22 +0000
ROA not before:           Sun 03 May 2026 02:42:22 +0000
ROA not after:            Sun 02 May 2027 02:47:22 +0000
asID:                     139967
IP address blocks:        103.169.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl
                          rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:35:b7:55:27:03:26:23:72:52:e2:83:08:25:42:5b:76:05:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC
        Validity
            Not Before: May  3 02:42:22 2026 GMT
            Not After : May  2 02:47:22 2027 GMT
        Subject: CN=920410F347DD63679484998BE6B51ACDCDB1B149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:ec:9e:f3:7b:c7:91:f9:d8:cf:20:2a:d9:
                    be:e3:ff:5f:f3:16:83:75:bd:74:0a:e9:6e:7e:6c:
                    cc:2b:ea:90:81:b0:85:4b:1c:c0:5e:54:8e:6c:c5:
                    3d:3d:61:07:7a:49:cd:98:d6:5f:44:e5:c1:9a:28:
                    95:16:b6:81:32:0b:f0:4f:9d:a9:9e:ff:4c:a9:ad:
                    96:f0:6f:59:d6:77:fa:d3:11:ab:0e:55:99:b5:22:
                    a8:bd:59:2e:79:00:fa:cb:1d:53:bc:04:42:46:9f:
                    6a:af:1d:c3:84:63:16:0a:72:53:7e:45:d4:a3:35:
                    2f:e7:8b:b1:9a:70:20:2f:94:66:79:1f:d5:46:27:
                    27:27:ce:9b:c2:4d:6f:54:67:b4:ce:dd:27:9c:14:
                    09:5a:61:5a:e8:a9:a6:4d:30:db:7d:a1:10:22:ca:
                    c3:21:fe:fa:3e:2e:dd:df:7e:a4:f7:c0:4e:b1:d0:
                    ad:82:74:a5:fb:c3:31:38:33:90:9a:b8:04:7d:ae:
                    52:79:48:d8:c9:19:59:ce:84:4f:29:ef:9a:ac:72:
                    25:79:ec:2d:38:4b:5c:97:87:3c:d5:26:68:33:5c:
                    db:c2:fd:92:78:67:53:29:7a:3d:c1:47:3e:3b:7a:
                    98:ec:a1:ce:98:bf:37:c8:6e:7e:0a:14:52:db:1f:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:04:10:F3:47:DD:63:67:94:84:99:8B:E6:B5:1A:CD:CD:B1:B1:49
            X509v3 Authority Key Identifier:
                keyid:9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:af:62:a7:0b:76:45:31:42:cf:0e:58:be:d2:31:73:a6:b3:
         07:00:a9:16:01:e1:02:d6:c2:85:fe:ee:5c:75:f9:fd:a4:b5:
         82:88:bb:5d:d9:af:21:21:9a:fc:d6:42:78:0c:95:34:73:e1:
         e1:07:3d:fc:25:14:75:0d:91:cb:ef:cd:06:c1:21:99:70:3b:
         57:c4:b1:bb:12:73:da:b9:1f:00:17:b9:86:09:ec:d4:85:fe:
         54:bb:fe:78:a6:7d:68:11:b8:a0:f2:83:f5:f0:c3:2c:e1:3c:
         14:35:72:9c:dc:10:24:47:32:ba:18:cf:b6:4f:3b:81:fb:be:
         8f:2f:87:e6:25:ec:ba:b4:83:81:60:34:f5:e0:d2:41:c1:2b:
         e9:70:d9:b7:2a:0a:3f:8b:7c:da:6f:74:6a:1b:27:a1:07:22:
         a0:e1:0b:1f:8f:28:ab:a2:de:ca:25:f3:5e:a3:77:85:ad:fb:
         c8:8b:7d:43:9f:f1:ac:12:17:6c:52:16:d3:5c:15:57:bd:9e:
         27:86:d3:e2:f5:3b:67:86:d1:b4:32:49:c7:66:18:50:80:91:
         b1:a0:90:56:27:ae:06:9b:a7:36:7a:b1:92:b3:9a:7b:fd:68:
         8a:f0:d9:6a:ce:bf:e6:3e:81:47:3c:2c:45:73:3b:11:1c:34:
         e1:62:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:27 2026 by rpki-client