Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa
File:                     3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (raw, json)
Hash identifier:          J0CxZDsJ9hK/vFJkCmlYVTK0Hkphd/z0nczFHp0XF3o=
Subject key identifier:   9A:F2:D2:38:E3:83:91:C7:19:C2:48:8E:59:2D:19:8F:28:C9:1A:ED
Certificate issuer:       /CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6
Certificate serial:       6E97C4619876CD8A4F6607E959B2AA6244CA1FE8
Authority key identifier: 73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa
Signing time:             Sun 03 May 2026 03:09:34 +0000
ROA not before:           Sun 03 May 2026 03:04:34 +0000
ROA not after:            Sun 02 May 2027 03:09:34 +0000
asID:                     140417
IP address blocks:        103.151.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl
                          rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:97:c4:61:98:76:cd:8a:4f:66:07:e9:59:b2:aa:62:44:ca:1f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6
        Validity
            Not Before: May  3 03:04:34 2026 GMT
            Not After : May  2 03:09:34 2027 GMT
        Subject: CN=9AF2D238E38391C719C2488E592D198F28C91AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:7b:72:17:f9:17:f7:77:9e:f3:33:aa:53:
                    bc:cc:e1:6e:27:bd:35:de:ea:1e:c2:ac:46:bb:1f:
                    4c:8d:a5:e9:02:48:f5:51:66:cd:23:ef:9d:a4:72:
                    42:c1:9c:a3:fb:35:6f:8d:19:83:9b:2f:b7:c7:b2:
                    9f:20:1b:06:68:77:b6:d9:cb:73:08:de:70:2c:1e:
                    28:a9:76:43:1f:59:97:44:f6:f1:73:ed:22:d2:92:
                    43:73:81:57:6f:f6:5c:ce:51:16:e8:00:d9:9d:d3:
                    ae:70:65:1a:68:74:b1:e1:d7:dc:ed:e5:9a:e4:f7:
                    fa:0b:b5:49:43:fa:c9:aa:54:43:26:55:d2:d1:a3:
                    eb:11:20:ce:f3:e2:cc:99:ef:91:6f:eb:68:7a:ce:
                    79:77:05:44:ac:e8:aa:9a:d4:77:e8:bb:b6:cb:1f:
                    d2:79:6f:49:4f:2b:68:f2:ff:5c:43:88:db:0b:c8:
                    c4:03:1c:1d:e8:70:06:c9:6d:69:f2:cb:1a:f1:50:
                    83:b1:d9:8c:65:36:8f:ab:c2:99:82:53:90:67:a5:
                    02:2d:3c:94:cd:62:f8:81:e9:7e:87:eb:7d:5a:5f:
                    47:90:f4:c0:af:9c:fd:05:22:df:97:44:eb:45:6e:
                    a6:9c:14:ea:e8:2b:15:8f:05:df:9a:93:da:13:4a:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F2:D2:38:E3:83:91:C7:19:C2:48:8E:59:2D:19:8F:28:C9:1A:ED
            X509v3 Authority Key Identifier:
                keyid:73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:00:db:0b:78:b8:cd:3f:a3:a0:61:ea:1e:28:03:67:fe:
         fe:70:b2:2c:71:a9:2c:0a:3e:a3:5c:39:32:37:40:74:91:b5:
         a6:11:b1:f7:7b:22:1e:75:83:5f:d9:ef:f0:ae:95:b4:16:4d:
         44:8d:91:f1:36:8a:a9:a5:3a:b4:93:29:6f:a0:53:ce:bd:c2:
         c2:88:ad:a5:ac:30:25:e9:ba:6c:05:0c:2c:ab:11:06:60:fb:
         83:75:97:23:b2:4b:0a:4b:0f:b4:34:5b:d2:b3:1d:1d:6c:91:
         58:f0:d3:9e:25:b5:49:d3:42:65:cc:6c:f0:e2:9f:ca:85:30:
         7c:54:f7:5d:e5:fb:52:50:93:f0:02:b0:cd:0b:31:ef:7c:e2:
         65:5c:ba:a8:56:18:3a:b1:c6:46:99:ac:64:d5:16:92:b5:53:
         5a:81:28:f8:47:d7:83:57:dc:51:0c:34:3d:5f:f0:db:fa:3e:
         2b:24:a8:a7:c9:14:c9:1c:67:5c:79:f3:e5:02:29:16:ae:cf:
         7d:26:29:bc:6a:73:76:a0:cf:5b:b2:3b:fd:b2:b6:ea:87:9f:
         12:3a:22:89:e0:33:57:99:63:1a:db:41:2c:8a:fa:ed:ef:91:
         44:4c:bd:99:31:70:de:c0:b1:3a:6a:33:49:ab:f1:5f:f9:04:
         ed:39:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:43 2026 by rpki-client