Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa
File:                     3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (raw, json)
Hash identifier:          o77O/i7FZPApyDMVFrPKMkI9xXBxv/ECdKB3uq5eUFw=
Subject key identifier:   04:8B:CA:1D:E6:53:AC:F9:10:1A:F4:76:C3:36:B0:8B:CF:A2:1C:8A
Certificate issuer:       /CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB
Certificate serial:       6D745BACDCA4AFB6545B1F746DC6376BBEAC8C2C
Authority key identifier: 17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa
Signing time:             Sun 03 May 2026 03:14:24 +0000
ROA not before:           Sun 03 May 2026 03:09:24 +0000
ROA not after:            Sun 02 May 2027 03:14:24 +0000
asID:                     139369
IP address blocks:        103.142.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl
                          rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:74:5b:ac:dc:a4:af:b6:54:5b:1f:74:6d:c6:37:6b:be:ac:8c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB
        Validity
            Not Before: May  3 03:09:24 2026 GMT
            Not After : May  2 03:14:24 2027 GMT
        Subject: CN=048BCA1DE653ACF9101AF476C336B08BCFA21C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:cd:04:0d:80:71:b1:56:05:92:71:68:c1:
                    e7:40:d9:dd:52:cb:b8:23:99:19:45:ba:26:27:b6:
                    cf:7c:fe:42:e6:4b:26:6f:db:1b:46:67:de:1e:d4:
                    48:45:ba:21:4c:b8:26:50:2f:fd:b8:f6:32:a1:0e:
                    29:1f:46:b4:b3:ec:6d:f3:b6:90:89:87:4a:3f:48:
                    f6:77:d6:84:72:6e:8b:66:30:3b:a6:d4:3c:9a:26:
                    04:d1:80:48:1b:4d:ac:42:fe:39:19:38:14:49:d2:
                    e2:06:f4:ba:b9:e0:72:1a:74:0c:d7:14:94:55:34:
                    1b:b9:b6:2d:3a:49:e8:af:ab:9a:62:d3:be:b1:d3:
                    72:18:03:82:d2:f7:c0:d7:28:8b:ae:d0:5a:37:7c:
                    96:74:65:76:3e:a1:c7:67:fa:a2:4b:7d:4a:c6:61:
                    e5:16:11:46:26:b2:9a:e2:1e:72:c7:d3:2d:b7:25:
                    f4:94:9f:c0:3c:99:c0:0d:0f:16:ff:1c:ba:c9:0a:
                    f5:be:fe:28:42:23:3a:ca:ed:fd:31:bb:22:1e:9b:
                    0c:89:70:e5:85:0e:f7:4c:22:e7:67:ec:df:d0:fb:
                    22:e9:19:55:09:be:fd:e2:3e:75:ab:0b:57:23:40:
                    6a:0a:e4:50:be:c3:f9:87:c2:21:59:24:c4:c7:fa:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8B:CA:1D:E6:53:AC:F9:10:1A:F4:76:C3:36:B0:8B:CF:A2:1C:8A
            X509v3 Authority Key Identifier:
                keyid:17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:75:a3:cb:55:01:1e:6b:9a:fb:76:c3:02:7d:39:d9:49:1c:
         b2:b1:0d:09:9d:f7:a5:36:85:95:fb:fd:18:fe:e3:f5:59:cb:
         5e:d9:ad:a8:8a:8b:26:eb:d1:35:84:67:5e:bb:86:e9:d3:c0:
         d6:4d:f5:c6:86:b4:2b:2c:28:e7:59:4a:2a:6f:4f:59:f6:f6:
         73:3d:d0:54:09:49:b7:e4:c8:12:f5:9d:8a:51:62:25:3d:e1:
         47:59:41:16:bb:f6:43:85:d8:1f:68:31:cc:0a:02:7e:df:82:
         66:71:f3:f3:86:0b:9d:36:74:45:01:69:cc:94:dc:31:2c:cd:
         47:52:e7:9e:d9:b0:f8:84:75:58:b8:a5:dc:13:0e:d0:b7:f1:
         8f:b2:77:01:de:e3:48:81:89:89:06:01:94:9e:7c:d2:47:a0:
         fc:d0:0c:92:86:75:5c:03:92:e3:bc:7b:dd:ea:8f:13:ec:11:
         bc:e3:65:64:a5:7c:c3:dc:7d:34:de:e0:8f:bf:60:82:f0:ba:
         54:13:fb:a2:c3:01:b3:b4:96:dc:8f:8c:43:cd:39:54:2f:26:
         38:9b:1d:f5:8e:bb:fa:c9:df:94:64:89:2f:55:fd:1b:e1:f4:
         ef:18:14:e4:1b:92:79:f5:c5:b6:34:fe:d6:3a:5b:79:13:ba:
         5a:1d:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:23 2026 by rpki-client