Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa
File:                     3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (raw, json)
Hash identifier:          XZr4Qm+n8o7er/+eUBzkmen2AskfpDrwMEA3kRcHwsg=
Subject key identifier:   DA:E1:86:02:4F:88:6B:6B:C8:0F:64:86:58:09:86:C4:CB:D4:D9:E1
Certificate issuer:       /CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA
Certificate serial:       1D8EC3A598AD8F234D405F6422DAE8B8051A1231
Authority key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa
Signing time:             Sun 03 May 2026 03:00:56 +0000
ROA not before:           Sun 03 May 2026 02:55:56 +0000
ROA not after:            Sun 02 May 2027 03:00:56 +0000
asID:                     141069
IP address blocks:        103.155.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl
                          rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8e:c3:a5:98:ad:8f:23:4d:40:5f:64:22:da:e8:b8:05:1a:12:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA
        Validity
            Not Before: May  3 02:55:56 2026 GMT
            Not After : May  2 03:00:56 2027 GMT
        Subject: CN=DAE186024F886B6BC80F6486580986C4CBD4D9E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:ae:aa:13:c4:6f:7f:ba:1c:b9:2b:14:87:
                    f0:bc:16:24:6f:f3:cd:59:8e:95:80:17:e3:c0:6e:
                    c9:39:e2:fd:0e:28:e8:f4:af:40:e8:95:71:05:f2:
                    23:7f:d8:42:5e:a1:36:76:66:74:49:e3:a8:b1:0d:
                    75:8b:24:d5:c7:73:72:6c:d5:af:e8:9a:7e:2b:8d:
                    9e:77:31:d7:74:c0:a7:c9:8f:a0:17:ec:56:75:fb:
                    a1:e9:25:ba:d5:23:94:8a:75:e1:dd:fd:2d:7a:b8:
                    9e:d0:8a:f7:d3:be:1b:7d:6d:30:fd:b3:2a:47:fe:
                    e5:db:a0:65:76:bb:dc:c7:31:20:8c:25:12:3b:2e:
                    31:4e:d3:07:5a:8e:8c:68:1f:7d:46:7b:52:a5:67:
                    b5:f4:b5:8d:ec:b5:2e:a0:8a:fe:35:32:0e:18:8e:
                    4d:bf:fb:0e:35:06:42:d8:06:ad:e2:11:d5:e0:84:
                    f8:0f:48:19:d5:03:5e:ae:a9:80:52:01:97:a7:30:
                    1d:a6:ef:4c:64:6d:f7:86:ed:a6:77:f2:31:fc:3e:
                    a3:c5:6b:2c:8f:5c:3a:f7:a8:89:c3:00:e4:58:05:
                    70:7b:fe:4f:87:be:e3:b1:8e:a0:bb:4f:0c:04:21:
                    2d:f8:61:25:0a:e5:36:0f:aa:5a:e5:27:3a:6d:39:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E1:86:02:4F:88:6B:6B:C8:0F:64:86:58:09:86:C4:CB:D4:D9:E1
            X509v3 Authority Key Identifier:
                keyid:F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:68:a4:a9:1b:9b:a4:d2:89:d6:5a:14:48:79:82:2d:40:e7:
         24:62:31:cb:8f:18:f5:5e:c9:b8:cc:b9:bf:26:7b:3d:39:26:
         2e:73:ea:c0:7f:ae:0a:7f:37:17:03:11:b9:75:f7:e1:e5:15:
         1a:f2:79:21:aa:ba:62:49:fa:93:1e:26:32:f8:27:b1:e6:64:
         fc:a5:1f:18:10:77:c6:2c:e1:50:6e:35:72:fd:7a:49:23:37:
         cd:89:24:75:5c:d7:04:39:7d:f0:ad:72:38:18:7c:5c:1b:19:
         8e:03:f3:3b:77:09:79:ce:db:a1:13:ad:c7:59:c3:17:62:f3:
         88:88:71:1f:aa:66:fc:24:9d:e8:5c:7f:3d:0d:03:c5:5c:84:
         36:bb:9a:b4:4d:03:b4:52:fc:24:35:50:a0:fa:31:b4:ee:22:
         5e:3c:30:72:f7:7b:a3:5d:bd:f1:35:5d:7f:1c:c9:df:65:c2:
         76:14:a5:6c:be:fb:f7:3a:b0:97:43:d1:4b:4c:b8:0a:a3:e8:
         15:7e:7e:89:26:0c:ec:5d:47:62:00:3a:63:ee:fa:d0:17:84:
         f4:2f:b0:1e:0c:e0:61:67:2e:d6:98:71:7f:14:ea:7e:52:69:
         3b:3d:df:24:f1:b5:8f:d1:4d:f4:d0:57:31:00:4e:9a:a5:33:
         4c:e3:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:17 2026 by rpki-client