Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa
File:                     3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (raw, json)
Hash identifier:          fRCVhusGzoRmw1xVyCKp1DarroNp+AXJavllcEzpEYc=
Subject key identifier:   6F:C7:0C:0D:2F:9D:59:CA:4C:C1:64:5A:C8:70:42:1F:D6:FD:E6:C0
Certificate issuer:       /CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31
Certificate serial:       197C62ABA327B76D7E647BEDA5169D87E435C742
Authority key identifier: C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa
Signing time:             Sun 03 May 2026 02:57:09 +0000
ROA not before:           Sun 03 May 2026 02:52:09 +0000
ROA not after:            Sun 02 May 2027 02:57:09 +0000
asID:                     149967
IP address blocks:        103.21.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl
                          rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7c:62:ab:a3:27:b7:6d:7e:64:7b:ed:a5:16:9d:87:e4:35:c7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31
        Validity
            Not Before: May  3 02:52:09 2026 GMT
            Not After : May  2 02:57:09 2027 GMT
        Subject: CN=6FC70C0D2F9D59CA4CC1645AC870421FD6FDE6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:c0:d7:82:39:06:fc:b5:3f:eb:6c:67:bc:
                    d0:7e:76:b0:83:11:74:54:52:67:f0:9b:71:43:a0:
                    72:71:86:6b:16:62:e3:f3:67:12:ff:e1:87:c7:fd:
                    80:0b:3c:59:59:ea:8a:26:93:e4:91:46:20:4e:43:
                    66:9b:c4:88:61:04:9a:c8:3b:89:f6:1c:91:66:1b:
                    8f:1a:95:58:e7:97:81:36:65:66:b7:3b:91:91:53:
                    48:26:c2:60:ac:0d:ba:ac:b7:d4:71:99:c2:d6:66:
                    79:85:38:ac:d4:92:75:99:9e:c8:7b:78:26:3c:5d:
                    ba:9b:bb:a2:89:91:e2:73:ea:af:48:fb:77:c9:45:
                    06:bf:cf:11:5e:3e:2a:4c:ed:08:6e:fa:86:37:16:
                    a7:0e:8a:ba:c7:de:41:22:25:51:10:16:2b:28:2d:
                    b5:6f:68:eb:75:19:0a:ad:5b:d4:ff:ce:60:94:23:
                    c7:e4:ea:44:7a:24:7f:35:80:d0:0d:fa:0f:55:69:
                    4a:24:77:83:d6:7d:27:45:d9:cf:5f:e3:67:dd:ab:
                    44:1d:39:c7:82:1d:72:b2:32:63:35:ee:ed:31:07:
                    18:84:91:aa:4c:29:a6:b9:02:73:d6:66:29:d9:d9:
                    42:56:9d:88:bc:7e:dc:50:21:f6:f7:32:c0:8a:66:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C7:0C:0D:2F:9D:59:CA:4C:C1:64:5A:C8:70:42:1F:D6:FD:E6:C0
            X509v3 Authority Key Identifier:
                keyid:C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:13:39:d4:46:12:61:7b:e7:3a:3e:90:71:13:e2:48:7d:
         e2:9d:c6:00:f7:1d:1e:d5:4c:41:07:39:88:7b:0a:1f:e9:68:
         78:63:5e:17:21:93:ae:c2:40:9b:58:e9:4d:04:42:46:a6:1d:
         e8:e7:11:32:65:c2:66:7f:cd:99:e8:bf:b8:9d:9e:90:76:e2:
         fe:37:fb:d6:bf:35:81:fe:88:d5:9c:2f:ad:15:e8:47:5e:a5:
         a6:55:20:2e:73:5d:d0:66:5d:97:68:aa:dd:86:f0:5b:29:a3:
         fe:a2:2f:c2:1e:5e:5a:f6:da:2c:a9:d5:09:0c:94:e6:d0:73:
         55:be:25:ad:63:59:c4:a3:81:06:a0:57:a1:3e:64:0a:76:4e:
         9e:c3:71:a5:7a:3c:9e:38:3e:fb:e3:98:3f:e9:f7:f5:0c:7b:
         a6:c0:6c:71:40:5b:d9:27:bc:5f:b2:eb:12:60:41:1e:de:e6:
         91:18:b1:67:b3:bb:2f:da:67:5f:a8:7c:22:aa:16:39:f3:75:
         0d:91:ec:13:49:a6:ae:ba:cc:a7:21:36:08:df:d3:80:de:14:
         be:4b:75:7d:e5:3f:ea:e9:8d:89:cb:1e:2e:60:f5:80:4b:b2:
         dc:4a:00:c7:e8:ae:48:b9:2f:87:f8:44:90:a0:91:86:09:65:
         3e:18:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:09 2026 by rpki-client