Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa
File:                     3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (raw, json)
Hash identifier:          4ExEorQAkAboUfCg4xl3LFUmZFGrqFAxLJKE8qeWaSE=
Subject key identifier:   40:BC:91:C7:11:90:AA:E4:F7:0E:BA:9E:46:99:08:FE:14:96:6E:9D
Certificate issuer:       /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Certificate serial:       4699E05A7E3CA684021EEA41D0C6B6E220729298
Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa
Signing time:             Sun 03 May 2026 03:02:03 +0000
ROA not before:           Sun 03 May 2026 02:57:03 +0000
ROA not after:            Sun 02 May 2027 03:02:03 +0000
asID:                     149971
IP address blocks:        103.194.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
                          rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:99:e0:5a:7e:3c:a6:84:02:1e:ea:41:d0:c6:b6:e2:20:72:92:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
        Validity
            Not Before: May  3 02:57:03 2026 GMT
            Not After : May  2 03:02:03 2027 GMT
        Subject: CN=40BC91C71190AAE4F70EBA9E469908FE14966E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:19:a2:9f:4c:fa:a0:db:81:11:5a:86:ed:
                    fb:2d:bb:3f:3f:9c:60:30:fd:59:7f:ca:43:4f:f6:
                    7c:dc:e5:83:87:35:2d:b9:cc:fa:94:09:48:11:d3:
                    7b:fd:fb:a3:f8:25:21:98:e8:ca:fa:3e:f1:5b:f7:
                    c9:7f:6b:5f:f3:51:a4:ac:98:f2:21:a5:24:84:81:
                    1e:37:77:c2:55:ce:4d:33:47:7e:4e:2c:ac:58:36:
                    af:3f:ef:0a:59:e2:a7:a9:de:1a:33:ea:f4:e8:4e:
                    a1:38:c8:d4:3f:62:7a:0d:be:9c:72:e1:2f:de:d4:
                    59:87:27:29:3e:d6:63:17:f6:ce:63:fa:93:53:9b:
                    83:5b:e0:78:84:d5:b3:73:d4:f9:a6:d3:c2:1f:d3:
                    23:f8:ea:84:c7:85:31:2c:e4:95:d5:b8:5e:6b:4e:
                    d9:fc:15:47:29:a2:bc:96:47:2f:10:f0:c7:6f:e2:
                    4a:14:ad:86:ea:bc:d3:38:a1:b8:99:6e:3c:cc:6d:
                    af:69:05:4d:1c:3b:b8:2d:ed:dc:52:44:4b:b0:8c:
                    66:d4:98:54:6b:5c:d2:8f:cd:5d:41:0f:45:59:88:
                    e5:8b:f0:04:88:98:5d:82:9c:dd:0d:68:18:84:98:
                    05:5b:dc:86:b4:a0:43:ff:7c:33:d3:fd:34:f0:d4:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BC:91:C7:11:90:AA:E4:F7:0E:BA:9E:46:99:08:FE:14:96:6E:9D
            X509v3 Authority Key Identifier:
                keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:01:6d:72:96:b5:ee:45:0b:4a:b7:fc:94:2b:8c:96:4f:22:
         e4:54:de:ba:b9:59:4d:7f:62:db:9b:bc:89:6e:68:55:8d:b7:
         27:3d:8e:4d:18:b7:38:2a:f1:5e:f3:07:e5:7d:4a:c8:44:1c:
         ad:17:f9:fa:04:a6:df:84:d3:7e:d5:fd:9b:0b:85:f6:43:68:
         1a:bb:0e:53:e3:64:9f:3d:4f:30:9c:ad:04:0a:d8:f2:d0:fd:
         b3:54:5f:e0:49:9f:c0:3e:19:6d:7c:46:51:16:ad:a9:ae:e0:
         1e:e1:12:8c:59:75:60:72:d8:da:f3:93:c4:d4:b0:aa:ff:cb:
         64:35:e5:ae:17:35:38:ca:64:cc:e7:9f:f1:2a:5f:7d:d1:f6:
         f9:7d:56:8f:7d:cf:0d:aa:dd:db:a7:ca:34:6a:61:07:52:9f:
         3b:b7:4d:bb:0f:06:67:09:8a:51:d8:e0:48:21:21:96:09:50:
         14:27:f8:bb:88:eb:0d:73:18:f9:d4:67:d3:2a:e0:8f:27:50:
         68:13:90:97:0f:62:e0:26:58:23:00:47:af:69:64:ed:32:41:
         4a:eb:cd:76:cd:74:f8:69:48:c0:7f:07:dd:36:7e:b6:af:3c:
         3e:5c:c7:7a:ec:49:46:0a:7b:e8:9e:04:84:23:8e:ef:26:ee:
         fd:99:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:12 2026 by rpki-client