Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa
File:                     3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (raw, json)
Hash identifier:          WE6yzn5zZerVSAjtk4R/8zE12QnoZeSwbNL716L9BEo=
Subject key identifier:   43:06:66:59:40:27:33:5B:9A:F8:23:F4:C4:23:2F:4A:79:50:53:1D
Certificate issuer:       /CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB
Certificate serial:       1D419B16D5999215A1DFD87D431750C689628D8F
Authority key identifier: 17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa
Signing time:             Sun 03 May 2026 03:14:24 +0000
ROA not before:           Sun 03 May 2026 03:09:24 +0000
ROA not after:            Sun 02 May 2027 03:14:24 +0000
asID:                     139369
IP address blocks:        103.142.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl
                          rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:41:9b:16:d5:99:92:15:a1:df:d8:7d:43:17:50:c6:89:62:8d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB
        Validity
            Not Before: May  3 03:09:24 2026 GMT
            Not After : May  2 03:14:24 2027 GMT
        Subject: CN=430666594027335B9AF823F4C4232F4A7950531D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:79:42:64:79:85:48:6b:04:58:f5:cb:f7:
                    17:86:2a:2f:66:31:88:bc:ad:1c:fc:2b:17:7f:5a:
                    0d:71:8f:99:d4:b7:e3:10:83:f4:43:e6:ce:cb:af:
                    75:7b:2d:31:fe:a1:48:d6:31:8f:74:a4:9e:12:ec:
                    ae:e4:4d:5a:4e:9a:08:c3:b0:a2:d8:ee:f7:a5:27:
                    11:6c:0f:1b:7c:10:da:8e:62:e5:5b:b3:65:53:43:
                    49:a2:48:83:e0:74:fe:5e:2a:4f:f9:77:c6:17:b6:
                    93:94:03:1f:fd:ba:3d:eb:11:52:b1:fa:0e:31:1b:
                    eb:86:42:e8:2d:e4:83:9d:d1:dd:ce:b9:81:5f:50:
                    a4:c5:6a:cd:15:e0:ef:42:c2:69:a7:b5:9d:80:58:
                    74:f9:a4:2c:f0:2f:11:64:58:5a:21:ac:e3:45:73:
                    3d:98:4e:52:d1:af:82:3a:2e:99:96:be:1f:e6:b6:
                    d9:f8:63:a2:1a:0c:4c:f3:25:8b:5e:db:f9:1a:4f:
                    a8:0a:47:a5:a7:22:d7:29:9d:bd:36:3d:b9:a9:c6:
                    5d:d1:c5:1a:b2:fd:25:89:45:b7:bb:08:0b:e6:b7:
                    3d:5c:3d:06:5a:23:8e:8f:5e:9e:1e:2a:6f:97:55:
                    78:73:cc:50:fe:31:c9:1a:0e:7e:5f:eb:5a:d1:73:
                    30:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:06:66:59:40:27:33:5B:9A:F8:23:F4:C4:23:2F:4A:79:50:53:1D
            X509v3 Authority Key Identifier:
                keyid:17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:e6:cc:a3:f8:86:8b:7f:2c:cb:13:1b:5d:db:7a:17:d4:
         0f:a1:d1:f2:df:65:59:bf:2b:2b:ac:83:b7:3f:df:4f:e7:4a:
         36:3f:94:4e:b8:7a:2b:0e:63:4c:dd:57:61:ee:2c:8e:ee:28:
         b3:91:c0:5d:69:8a:91:33:9e:2d:45:01:2d:c8:d5:46:c4:a2:
         e7:ef:a1:11:06:99:c5:89:15:f3:4d:79:98:ef:e3:8b:62:54:
         e7:0f:4f:a3:ab:10:7c:97:dc:c9:f8:62:bd:9a:6f:36:27:c8:
         61:e8:8d:82:f7:98:48:32:c4:5e:05:03:3e:f0:cf:c5:79:a0:
         65:e4:5b:23:86:e3:18:bf:cb:a5:da:e8:62:9b:53:fe:fe:30:
         a5:62:75:dc:a5:f7:66:ca:3c:7a:47:bf:90:3b:49:0c:0f:c0:
         d3:f4:3b:19:4e:b6:c3:79:64:63:04:25:0b:f5:83:c6:fa:2d:
         d7:ae:bf:c0:72:e0:6d:da:3b:6d:70:d9:3f:dd:c8:25:53:ff:
         00:13:56:58:83:5c:12:b6:65:2b:b0:02:08:18:fa:44:7e:3b:
         2e:77:63:52:24:ad:e9:6b:25:f7:4c:17:27:8e:41:3c:10:75:
         8f:3c:3f:67:ea:f1:54:ad:c8:0c:2a:96:fd:52:19:39:23:0a:
         61:69:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:44 2026 by rpki-client