Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa
File:                     3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (raw, json)
Hash identifier:          95q1wdIN5xFaDjhByaZc0LA7ZtrsvihoQfqYrsCn+uc=
Subject key identifier:   FF:74:39:05:00:CA:83:00:A7:57:49:76:30:AA:06:FC:61:46:DB:4E
Certificate issuer:       /CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA
Certificate serial:       5D0625448FDEBCC4508A90A9468E48BBD9B01FD1
Authority key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa
Signing time:             Sun 03 May 2026 03:00:56 +0000
ROA not before:           Sun 03 May 2026 02:55:56 +0000
ROA not after:            Sun 02 May 2027 03:00:56 +0000
asID:                     141069
IP address blocks:        103.155.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl
                          rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:06:25:44:8f:de:bc:c4:50:8a:90:a9:46:8e:48:bb:d9:b0:1f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA
        Validity
            Not Before: May  3 02:55:56 2026 GMT
            Not After : May  2 03:00:56 2027 GMT
        Subject: CN=FF74390500CA8300A757497630AA06FC6146DB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:32:c7:c7:c2:78:d2:07:5f:ae:3b:12:db:
                    0f:14:d0:e2:79:55:d0:20:54:41:38:9d:11:10:58:
                    a6:81:8b:d8:df:94:97:94:18:f5:38:b0:63:af:2e:
                    0f:6d:a4:03:fc:40:54:08:e4:c8:e3:42:fa:d4:79:
                    a1:ec:53:78:08:32:21:76:e8:68:63:3c:41:de:47:
                    2d:2d:18:6b:5e:ec:df:18:ca:b1:2e:d3:b1:8e:ea:
                    34:d0:0e:9a:eb:bf:fd:7b:79:62:cb:25:fe:c1:aa:
                    b0:9a:18:8c:c2:29:ee:af:f8:48:1c:1f:3e:16:bc:
                    61:92:a7:2d:63:19:5f:3a:51:3f:8f:32:ff:c4:46:
                    3a:ab:e5:ea:9b:47:61:cf:b6:bb:81:a6:27:81:5c:
                    fd:d2:74:96:f6:bf:8a:35:8c:51:4e:f1:b2:44:fb:
                    f7:78:4b:5b:dc:8c:31:ba:da:90:75:0c:eb:27:dd:
                    a6:90:db:c1:9e:c2:d4:b0:a5:a3:e4:51:66:e0:f3:
                    c2:fa:6a:a1:d2:ca:d7:8e:8d:bb:e4:21:75:bc:b6:
                    73:fe:af:66:b6:01:37:be:9f:d9:fc:b9:01:6c:cd:
                    94:42:f6:1c:89:0a:8a:c9:c7:e1:20:54:ae:2e:46:
                    93:32:6a:73:6c:0c:3e:42:8e:60:6f:fd:10:1d:b9:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:74:39:05:00:CA:83:00:A7:57:49:76:30:AA:06:FC:61:46:DB:4E
            X509v3 Authority Key Identifier:
                keyid:F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:ba:d4:22:40:74:b7:cc:7b:d1:be:75:80:d6:5b:f3:d9:51:
         fd:a7:e1:82:c1:dd:67:cc:bc:37:a3:05:f2:82:84:bb:11:59:
         96:07:ad:10:4d:37:21:bd:b1:e7:12:d7:35:79:25:f1:fd:79:
         6a:7a:17:88:25:0d:d3:89:7f:eb:b7:1d:12:4f:a9:cd:d6:0c:
         ed:cc:68:eb:21:3f:c9:ed:7c:ab:af:58:db:e6:4e:b0:3d:d2:
         d8:e1:fe:86:35:ec:7e:f0:8d:fd:5a:0c:d9:27:a6:65:d8:d3:
         9d:6c:86:58:ec:97:42:c3:2d:ea:94:6c:cf:2b:38:9a:11:68:
         5c:d5:d6:15:c9:f6:08:f0:db:4b:c0:7a:53:d9:bd:61:f8:2e:
         bd:f3:7c:ac:d8:9a:81:6e:20:76:ea:b7:52:4e:06:d4:aa:ea:
         12:a1:17:a2:1a:5e:26:7c:a0:af:20:5c:bd:c0:87:c3:7c:72:
         1e:71:2d:e1:28:53:87:10:43:a6:45:f0:e1:af:c3:2f:21:93:
         fa:47:79:12:ab:08:9d:33:e7:e3:4f:35:22:84:e5:8f:bb:58:
         ca:64:c1:d1:a3:e8:da:86:cb:94:92:20:be:ac:32:fc:94:ef:
         57:f3:a0:4c:c3:87:90:87:45:fa:8b:58:a5:a7:42:38:83:21:
         ad:22:71:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:08 2026 by rpki-client