Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa
File:                     3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (raw, json)
Hash identifier:          D5q5bTHq8BQ04TyBnr4PuuXdKyx0oQAzkOAr8cWDZtM=
Subject key identifier:   88:DF:12:7F:CD:64:DF:C7:FF:16:12:31:F7:84:AC:F7:22:9C:4F:0D
Certificate issuer:       /CN=B4EA91A6AB8247898ABE5F6A973AC83C2D981279
Certificate serial:       36D4D810C0DBB4D69736DE7EE77EFDE9943853AC
Authority key identifier: B4:EA:91:A6:AB:82:47:89:8A:BE:5F:6A:97:3A:C8:3C:2D:98:12:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa
Signing time:             Sun 03 May 2026 03:14:25 +0000
ROA not before:           Sun 03 May 2026 03:09:25 +0000
ROA not after:            Sun 02 May 2027 03:14:25 +0000
asID:                     141139
IP address blocks:        103.159.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.crl
                          rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d4:d8:10:c0:db:b4:d6:97:36:de:7e:e7:7e:fd:e9:94:38:53:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EA91A6AB8247898ABE5F6A973AC83C2D981279
        Validity
            Not Before: May  3 03:09:25 2026 GMT
            Not After : May  2 03:14:25 2027 GMT
        Subject: CN=88DF127FCD64DFC7FF161231F784ACF7229C4F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:0b:d5:63:5c:ee:56:27:06:fa:14:9b:61:
                    8b:dc:b5:d7:0e:d5:e2:1a:c1:64:96:0f:92:bd:c5:
                    78:95:37:e9:f7:eb:92:4e:db:27:0a:2b:1c:31:ce:
                    f7:9b:f1:f5:36:85:44:b7:04:d0:68:a2:42:2b:e7:
                    a4:96:b3:67:47:63:5f:28:d6:c4:be:45:23:a7:d5:
                    91:e8:2a:e6:78:3a:ec:18:f6:84:9a:0f:10:91:11:
                    d8:03:2d:d1:a5:d2:55:cc:af:6f:f3:2f:a7:b7:e0:
                    6b:79:99:32:c4:56:1e:ef:95:5e:2a:50:34:fa:81:
                    b2:c9:d4:71:2d:d8:1b:23:7d:c8:78:d0:89:fe:66:
                    7e:88:3f:84:45:c8:ed:86:34:bf:01:fb:a3:11:b2:
                    f6:b4:32:39:02:4c:d6:fb:0b:c1:6b:6e:75:85:72:
                    83:10:a3:1a:89:14:05:b8:b0:37:7c:09:fd:02:34:
                    84:07:84:d7:89:1d:cd:fa:83:f2:02:aa:04:e8:cf:
                    dc:78:be:c6:7c:2d:98:86:3d:99:73:22:6b:6a:45:
                    36:64:11:c3:02:e4:d2:15:a1:4c:c0:25:47:b3:a0:
                    36:ba:4b:55:fe:47:ea:26:b5:43:38:fb:0a:6f:7d:
                    da:34:24:f2:64:b9:e2:ac:64:e2:00:35:ae:e1:35:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DF:12:7F:CD:64:DF:C7:FF:16:12:31:F7:84:AC:F7:22:9C:4F:0D
            X509v3 Authority Key Identifier:
                keyid:B4:EA:91:A6:AB:82:47:89:8A:BE:5F:6A:97:3A:C8:3C:2D:98:12:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:65:51:de:2a:43:f3:a1:20:26:72:c5:ac:71:5c:16:8c:99:
         73:ca:e8:c5:c5:19:c7:33:d7:1b:5d:16:0a:4b:1e:c6:54:21:
         9d:f4:4c:62:d0:87:ce:e2:56:74:6d:90:ae:e5:fa:80:f7:74:
         f5:3c:1e:01:26:fb:61:08:98:00:54:d4:5b:6f:27:e4:1f:54:
         30:86:49:00:a9:4a:ed:53:68:80:7f:61:69:5d:0d:96:15:82:
         63:89:fd:a8:90:3e:83:3c:b3:8e:7c:e2:c1:d7:f6:48:4a:a3:
         a9:c9:69:5d:3c:30:e1:9d:6c:d0:89:6a:f5:2e:cb:24:f4:1b:
         7d:10:78:0e:a8:b6:78:b6:c0:8b:de:e0:b2:65:2d:8f:35:58:
         78:0f:5c:84:8d:23:82:e9:43:52:33:c0:db:14:85:91:0d:54:
         0c:e2:47:18:ad:cd:f6:22:34:07:58:20:1a:97:8f:49:5c:90:
         e5:db:43:95:99:07:3e:48:ec:09:2f:b1:49:c9:7e:ca:b0:21:
         b9:8c:61:42:aa:63:99:91:d8:06:d2:70:c4:eb:82:70:2f:8a:
         f6:5b:47:2a:db:fb:fb:09:9f:56:1b:81:8d:79:19:52:08:1c:
         94:70:60:d1:b2:9a:c5:ef:a8:5b:0f:41:0e:1c:6a:15:5c:82:
         fb:80:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:52 2026 by rpki-client