Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa
File:                     3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (raw, json)
Hash identifier:          +x8QwHcKAz5TqcTBc9O+X0JgIiURlcSnmizcSMrXdTg=
Subject key identifier:   CC:B6:AB:93:25:D7:DF:AD:22:9C:AE:D7:53:83:38:96:81:7F:E6:0C
Certificate issuer:       /CN=AE003B21AF12D58F10BE6F5545672EC8E6787080
Certificate serial:       14D8E2FAB8DA20A3F95A6AAC81D0CFFD72A924A4
Authority key identifier: AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa
Signing time:             Sun 03 May 2026 02:50:52 +0000
ROA not before:           Sun 03 May 2026 02:45:52 +0000
ROA not after:            Sun 02 May 2027 02:50:52 +0000
asID:                     147081
IP address blocks:        103.173.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl
                          rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d8:e2:fa:b8:da:20:a3:f9:5a:6a:ac:81:d0:cf:fd:72:a9:24:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE003B21AF12D58F10BE6F5545672EC8E6787080
        Validity
            Not Before: May  3 02:45:52 2026 GMT
            Not After : May  2 02:50:52 2027 GMT
        Subject: CN=CCB6AB9325D7DFAD229CAED753833896817FE60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:e8:b5:c1:21:ea:85:2e:78:1a:64:48:72:
                    ae:1e:b5:3c:d5:d4:f2:8f:dc:92:cf:01:91:17:25:
                    65:15:a1:a1:a4:95:98:ce:e0:ea:2e:8f:1f:c5:5a:
                    76:5f:e3:68:12:80:cd:bf:84:cb:a2:82:02:54:3d:
                    9e:bd:a3:ed:eb:46:44:ab:18:80:e4:cb:56:da:b4:
                    3d:0a:1e:5c:ef:b8:ae:a2:f0:ba:18:d6:65:6f:09:
                    2d:8b:d9:8a:8d:b2:b7:49:e8:51:e1:11:e1:ff:35:
                    bf:e0:90:aa:da:78:f4:28:c3:3b:bb:87:d7:bb:c2:
                    f0:cd:44:1d:67:68:de:f4:e5:d9:d1:64:27:1d:2b:
                    f0:2b:dc:96:f9:0a:ed:c4:53:cf:93:97:1f:59:f8:
                    d5:1f:66:b7:ff:3a:4c:09:04:57:74:ea:e0:44:d2:
                    f4:dc:ca:23:e1:cf:27:3c:03:1c:0e:2e:65:d1:39:
                    a4:42:da:38:06:cd:10:53:e3:ab:ed:32:d9:93:c2:
                    a9:21:86:a5:82:82:30:15:d3:07:88:e9:fc:71:fe:
                    12:4d:15:15:50:d7:64:c6:f8:16:11:46:bf:60:c1:
                    92:6d:2b:e8:60:8b:21:7b:e2:90:d1:fc:c9:cf:43:
                    69:48:4e:62:bc:27:af:80:b9:29:16:7d:e5:80:ff:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B6:AB:93:25:D7:DF:AD:22:9C:AE:D7:53:83:38:96:81:7F:E6:0C
            X509v3 Authority Key Identifier:
                keyid:AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:99:d6:27:00:c0:56:62:59:06:c0:e2:ff:a6:48:2e:52:
         26:ee:72:f0:d3:af:53:c7:9f:17:cc:37:c9:19:71:cb:6c:d0:
         62:d9:62:36:a8:40:e8:63:cb:b3:27:bf:4a:3f:87:a7:de:4d:
         01:fe:41:f7:82:8e:ec:64:51:d9:f4:c1:08:53:1d:99:da:53:
         86:80:42:c1:db:14:b5:53:91:c6:d3:9e:66:1f:60:ed:04:bf:
         e8:69:cb:d5:dd:71:cf:11:d4:a3:93:ee:f6:fb:48:d0:fa:2a:
         6d:24:cb:12:97:e9:cf:bf:47:c1:cf:b4:50:e7:ed:2c:ca:f2:
         af:c7:f3:3c:4e:ae:79:22:ff:80:37:26:c0:ad:cd:16:25:6d:
         6e:8b:26:e3:9a:c7:fa:4d:42:61:5f:16:10:7a:1c:cf:bb:1e:
         61:98:7b:ca:99:0f:68:85:19:02:90:27:a9:b8:79:42:59:a6:
         8e:fe:49:b2:ec:9a:a9:5e:af:2f:13:ee:4c:2a:ea:98:c6:ee:
         bb:c1:b2:49:ec:56:df:2d:98:15:4d:cf:66:5c:b8:42:7a:3d:
         f8:01:08:7e:36:c1:04:ac:70:17:5f:28:3b:64:37:eb:3a:7b:
         f3:39:8d:ec:9f:47:bd:39:c5:8d:dc:01:f1:0f:c9:59:26:09:
         04:7d:bf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:34 2026 by rpki-client