Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa
File:                     3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (raw, json)
Hash identifier:          VbZP5AlQJHoYGRcuhEjAa8Ztq6z5yJJSceEmBD6UPnQ=
Subject key identifier:   BC:24:11:81:71:A4:AB:BD:A5:85:CD:BC:2A:5D:8E:52:81:C6:C4:85
Certificate issuer:       /CN=C7B88124E27943001DCBEF12B94411DF803E6864
Certificate serial:       75C057469FD3072E18F9F68FC45DECE4EC61EDFC
Authority key identifier: C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa
Signing time:             Sun 03 May 2026 03:00:37 +0000
ROA not before:           Sun 03 May 2026 02:55:37 +0000
ROA not after:            Sun 02 May 2027 03:00:37 +0000
asID:                     139415
IP address blocks:        103.143.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl
                          rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c0:57:46:9f:d3:07:2e:18:f9:f6:8f:c4:5d:ec:e4:ec:61:ed:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7B88124E27943001DCBEF12B94411DF803E6864
        Validity
            Not Before: May  3 02:55:37 2026 GMT
            Not After : May  2 03:00:37 2027 GMT
        Subject: CN=BC24118171A4ABBDA585CDBC2A5D8E5281C6C485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:60:de:b6:be:b6:45:dc:da:05:34:53:0e:
                    64:82:08:e8:6e:16:46:fe:7c:e7:b4:a4:6d:b9:71:
                    e9:f6:ba:22:1b:2c:7e:0e:5b:9e:47:50:6d:48:8e:
                    98:2f:97:c9:6f:3b:6b:90:24:4a:a4:0f:0c:53:9d:
                    bb:88:3e:00:23:e9:fa:a7:98:b9:81:d5:fa:80:78:
                    3c:30:3d:28:e0:f9:94:20:91:dc:e1:44:2c:ce:ae:
                    f3:50:74:d4:0b:5a:34:7c:e2:57:fc:e3:19:7a:a9:
                    3b:a7:6e:a1:6f:63:17:14:41:f9:98:57:13:3b:cb:
                    28:39:b7:42:74:fa:26:b3:ab:36:e3:a2:7d:cb:43:
                    0f:8a:b2:f3:4a:10:ea:7d:ba:d9:88:37:e7:16:4b:
                    3d:e2:53:da:3f:1c:57:8b:57:3f:75:83:0e:26:d6:
                    f8:62:8b:ce:6f:4d:01:cf:3c:6b:29:0b:fb:7d:9b:
                    93:a1:9e:5d:e5:df:71:fd:4e:ce:42:cd:14:72:91:
                    d4:3f:d5:83:15:09:12:d7:13:78:45:8c:4d:28:aa:
                    91:71:e8:6b:86:5f:91:9a:69:b4:c9:81:37:a0:ed:
                    98:5e:c3:d9:40:c9:81:36:35:5e:4c:f4:eb:d5:3c:
                    8b:e2:f1:d2:0f:fe:2e:96:a1:d0:5d:62:cf:99:ea:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:24:11:81:71:A4:AB:BD:A5:85:CD:BC:2A:5D:8E:52:81:C6:C4:85
            X509v3 Authority Key Identifier:
                keyid:C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:be:87:10:ce:f9:1f:24:3e:e6:72:ba:e6:58:0f:b0:0e:
         31:52:5c:b6:a1:3f:00:ea:d3:b9:bb:13:c2:0c:9e:91:8c:96:
         24:99:ab:34:33:ba:68:38:e6:ea:15:83:cc:d2:ce:47:77:8c:
         7e:bb:ae:9c:f6:dc:e1:2d:1c:95:17:42:26:df:e6:97:9b:98:
         3a:75:56:f7:65:96:08:00:ee:84:73:dd:ec:3e:48:bd:36:46:
         1e:ad:e1:82:f5:ab:9c:71:fe:cd:81:fd:3f:a0:54:19:af:f0:
         a9:53:3e:59:ac:3a:82:2b:b3:ff:d4:f8:0c:9c:46:fb:60:43:
         a5:3b:24:21:5f:95:e2:3e:17:d1:0d:59:42:5d:a5:c8:ad:e3:
         7d:d5:98:a6:24:b4:42:ef:19:5a:1a:25:94:64:6a:44:e0:2d:
         22:cc:44:c0:f5:3e:9d:4c:02:e8:64:34:28:ca:e1:32:8b:fc:
         c5:70:05:bc:c9:9e:5c:6e:1e:04:9d:82:e3:37:f3:a2:49:a1:
         9c:ac:16:16:34:2f:52:14:d3:75:ac:aa:55:4b:da:6b:14:d9:
         95:a8:27:b2:91:63:9b:01:59:a7:ef:80:b6:cb:ce:df:4d:ec:
         90:46:db:70:3f:32:6e:1f:ba:03:58:3e:f2:5e:ae:d8:35:59:
         49:49:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:46 2026 by rpki-client