Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa
File:                     3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (raw, json)
Hash identifier:          96iWJc2ow6yzAUODuhe0zI0zVFmk0TX0H28U4QCHRcE=
Subject key identifier:   3D:4A:4A:29:76:10:83:DB:B1:17:3C:E4:8C:66:0D:AE:61:9E:45:A5
Certificate issuer:       /CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD
Certificate serial:       4F734FFB01C203AD65843A9BD680638A40936B10
Authority key identifier: 9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa
Signing time:             Sun 03 May 2026 02:58:48 +0000
ROA not before:           Sun 03 May 2026 02:53:48 +0000
ROA not after:            Sun 02 May 2027 02:58:48 +0000
asID:                     141640
IP address blocks:        103.162.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl
                          rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:73:4f:fb:01:c2:03:ad:65:84:3a:9b:d6:80:63:8a:40:93:6b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD
        Validity
            Not Before: May  3 02:53:48 2026 GMT
            Not After : May  2 02:58:48 2027 GMT
        Subject: CN=3D4A4A29761083DBB1173CE48C660DAE619E45A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:b2:dc:78:52:8d:c7:b4:f9:42:53:21:25:
                    a2:fc:6e:62:da:70:a9:09:56:e4:04:d9:10:38:57:
                    91:ca:03:9f:4b:c4:d9:2e:79:1f:7d:7b:53:00:38:
                    17:d9:eb:47:44:cb:6c:62:42:d4:93:d3:7d:4a:a9:
                    95:e0:af:26:3f:eb:54:96:38:c9:8a:b1:0d:e6:ea:
                    c4:10:e5:3c:d5:a5:b8:ef:94:78:01:68:88:06:40:
                    fe:8c:ae:98:7a:b3:e4:c0:69:b9:ff:0d:db:62:31:
                    8c:1a:47:ce:34:b9:ba:68:32:f9:f2:88:4b:a8:cd:
                    58:4d:93:a4:8a:c8:46:c7:6d:4e:60:a2:e6:08:18:
                    d1:33:9b:b9:6a:fe:a1:e9:6c:92:fd:1f:da:38:01:
                    89:2c:20:a3:ae:cd:fa:95:93:b4:fe:03:78:01:a2:
                    fa:56:49:61:24:c9:b8:27:a1:2e:20:6e:20:79:e7:
                    9c:40:a9:0a:13:69:ce:ac:61:c3:2b:0d:35:f7:67:
                    ca:5b:42:a5:94:e7:00:dd:d6:28:7e:02:43:f3:08:
                    8a:19:10:c7:9b:44:66:ba:fa:04:d3:c0:30:90:43:
                    07:54:dd:ec:76:da:86:9d:df:f2:70:0f:52:47:f6:
                    1e:7f:9c:9c:4a:20:20:71:b6:62:66:4f:34:f3:7e:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4A:4A:29:76:10:83:DB:B1:17:3C:E4:8C:66:0D:AE:61:9E:45:A5
            X509v3 Authority Key Identifier:
                keyid:9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:25:da:40:64:7f:62:ed:b4:c5:cc:b4:65:58:be:f5:65:8d:
         79:ba:52:b4:4e:bb:21:df:a5:02:59:5a:32:49:ed:55:7e:7f:
         2f:e6:c5:c3:fb:05:80:0e:59:0f:ed:ea:2e:c6:8e:15:9c:cb:
         7f:66:a6:43:a0:cc:ee:95:5c:be:72:ab:a7:25:07:59:a1:fe:
         0d:b4:10:81:a6:e3:95:b5:1f:2d:2d:2e:57:32:30:cc:96:8e:
         27:4b:47:12:34:66:86:76:0d:d1:95:1f:5c:90:64:59:1e:c7:
         d7:7b:4f:65:40:c5:c2:51:2f:45:1d:67:8c:68:0b:cf:f6:c7:
         4c:66:78:ca:09:7c:f5:20:f5:18:7a:f9:20:99:2a:ea:d4:d1:
         d9:92:43:78:c4:50:e3:fd:f5:67:31:85:31:2b:13:10:f5:cb:
         ba:fd:6d:7e:d0:a9:86:52:29:52:86:8b:4b:e9:97:3c:b2:77:
         41:9b:a5:af:92:0b:4f:73:fd:32:11:8b:7a:40:d4:be:ec:56:
         2d:7d:c0:b9:f7:36:0d:64:49:11:f8:97:ff:44:94:2e:90:c9:
         6a:e9:c1:f5:95:6c:f4:46:f9:75:3e:d4:cd:eb:aa:fc:bf:01:
         25:a0:17:5c:9f:76:25:4c:4b:0c:e7:b5:ff:3f:66:8c:91:91:
         8d:a9:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:14 2026 by rpki-client