Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa
File:                     3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (raw, json)
Hash identifier:          W3BqOyBvgv9ZGlE75nq9UMAZmqS7PmSAhfmH8SJpDVI=
Subject key identifier:   19:BC:96:D8:E0:82:20:BE:E4:D5:AA:EF:4A:8F:09:38:E5:AB:0E:55
Certificate issuer:       /CN=B4EA91A6AB8247898ABE5F6A973AC83C2D981279
Certificate serial:       429215DC4C79A5CCCED584BA2AFB841290D77616
Authority key identifier: B4:EA:91:A6:AB:82:47:89:8A:BE:5F:6A:97:3A:C8:3C:2D:98:12:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa
Signing time:             Sun 03 May 2026 03:14:25 +0000
ROA not before:           Sun 03 May 2026 03:09:25 +0000
ROA not after:            Sun 02 May 2027 03:14:25 +0000
asID:                     141139
IP address blocks:        103.159.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.crl
                          rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:92:15:dc:4c:79:a5:cc:ce:d5:84:ba:2a:fb:84:12:90:d7:76:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EA91A6AB8247898ABE5F6A973AC83C2D981279
        Validity
            Not Before: May  3 03:09:25 2026 GMT
            Not After : May  2 03:14:25 2027 GMT
        Subject: CN=19BC96D8E08220BEE4D5AAEF4A8F0938E5AB0E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:56:d3:cd:c1:57:37:c2:88:6d:e6:61:66:
                    35:76:10:5c:54:e0:b2:56:5f:55:e0:b8:8c:d1:78:
                    84:2e:af:fe:a2:26:0c:48:89:70:e0:42:a1:a9:a5:
                    04:6a:cd:ee:fa:cc:f6:fe:a2:40:37:16:6a:63:d8:
                    91:fe:34:06:d3:8e:11:6d:95:b9:a9:39:37:b8:61:
                    c7:8f:71:7f:32:7e:5e:09:da:d8:1b:03:12:bb:c9:
                    0d:9e:2e:e5:33:dc:ec:b7:c6:40:8c:93:c6:00:54:
                    b8:e8:71:5d:29:be:13:08:53:67:20:c5:3c:d4:dc:
                    d7:69:7b:ae:04:ed:5a:54:eb:a7:36:da:aa:6f:77:
                    4e:25:0a:53:fd:8a:50:36:25:e5:5f:55:64:4e:6a:
                    84:29:b4:49:a0:56:5d:e4:a0:04:51:09:76:89:3d:
                    5d:3e:93:df:9f:14:47:bc:c4:c0:92:6a:7a:ba:e1:
                    e6:67:d8:36:65:b7:bc:e0:ab:d3:08:63:8a:16:2e:
                    c5:01:32:ed:a5:1e:fc:8c:67:39:d3:8d:12:24:e2:
                    bb:6d:44:5e:11:8e:6a:59:31:8f:04:a1:2f:0c:c1:
                    e8:98:95:86:63:33:74:c9:3d:3c:f0:17:56:f6:dc:
                    22:85:43:05:0a:65:89:92:d7:22:44:25:1b:39:fc:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BC:96:D8:E0:82:20:BE:E4:D5:AA:EF:4A:8F:09:38:E5:AB:0E:55
            X509v3 Authority Key Identifier:
                keyid:B4:EA:91:A6:AB:82:47:89:8A:BE:5F:6A:97:3A:C8:3C:2D:98:12:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:7d:0d:15:3e:f6:b8:99:a9:ba:da:dc:e1:f7:a2:55:8d:
         91:d7:29:3b:39:dc:8a:32:83:d3:1c:24:65:a7:e4:cb:4e:2c:
         77:10:5e:eb:5c:3a:7c:33:9f:8d:6f:ae:1d:05:d8:f2:ed:fa:
         df:4a:7b:5a:75:25:43:76:8e:22:b9:c6:7e:94:f7:62:26:32:
         01:26:ca:f3:52:18:e3:7e:ca:dc:a2:77:f3:af:ed:7a:2a:e0:
         ad:9d:e9:91:38:75:39:f7:31:ea:48:03:ab:b1:1e:dc:05:fc:
         32:ac:8a:91:44:e6:ba:68:94:d7:14:20:32:d9:5f:1c:bb:0b:
         a8:ef:58:fc:fe:66:c5:41:b2:88:7e:c1:1e:9b:e8:63:63:94:
         a3:2e:94:e7:28:62:8e:2c:11:b7:86:26:24:69:8e:7a:f5:96:
         04:43:47:37:9d:45:06:e8:2c:12:dc:34:38:03:72:45:03:c2:
         df:37:7e:89:72:a5:92:cd:53:64:19:0f:82:db:cc:b7:d5:28:
         1c:db:dc:4d:cd:c0:0e:f4:d6:cc:7d:3a:e5:87:e5:f8:85:d4:
         61:73:4b:be:cf:14:38:e0:a5:62:0b:42:9c:cc:63:0b:ec:4f:
         19:9f:f6:ea:ca:41:b8:6f:1a:0b:33:19:45:64:4a:c6:d1:0a:
         29:c8:cc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:30 2026 by rpki-client