Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/3130332e3136392e3133322e302f32332d3233203d3e20313432333431.roa
File:                     3130332e3136392e3133322e302f32332d3233203d3e20313432333431.roa (raw, json)
Hash identifier:          m73H0GlDEx00LFI1u2mNj74knbcvjFcFaVPie75MSDI=
Subject key identifier:   67:F5:D3:41:5D:D3:47:63:91:58:5B:3B:FF:78:E8:EC:EE:59:14:AC
Certificate issuer:       /CN=6FB3C13CFC02A51ACF157905EE65794FB07BA8FA
Certificate serial:       08A9A0538EA76F97286F48A2C15AD6FC06D9262C
Authority key identifier: 6F:B3:C1:3C:FC:02:A5:1A:CF:15:79:05:EE:65:79:4F:B0:7B:A8:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/3130332e3136392e3133322e302f32332d3233203d3e20313432333431.roa
Signing time:             Sun 03 May 2026 02:48:39 +0000
ROA not before:           Sun 03 May 2026 02:43:39 +0000
ROA not after:            Sun 02 May 2027 02:48:39 +0000
asID:                     142341
IP address blocks:        103.169.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.crl
                          rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a9:a0:53:8e:a7:6f:97:28:6f:48:a2:c1:5a:d6:fc:06:d9:26:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB3C13CFC02A51ACF157905EE65794FB07BA8FA
        Validity
            Not Before: May  3 02:43:39 2026 GMT
            Not After : May  2 02:48:39 2027 GMT
        Subject: CN=67F5D3415DD3476391585B3BFF78E8ECEE5914AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:62:a3:26:f1:a9:e6:36:48:c7:55:de:5b:
                    a9:64:80:17:fd:84:6f:19:ce:48:29:63:bc:90:6b:
                    93:a7:0e:c3:91:42:4e:bc:c3:ef:41:9a:aa:a5:8d:
                    e5:f3:62:c7:0b:35:24:cb:bc:45:6f:c7:2d:1a:e4:
                    26:fc:a5:53:1b:72:6c:b4:ac:cf:f8:d7:8a:2a:53:
                    60:cb:46:fe:fa:6a:5f:06:95:7e:bc:8e:2c:a0:07:
                    62:00:ef:97:29:4b:78:b4:f2:7b:82:1f:53:0f:c1:
                    29:05:e6:1d:73:07:e2:71:47:37:42:df:34:61:19:
                    a6:d3:9b:b4:37:ad:ce:c7:f9:62:50:c6:25:f8:eb:
                    2c:ac:8b:7a:79:86:65:18:42:17:20:90:6c:e3:11:
                    0c:3a:6f:a3:8b:57:55:21:21:80:ce:73:1b:af:a0:
                    89:d0:99:11:e8:80:1d:51:e9:1e:da:e6:a8:c0:de:
                    32:5f:97:d3:0a:3c:b3:99:fc:4c:e6:fd:1e:2b:3d:
                    79:2e:36:ee:28:41:f7:cd:f1:01:8e:42:ff:6d:1c:
                    f4:f6:0e:0d:f3:f9:38:78:77:a3:85:04:7b:0c:4c:
                    e9:b0:1b:df:53:28:66:4d:d1:0c:f9:ab:c0:d8:69:
                    9b:05:f2:c5:0b:94:63:26:f4:f3:e1:2f:7d:44:8b:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F5:D3:41:5D:D3:47:63:91:58:5B:3B:FF:78:E8:EC:EE:59:14:AC
            X509v3 Authority Key Identifier:
                keyid:6F:B3:C1:3C:FC:02:A5:1A:CF:15:79:05:EE:65:79:4F:B0:7B:A8:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/3130332e3136392e3133322e302f32332d3233203d3e20313432333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:fa:91:4c:b2:af:9e:ec:25:af:33:c9:43:f0:bc:d2:95:e1:
         89:09:ec:6e:8a:21:a5:ff:58:6b:05:37:47:a4:95:99:a6:13:
         f8:01:22:78:b6:30:1a:37:0c:3b:c1:78:82:44:c5:2a:ea:64:
         1d:c9:a0:ab:b7:3f:4c:d6:1d:ac:38:76:3e:b5:03:40:b2:f2:
         37:2c:6d:c0:7e:34:de:d7:ac:af:c2:db:10:8f:06:7c:1f:fe:
         63:ec:19:e6:8f:c2:09:cd:9d:21:ae:08:2f:cb:ea:5b:80:32:
         c9:8b:f8:67:1b:5c:b7:5e:29:8b:b7:1d:04:a9:64:d5:46:5d:
         d2:b6:68:31:36:02:bb:d2:09:f6:e7:f8:00:01:9a:bf:50:43:
         13:3c:c3:ee:8a:ea:0f:0b:de:1d:2c:c9:e1:39:ab:b7:97:93:
         3e:cd:67:b1:ad:84:16:f5:48:08:ed:42:bb:9a:dc:6c:5e:62:
         b3:8c:d2:86:44:40:b2:ca:ae:29:5a:6a:3a:ca:51:51:7a:ac:
         88:91:eb:0b:96:6c:2a:83:e0:47:c8:ed:35:c3:90:50:53:22:
         f6:b7:5c:12:74:85:40:37:b5:c5:72:e2:52:df:74:fc:9a:2c:
         2f:39:b2:58:9b:b3:da:72:c9:20:7f:19:f2:da:ff:93:5c:de:
         21:13:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:10:23 2026 by rpki-client