Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa
File:                     3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (raw, json)
Hash identifier:          G6mJxfPd30UDcz5ag6UPMmbiQqjncxx0XmGW9whSIV4=
Subject key identifier:   BA:E8:B6:3B:82:C2:39:1D:45:76:05:67:72:3E:40:9B:CE:CA:3A:0C
Certificate issuer:       /CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723
Certificate serial:       498E35651D7FB72A27D97E2DF25B6537AD8CF924
Authority key identifier: 9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa
Signing time:             Sun 03 May 2026 03:18:06 +0000
ROA not before:           Sun 03 May 2026 03:13:06 +0000
ROA not after:            Sun 02 May 2027 03:18:06 +0000
asID:                     149944
IP address blocks:        103.73.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl
                          rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8e:35:65:1d:7f:b7:2a:27:d9:7e:2d:f2:5b:65:37:ad:8c:f9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723
        Validity
            Not Before: May  3 03:13:06 2026 GMT
            Not After : May  2 03:18:06 2027 GMT
        Subject: CN=BAE8B63B82C2391D45760567723E409BCECA3A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b0:2f:06:d7:a8:5a:69:b9:08:11:ae:e0:3c:
                    8f:73:3d:94:47:e0:41:c8:08:ac:98:0b:74:a0:08:
                    b7:f3:b4:64:cd:bc:2b:95:13:7b:c0:aa:44:19:02:
                    64:06:8a:65:c3:96:b4:c4:e7:08:61:2b:9f:54:9c:
                    ba:e3:dd:10:52:f6:51:f5:24:5b:5b:f8:d7:78:13:
                    d3:4a:5c:46:4d:e8:6c:dd:92:3b:70:dc:e7:e6:7b:
                    95:25:8b:af:52:39:ea:86:14:a8:f3:fd:68:47:2a:
                    c2:16:b5:38:67:f3:fd:27:38:35:d1:2b:96:09:7d:
                    f6:7f:e8:53:b9:21:43:18:d1:9b:e4:3f:6e:e3:12:
                    36:88:d3:d1:14:88:ba:cb:69:a4:b2:5e:63:4d:61:
                    47:04:d5:92:50:b9:74:00:e1:82:de:7d:6b:63:34:
                    5b:aa:84:23:69:fa:6e:8f:4c:b6:b9:a6:91:9b:da:
                    df:a3:7d:d8:e2:bb:bb:77:8c:bd:78:d3:96:eb:90:
                    4c:88:77:23:a9:1d:b8:d4:8b:0a:01:4c:4a:92:f3:
                    50:b4:47:a3:1b:fb:81:f7:85:58:69:36:38:97:17:
                    fa:42:4c:f0:70:23:c4:91:69:99:82:b9:07:e0:d0:
                    c1:65:5c:97:67:d3:8f:96:8e:a3:1e:c1:39:ac:4d:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E8:B6:3B:82:C2:39:1D:45:76:05:67:72:3E:40:9B:CE:CA:3A:0C
            X509v3 Authority Key Identifier:
                keyid:9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:02:aa:83:a2:cb:ae:11:01:a4:c5:60:70:3c:09:0b:6a:b5:
         3c:c4:29:cc:65:e8:3f:99:5f:d7:a3:33:b0:aa:ea:91:25:6b:
         25:d3:fe:ba:0a:be:a3:b1:63:49:35:da:f2:d8:12:d9:c0:f0:
         ee:ed:2a:53:b2:ec:d2:da:dc:56:01:59:39:dd:8d:53:ac:fd:
         c4:71:f8:ed:c2:dc:da:d0:dd:1f:a2:14:fc:24:53:f5:7c:85:
         a6:41:15:c9:13:3b:ce:90:41:f4:15:16:a4:ae:9e:45:07:61:
         6d:17:c3:2a:a3:00:a6:ee:65:fa:c2:0c:16:9f:51:67:16:34:
         1e:ef:10:ec:6b:97:75:cb:0e:27:3d:44:29:bc:17:6b:ed:55:
         aa:98:6d:4d:ff:28:f1:ee:f4:57:fb:d0:72:50:76:67:c7:41:
         b5:bb:ba:5e:10:23:58:7d:e4:56:78:e5:59:6a:19:de:b9:95:
         62:67:5f:78:57:81:d2:ba:ac:f3:d8:1a:6c:b8:48:61:fa:89:
         b0:e2:1b:89:0e:87:56:3e:db:b5:91:14:f2:f4:df:4e:cf:72:
         30:b4:38:73:c8:d3:6a:93:75:67:71:06:51:ec:56:33:6f:cc:
         15:7f:b8:b2:e8:56:54:6d:73:64:e6:ad:e8:60:f6:62:80:24:
         28:4a:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:10 2026 by rpki-client