Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa
File:                     3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (raw, json)
Hash identifier:          jakvC7z6ih8TLDBjPGwBe82NoGvM+4jFqZRksuR7CGI=
Subject key identifier:   BF:B4:2B:09:A7:F4:A2:AF:8F:69:EC:7B:96:87:08:B1:6F:41:D5:93
Certificate issuer:       /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE
Certificate serial:       467E981EF4659DA54A70BB7B645CDBA7304DDB6E
Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa
Signing time:             Sun 03 May 2026 03:06:41 +0000
ROA not before:           Sun 03 May 2026 03:01:41 +0000
ROA not after:            Sun 02 May 2027 03:06:41 +0000
asID:                     151599
IP address blocks:        103.7.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl
                          rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7e:98:1e:f4:65:9d:a5:4a:70:bb:7b:64:5c:db:a7:30:4d:db:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE
        Validity
            Not Before: May  3 03:01:41 2026 GMT
            Not After : May  2 03:06:41 2027 GMT
        Subject: CN=BFB42B09A7F4A2AF8F69EC7B968708B16F41D593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:a4:6b:5c:f3:9f:ad:f5:e3:7c:b8:8e:28:
                    1a:92:c1:88:b3:f7:68:61:c5:7f:35:3f:2c:8a:63:
                    e9:a5:07:3a:7a:79:06:6e:88:d3:87:fa:82:90:07:
                    52:3e:f2:b5:20:92:5c:cf:a8:1f:e9:01:67:82:de:
                    71:3f:3f:a5:29:4d:41:68:be:90:ba:24:25:51:45:
                    b2:f7:f3:91:c6:72:e3:a6:78:7b:86:7e:6a:53:e7:
                    5d:fb:b7:d0:72:da:52:c1:95:c6:8d:5a:bc:b9:67:
                    5d:8c:3a:f4:9e:f3:c5:21:b3:af:c9:8b:ae:78:7f:
                    5e:2d:ac:f3:27:6a:af:54:77:8c:66:bc:91:5e:48:
                    16:20:a6:a9:59:57:59:30:d7:97:84:c1:10:3b:a8:
                    4b:ea:2a:b1:d6:78:f9:98:af:85:8a:25:d8:05:25:
                    5d:fa:1a:34:b0:7d:9b:a9:86:05:b4:cf:34:b8:02:
                    b0:67:e4:5f:79:eb:dd:31:87:c2:55:36:ca:9e:2a:
                    d2:a5:55:2d:21:7b:03:a0:16:89:c3:d7:29:13:ad:
                    72:81:d1:10:0b:b1:d3:87:dd:e0:96:04:01:7a:f5:
                    89:32:eb:c7:56:56:19:39:7a:64:42:28:f2:0f:00:
                    12:f4:fb:fe:dd:9c:83:a9:f1:fb:fc:e1:57:ad:32:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B4:2B:09:A7:F4:A2:AF:8F:69:EC:7B:96:87:08:B1:6F:41:D5:93
            X509v3 Authority Key Identifier:
                keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:10:8e:c2:70:3d:8e:9d:98:d9:0f:94:66:28:6c:5e:2e:88:
         16:fe:08:df:c8:40:e2:74:b8:ec:9a:b9:c8:b3:e8:10:79:b9:
         5c:01:e3:6d:fd:29:bd:0f:a5:80:21:38:c7:60:0b:06:9d:4c:
         e4:0a:9f:73:a9:d4:40:97:13:cd:43:8b:77:49:e9:ef:dd:42:
         94:86:cf:3e:89:36:0a:20:24:de:bd:87:ed:35:c1:bd:5c:b5:
         74:2c:62:f4:8a:6b:c0:ad:01:04:01:91:dd:98:b5:bc:2a:5f:
         bf:fa:66:78:5a:a5:9b:89:78:d0:b9:0b:73:1d:f6:63:55:2f:
         4d:ae:a0:9a:c3:28:3e:5a:79:df:57:2e:b3:e8:a5:5a:11:7d:
         65:90:dc:b0:58:40:a1:8f:60:90:80:af:70:8a:fb:b9:f4:da:
         a3:9e:00:39:7c:1d:7c:73:96:ce:c6:9d:8b:fc:7d:b7:2b:1b:
         6d:08:ad:d4:be:eb:c5:45:c0:77:fb:8c:b3:a9:95:0f:b0:67:
         25:8c:30:bc:f3:67:61:ec:15:6f:6f:78:00:d3:d0:5f:3d:ba:
         10:30:be:cf:08:97:51:d4:66:10:93:05:99:7f:ac:6b:52:b4:
         36:c7:45:19:68:84:9c:8c:6e:01:1a:08:41:42:84:d0:19:20:
         07:3f:f7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:52 2026 by rpki-client