Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa
File:                     3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (raw, json)
Hash identifier:          F4tUjUdEY+l3s8NALDsIE06dbqwvjW+OT7LFyFQ/yeM=
Subject key identifier:   86:20:46:B8:01:8C:16:3C:E8:3D:49:FD:42:C4:13:64:3C:77:79:D7
Certificate issuer:       /CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
Certificate serial:       0A163BBE0F43A86B9B89E3A2520A019E4903D11F
Authority key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa
Signing time:             Sun 03 May 2026 03:09:52 +0000
ROA not before:           Sun 03 May 2026 03:04:52 +0000
ROA not after:            Sun 02 May 2027 03:09:52 +0000
asID:                     139378
IP address blocks:        103.142.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl
                          rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:16:3b:be:0f:43:a8:6b:9b:89:e3:a2:52:0a:01:9e:49:03:d1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
        Validity
            Not Before: May  3 03:04:52 2026 GMT
            Not After : May  2 03:09:52 2027 GMT
        Subject: CN=862046B8018C163CE83D49FD42C413643C7779D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:3f:dc:51:52:35:d5:27:ea:52:c0:f3:b4:
                    9c:a8:43:a8:33:af:64:63:50:34:13:c0:72:e7:7a:
                    d3:b8:59:0b:2a:2f:5c:a8:c7:1f:87:9b:ca:02:82:
                    38:b4:7e:a7:32:01:bd:1d:bc:10:9a:63:aa:7b:a9:
                    d0:40:62:14:e8:21:cc:3e:ff:1a:63:e6:99:b3:be:
                    28:b8:35:30:a8:54:c2:e0:61:f9:27:19:9f:c2:f5:
                    2f:b5:77:f1:30:e6:7d:59:65:a8:d2:33:52:26:79:
                    32:e5:f5:ff:62:49:6b:dc:57:80:04:97:02:17:c2:
                    19:58:85:d3:a7:e4:7c:f6:61:fc:e5:7c:e4:6c:17:
                    89:59:0d:ad:82:4f:f5:b7:cd:77:3c:a0:b5:92:22:
                    4e:7d:ff:07:2b:cb:87:fe:b3:8d:5b:a7:a4:a1:0e:
                    35:ab:41:78:6d:42:28:79:ee:82:74:7e:02:c8:c2:
                    8a:9a:5d:7c:bb:11:8f:4e:93:37:db:2e:bb:66:5c:
                    9e:1c:82:bf:69:e8:69:14:41:0a:f5:46:d2:1a:6d:
                    94:a0:f8:ec:dc:7e:c5:31:53:d5:cf:db:88:76:17:
                    06:0e:8c:8a:0e:f9:19:25:eb:ef:23:c7:b4:09:fc:
                    84:94:99:56:90:43:a3:a7:b7:97:b8:6f:40:5c:fc:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:20:46:B8:01:8C:16:3C:E8:3D:49:FD:42:C4:13:64:3C:77:79:D7
            X509v3 Authority Key Identifier:
                keyid:C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:2c:17:7d:96:d9:c8:68:a7:c9:ba:9a:63:db:da:d5:51:
         58:7d:74:74:25:f5:10:a7:86:91:38:d9:12:44:41:cd:d8:02:
         1b:18:a7:8f:49:9f:3c:b3:b7:10:c3:64:21:dc:1a:1b:9e:f1:
         c1:a7:08:df:b2:24:92:a1:d9:df:f5:0a:f1:e3:61:e5:af:1c:
         e5:38:85:57:8a:06:bc:b6:16:ef:29:b8:5e:23:9b:4f:ad:6f:
         3e:3e:18:08:4a:1b:e0:99:03:31:15:1e:61:a2:e2:65:20:dc:
         af:ff:1d:98:9e:78:fd:e1:92:49:c7:dc:36:f3:8a:7e:59:fc:
         b8:81:0a:6a:96:1f:d3:9c:b7:12:ec:d6:54:89:18:93:59:b6:
         c5:c0:5f:44:ee:39:2e:6f:bf:03:3e:72:6d:72:08:ea:fd:96:
         69:9c:a1:be:98:da:f2:b4:83:7b:fd:a6:d8:96:d8:bc:1a:6b:
         2c:fb:a2:f1:86:7a:70:1d:8e:3a:fa:7e:10:8a:c6:bf:58:89:
         7d:c2:6f:1a:ae:40:d8:68:b6:a7:09:b1:ac:56:d0:e3:41:9a:
         58:0e:fa:32:a1:ac:75:19:6c:eb:cb:17:ae:45:ed:58:1f:37:
         9e:46:b4:94:77:f1:5a:ce:41:6b:80:f9:e8:c9:0f:be:7b:3b:
         1d:a7:1b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:00 2026 by rpki-client