Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa
File:                     3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (raw, json)
Hash identifier:          3eBDLV5ffWUDrJGtZH95s4QphGUZB6+B7Vc+acd6df4=
Subject key identifier:   F5:6F:2C:25:69:7A:C8:53:3C:BF:77:4C:96:5F:30:2C:8A:F4:6A:62
Certificate issuer:       /CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB
Certificate serial:       126024E459BBC67341AFC66C63F6D805BFB76533
Authority key identifier: 8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa
Signing time:             Sun 03 May 2026 03:12:55 +0000
ROA not before:           Sun 03 May 2026 03:07:55 +0000
ROA not after:            Sun 02 May 2027 03:12:55 +0000
asID:                     141646
IP address blocks:        103.162.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl
                          rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:60:24:e4:59:bb:c6:73:41:af:c6:6c:63:f6:d8:05:bf:b7:65:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB
        Validity
            Not Before: May  3 03:07:55 2026 GMT
            Not After : May  2 03:12:55 2027 GMT
        Subject: CN=F56F2C25697AC8533CBF774C965F302C8AF46A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:cc:58:3a:e4:37:ee:a6:80:e8:57:33:bd:
                    65:be:8d:57:6c:90:7d:98:f5:bc:af:c9:64:08:7f:
                    83:be:78:06:6e:f8:bf:ed:cb:48:fc:60:8d:7f:b2:
                    f3:c0:c6:7e:c8:43:c4:80:b9:5e:ae:50:6e:06:82:
                    49:53:6a:ef:72:30:95:06:fa:3a:4a:cf:19:35:c6:
                    d2:6a:b0:8b:ad:e1:28:cc:a2:59:f4:32:d4:78:66:
                    87:a2:e3:35:88:3d:cd:7c:aa:c4:5f:c0:7e:87:b8:
                    65:83:a6:f7:f2:ee:e1:0d:49:f8:37:27:c1:c2:56:
                    c2:2f:8e:f5:80:02:a5:a2:04:33:fa:11:6d:13:b8:
                    8d:19:1c:06:6b:95:f1:55:f6:55:3a:c7:69:56:0c:
                    71:d1:ca:3d:b8:d1:7b:a6:22:d2:2f:df:93:90:01:
                    09:a1:d2:e7:62:0c:b8:e4:8e:15:08:7e:96:3f:9a:
                    04:0d:fe:0c:2e:d6:53:46:59:f0:73:fd:92:00:33:
                    40:61:08:6e:af:aa:87:c5:f1:c6:98:5f:a5:ae:2f:
                    7c:1e:b9:62:ad:0d:86:d0:a8:da:14:73:06:68:a9:
                    ff:f6:c6:2b:41:27:f3:11:a6:8c:5e:29:30:3a:64:
                    10:fe:ca:f5:fe:4d:f7:cb:6f:c8:ef:4d:e7:c7:27:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6F:2C:25:69:7A:C8:53:3C:BF:77:4C:96:5F:30:2C:8A:F4:6A:62
            X509v3 Authority Key Identifier:
                keyid:8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:50:68:d6:33:b3:33:fb:40:2d:c0:aa:b0:23:3b:1e:22:24:
         26:5d:f0:6d:c3:82:25:78:d0:45:70:79:1f:f2:9c:3b:58:8b:
         60:1c:45:50:49:d0:91:b8:49:5f:a5:a6:11:f1:0e:47:7e:f6:
         b6:9f:21:96:67:9a:b4:ad:3a:6a:49:35:cc:82:6e:59:70:ac:
         cc:2e:c9:91:26:37:10:6c:fb:2e:08:11:d8:e8:b9:83:b3:04:
         3b:92:1d:d7:2e:da:24:13:e3:ef:25:b4:97:a6:d5:46:75:ad:
         db:59:dc:40:1d:d4:cd:83:8c:33:ce:53:b5:d5:88:b2:10:bd:
         70:71:a6:a3:01:86:c2:99:1c:cd:9a:eb:0b:c3:2c:c2:24:ac:
         87:89:2c:41:1b:ca:8f:99:6c:6c:84:58:12:f6:da:2a:49:01:
         ff:4c:59:3c:17:d7:29:dc:4c:b7:73:84:31:12:41:34:4e:28:
         b6:5e:1f:f6:b5:d9:4f:20:1d:a7:5c:06:f1:ce:da:cb:5d:e6:
         cf:35:e4:9d:75:c9:b2:a7:f4:d1:e7:0e:f7:8a:61:69:ac:1a:
         64:4d:1d:5c:fa:ed:c9:ca:19:fd:55:7b:43:ab:4d:84:8a:56:
         f6:c4:7e:a6:85:e6:93:0a:cd:f5:34:2d:10:5f:45:a6:49:79:
         8c:86:1d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:55:22 2026 by rpki-client