Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa
File:                     3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (raw, json)
Hash identifier:          ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=
Subject key identifier:   A9:CA:5F:80:D2:BD:30:43:E2:AB:3A:E2:86:F6:D7:0D:90:CB:8A:27
Certificate issuer:       /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D
Certificate serial:       6F25D9AB44483786F243F2DB9B91B4B9AC3DF92E
Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa
Signing time:             Sun 03 May 2026 02:58:19 +0000
ROA not before:           Sun 03 May 2026 02:53:19 +0000
ROA not after:            Sun 02 May 2027 02:58:19 +0000
asID:                     58485
IP address blocks:        103.173.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl
                          rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:25:d9:ab:44:48:37:86:f2:43:f2:db:9b:91:b4:b9:ac:3d:f9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D
        Validity
            Not Before: May  3 02:53:19 2026 GMT
            Not After : May  2 02:58:19 2027 GMT
        Subject: CN=A9CA5F80D2BD3043E2AB3AE286F6D70D90CB8A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:50:12:4b:73:33:c4:23:a8:91:40:51:75:d7:
                    6d:bc:79:4d:2e:d3:0c:fb:3f:a6:78:10:ae:bb:bb:
                    57:0e:e7:dd:86:cb:9a:e2:42:e6:0b:a7:65:4a:b7:
                    8d:44:11:c2:44:a9:4f:cc:5f:ef:f6:04:48:a3:0d:
                    0d:e3:bf:23:26:61:5d:b4:ad:29:c5:cc:0e:8b:f6:
                    0c:1e:d3:cc:3f:67:36:78:52:ca:a8:29:5d:20:c2:
                    81:8d:93:e0:2b:0e:ce:a2:db:67:ae:65:f7:7d:f0:
                    e2:d6:1d:b1:dd:73:e5:c6:4e:ab:55:f9:41:97:ad:
                    d1:34:de:cb:5e:de:0a:16:24:0b:bc:e2:df:e6:9c:
                    4f:aa:ed:f2:9c:63:87:a5:c4:c0:f3:33:94:a9:65:
                    45:c8:46:b2:4f:34:3d:33:8e:e5:0b:c0:d7:4c:98:
                    8f:6c:68:6e:67:99:fa:9c:38:29:7f:d1:38:8f:fa:
                    07:46:9a:7e:af:fa:6d:88:89:d4:67:b0:ca:09:32:
                    d9:29:ad:de:d4:f9:2a:11:47:fd:f2:55:91:63:fc:
                    4b:81:00:41:07:d5:10:73:f1:9b:67:bf:1d:68:a7:
                    63:d9:bc:98:29:73:ce:4f:3c:cd:84:a4:4a:fb:b8:
                    44:d9:56:fb:70:20:c5:35:00:49:68:c5:6d:af:73:
                    54:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CA:5F:80:D2:BD:30:43:E2:AB:3A:E2:86:F6:D7:0D:90:CB:8A:27
            X509v3 Authority Key Identifier:
                keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:75:62:7c:bf:c9:c5:ef:0d:67:f2:c1:2d:2a:64:42:95:
         1c:41:dd:fa:08:72:9b:f6:5c:63:92:58:a9:01:01:0b:4d:03:
         6c:aa:5f:70:a2:8b:56:65:96:6a:bf:83:20:3d:1c:19:66:b6:
         54:dc:17:f0:32:c8:b0:cb:e9:99:4e:91:d8:f8:c0:e2:33:ff:
         b8:b4:2b:24:e1:44:0a:3b:82:91:f5:9c:ad:09:01:f8:3a:05:
         cc:a5:66:be:5b:51:48:b4:02:b2:eb:e1:2f:fb:86:ed:1d:7f:
         66:f7:f6:26:ae:9a:06:e4:f3:57:5e:c8:75:6d:e9:33:38:75:
         40:8b:4c:c2:58:c0:44:d2:95:cf:59:91:a3:29:9b:20:d0:5c:
         34:2f:83:da:70:5b:d3:ba:7c:b9:32:13:fe:3c:89:fd:2a:2a:
         16:8e:20:43:2c:e8:da:d8:e5:e3:2b:71:47:f5:46:07:bc:56:
         cd:6d:49:b2:80:50:42:9b:3d:cc:bb:f8:cc:cd:e9:66:33:39:
         a6:46:0d:f3:18:0a:4c:b4:40:17:e9:1e:36:87:55:ba:1c:f7:
         2c:6a:c0:62:81:91:e5:64:5a:99:e4:42:a9:13:11:28:f2:52:
         e3:09:6c:62:16:b4:9b:13:94:89:8f:2e:db:32:2b:0b:db:db:
         64:83:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:09 2026 by rpki-client