Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa
File:                     3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (raw, json)
Hash identifier:          6s/DgpFrpCjXe3mW18eXcfiVavJdVfhHeAPZDvP88Kg=
Subject key identifier:   E2:83:1F:CF:1F:BC:81:93:F6:59:65:0F:12:67:79:9B:22:CB:CB:E4
Certificate issuer:       /CN=D697630349B220DF8CC6B12F2E1478386BFA976D
Certificate serial:       C1D1A5028469C8672902C9C2DEADB5B05FCFBF
Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa
Signing time:             Sun 03 May 2026 02:55:57 +0000
ROA not before:           Sun 03 May 2026 02:50:57 +0000
ROA not after:            Sun 02 May 2027 02:55:57 +0000
asID:                     141602
IP address blocks:        103.159.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl
                          rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c1:d1:a5:02:84:69:c8:67:29:02:c9:c2:de:ad:b5:b0:5f:cf:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D
        Validity
            Not Before: May  3 02:50:57 2026 GMT
            Not After : May  2 02:55:57 2027 GMT
        Subject: CN=E2831FCF1FBC8193F659650F1267799B22CBCBE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:0b:bc:94:b1:16:7a:23:2c:92:c8:57:96:
                    f2:13:3e:1f:5e:7c:b1:79:9c:2f:0b:2e:42:b1:f1:
                    87:e5:74:d5:a3:2f:e5:9f:6e:33:1e:d4:5d:b7:e1:
                    a7:30:28:48:bd:93:ee:36:2e:b4:e5:46:8f:42:97:
                    01:fe:3c:ce:8c:a1:8a:76:2c:8b:b1:7f:f3:e4:9e:
                    9b:b5:c6:47:07:e3:e1:ba:30:ad:bd:5d:91:65:8d:
                    8d:d1:b6:74:2d:87:99:c0:b1:1e:2d:75:31:25:c8:
                    c6:8d:d8:18:70:90:f2:95:df:e0:0f:f7:f0:e4:ad:
                    6d:29:5d:71:6f:8e:f7:a2:a3:76:9d:50:6a:73:19:
                    3e:3c:4e:45:19:3a:f3:dc:ed:86:27:7f:f4:e1:bd:
                    4d:46:6b:db:2a:18:b6:57:75:74:f6:1a:90:86:55:
                    cc:92:7a:27:d8:86:4c:10:89:04:e7:e2:b2:c2:7d:
                    0e:36:47:6c:79:13:49:f8:c3:73:1d:36:68:ed:36:
                    f8:93:eb:2e:cc:73:96:51:63:64:c9:09:9d:ea:b5:
                    69:61:ba:83:26:3b:80:53:eb:5a:ca:9f:90:8e:ed:
                    cd:e6:64:7c:27:f9:c9:9d:57:e1:58:4b:09:83:d8:
                    b1:18:89:b4:32:45:8c:5d:36:eb:61:9a:a9:4d:22:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:83:1F:CF:1F:BC:81:93:F6:59:65:0F:12:67:79:9B:22:CB:CB:E4
            X509v3 Authority Key Identifier:
                keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:fa:69:bf:6d:74:77:b5:08:24:9a:8a:5b:cb:55:2f:61:f2:
         1c:22:f5:87:f9:0f:9d:23:f4:8d:c4:65:a2:2f:5a:7a:9f:d8:
         2f:b8:95:60:bb:9d:9c:2a:c9:d5:5e:da:01:42:a0:be:44:87:
         28:a9:0e:ad:3d:14:59:76:67:5f:a4:3a:a1:aa:51:da:53:ee:
         e7:8a:90:df:e4:63:cc:8e:07:b7:2e:35:5c:6e:88:9b:08:08:
         65:82:f0:46:bf:39:96:68:f3:e5:f1:d1:89:74:25:fc:81:f7:
         43:9a:92:37:40:7b:bf:62:fa:6f:b4:de:cd:b4:ad:f0:27:16:
         27:c8:72:3b:e3:08:a5:6e:47:ec:b8:aa:3a:9e:ce:09:01:4c:
         f2:44:c4:fc:8b:77:e9:89:a8:69:07:df:a6:e2:6d:ff:f2:c6:
         8c:6f:60:d6:1a:43:ea:a1:7c:05:d6:b3:d5:00:94:b8:07:a1:
         92:71:29:7b:a6:dc:14:6b:36:ce:f1:97:f8:ed:ef:da:a4:d9:
         cf:b5:a6:8f:15:e1:3b:8b:b4:bd:30:ab:3a:19:6f:14:83:05:
         91:4f:11:db:b4:96:a9:91:f1:cc:7a:a8:a2:48:3b:c2:01:f7:
         03:30:f7:de:1a:35:02:05:0e:db:2f:18:73:0e:db:fb:e6:93:
         f7:1c:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:01 2026 by rpki-client