Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa
File:                     3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (raw, json)
Hash identifier:          18RqwEy267Zr/RraNo+S/nzcISVxpvj1na+e3EceUks=
Subject key identifier:   D3:7E:18:3C:60:4C:61:62:3D:17:53:07:82:A5:BB:E9:E2:42:A3:66
Certificate issuer:       /CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
Certificate serial:       617EE3619D14F990B2DC2B79FD287AB4A1FF62D1
Authority key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa
Signing time:             Sun 03 May 2026 03:09:51 +0000
ROA not before:           Sun 03 May 2026 03:04:51 +0000
ROA not after:            Sun 02 May 2027 03:09:51 +0000
asID:                     139378
IP address blocks:        103.142.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl
                          rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7e:e3:61:9d:14:f9:90:b2:dc:2b:79:fd:28:7a:b4:a1:ff:62:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
        Validity
            Not Before: May  3 03:04:51 2026 GMT
            Not After : May  2 03:09:51 2027 GMT
        Subject: CN=D37E183C604C61623D17530782A5BBE9E242A366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:f0:dd:19:da:41:43:95:e5:d0:3b:52:22:
                    a1:25:bf:34:36:77:f3:eb:11:2c:cd:e0:3d:4e:c0:
                    19:af:4b:7a:bb:2a:6d:e8:7b:30:7e:f7:b2:51:1d:
                    aa:e3:e5:bc:e2:fd:03:5e:75:09:24:6d:96:38:8d:
                    f2:03:a0:1d:3e:52:e6:ff:84:44:11:94:81:a0:d8:
                    72:31:84:8c:25:f9:b0:03:bf:3d:71:ad:03:09:aa:
                    31:06:3e:b2:2d:9a:be:7e:d5:a1:37:b0:a3:cf:3b:
                    19:b3:8a:16:d0:52:9b:38:d8:be:9e:14:28:a3:e6:
                    a8:54:49:a2:8e:d7:20:c1:5c:7e:b8:e6:f3:5b:da:
                    6c:56:5a:2b:50:f4:72:bd:56:b9:eb:06:95:b4:66:
                    0b:20:89:71:49:ae:b4:be:ba:ae:88:7c:cd:65:f2:
                    fa:74:01:13:a3:27:d7:9e:4e:59:25:8d:b0:c4:0f:
                    35:e2:87:28:28:48:69:aa:f6:fb:c2:79:d1:1e:84:
                    4a:d7:1f:48:20:b2:66:2f:26:4a:80:0a:3c:3e:1c:
                    ca:63:ec:e3:c7:cb:6b:e4:ba:e0:22:cb:2b:2b:5e:
                    5e:df:46:c1:5e:27:f2:33:02:37:84:5c:55:98:d4:
                    59:68:8c:58:e2:20:08:51:c9:02:82:37:e7:42:d8:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7E:18:3C:60:4C:61:62:3D:17:53:07:82:A5:BB:E9:E2:42:A3:66
            X509v3 Authority Key Identifier:
                keyid:C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:88:3c:18:db:f9:62:99:01:1c:7e:fc:66:18:5c:3a:e1:86:
         f3:97:38:f8:f4:28:8a:81:70:9f:8c:5e:23:cf:a5:79:f6:e3:
         82:60:4a:f1:7c:25:b4:30:0b:e4:fc:80:ca:f5:04:b4:fe:e3:
         12:c5:d6:06:37:aa:01:9e:bf:bd:ce:52:dd:4d:50:11:d0:62:
         29:4b:29:50:0e:4f:ff:ba:1f:48:03:f3:9f:8f:06:be:b3:73:
         b9:44:c7:2a:a5:a4:98:22:ca:e0:df:50:ee:e8:cf:82:27:54:
         29:e3:97:6b:58:51:76:7a:39:3c:0f:6a:86:02:24:16:30:35:
         72:e8:44:b4:6f:3e:9d:c2:e0:fd:a8:6d:6b:58:58:81:bf:2d:
         99:fb:f0:17:ca:67:67:97:4a:68:f6:0c:36:6f:ad:b6:11:64:
         23:5c:8b:bd:9f:80:86:f9:80:82:8e:e6:bb:ca:2a:fa:ad:50:
         8f:87:97:dd:94:19:36:ef:7a:9c:1d:e1:0e:c4:92:47:a5:5e:
         8d:5d:27:56:9e:2f:ad:59:59:95:42:82:92:5b:9a:38:2d:d4:
         a9:a9:53:cb:f3:41:f2:bb:ef:b3:8c:af:b2:b2:6c:e6:89:41:
         9d:ef:3d:55:84:7f:3a:2c:14:c5:92:03:ba:3b:5c:94:2c:ee:
         83:14:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:22 2026 by rpki-client