Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa
File:                     3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (raw, json)
Hash identifier:          R4MBAYAEX9Tv0xootJiGEA1eln9suXnVGRSSaR5WyEA=
Subject key identifier:   B0:79:0B:33:84:9B:48:3D:3A:46:5F:92:C6:84:94:6D:F8:0D:C3:69
Certificate issuer:       /CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723
Certificate serial:       595571F419C01B6898C450687D4F2468BFD34446
Authority key identifier: 9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa
Signing time:             Sun 03 May 2026 03:18:07 +0000
ROA not before:           Sun 03 May 2026 03:13:07 +0000
ROA not after:            Sun 02 May 2027 03:18:07 +0000
asID:                     149944
IP address blocks:        103.73.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl
                          rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:55:71:f4:19:c0:1b:68:98:c4:50:68:7d:4f:24:68:bf:d3:44:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723
        Validity
            Not Before: May  3 03:13:07 2026 GMT
            Not After : May  2 03:18:07 2027 GMT
        Subject: CN=B0790B33849B483D3A465F92C684946DF80DC369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:94:8e:82:4c:fd:aa:ff:84:d6:66:c0:9c:
                    05:2e:4c:67:74:7d:21:fd:f8:98:b0:96:5f:05:ad:
                    4e:ff:b8:1e:e8:15:56:f3:44:53:0f:8b:e4:18:a9:
                    db:99:dd:9f:d4:86:a2:c2:b0:4d:5e:39:b0:c6:12:
                    db:2b:2d:70:f3:74:43:1f:92:4f:17:a8:ef:c8:2a:
                    e0:c8:7a:bb:f1:dc:5c:cc:c9:d0:7f:c0:8d:9f:98:
                    ae:79:83:45:4e:f8:29:8b:7d:bd:b5:10:e7:0c:f8:
                    0b:cc:60:fb:58:dc:6b:d6:a6:79:e5:66:c4:bf:e2:
                    1a:0f:59:b1:7c:19:a2:8f:de:e3:73:02:2d:98:eb:
                    2c:d0:01:91:0f:55:16:b7:f2:df:ab:4c:4d:d0:4c:
                    19:88:dd:bd:e8:dd:d4:85:71:8b:f2:cb:33:9a:42:
                    1d:13:e2:08:f2:37:f4:8a:95:fd:3c:c0:fb:c1:06:
                    7a:b8:20:86:05:50:87:9c:ca:e5:1a:f3:5f:0e:c4:
                    82:b2:b5:6e:65:62:1b:9b:61:01:94:1a:f2:05:f9:
                    5d:4d:d3:c8:c9:35:db:62:09:11:10:f8:c1:eb:d4:
                    be:7d:e9:b0:f8:f0:25:05:ba:91:3c:c6:15:df:78:
                    a5:21:66:bf:6e:54:62:b4:00:33:82:19:6d:66:32:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:79:0B:33:84:9B:48:3D:3A:46:5F:92:C6:84:94:6D:F8:0D:C3:69
            X509v3 Authority Key Identifier:
                keyid:9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:4e:fb:9e:24:de:91:9d:69:52:3e:db:f9:0a:e2:f5:bd:2f:
         b0:50:b9:d8:d6:c4:a2:43:e9:01:e0:94:fc:24:a0:38:13:ff:
         ea:1b:f3:47:22:28:a1:46:8e:76:f2:3e:31:b6:e4:f9:61:5f:
         8d:02:66:63:1e:57:0d:15:d3:c1:7c:bd:3b:d8:97:da:65:d4:
         db:b0:71:01:3c:c3:0d:86:76:67:6d:9f:51:bb:b6:da:91:15:
         f1:77:09:ee:81:4c:a6:65:c2:45:f7:7a:3e:a0:f3:ab:60:dd:
         84:63:d7:4d:74:47:0d:e8:33:5f:b7:0d:28:cc:4a:ee:3a:7d:
         b7:b5:bd:d6:42:0c:58:72:68:57:67:6a:dd:dd:18:98:0b:b4:
         bc:41:2c:4a:dc:75:c6:be:5b:37:02:3d:ad:87:ac:8d:9f:03:
         d6:00:9c:0b:9c:2f:f6:8e:be:a3:8d:41:1a:c1:20:aa:4c:85:
         f1:4b:78:cf:ed:01:e1:64:19:62:b3:09:92:b1:20:de:21:d6:
         df:18:37:39:0a:4e:40:ac:e3:e0:d3:57:70:2a:ed:64:f4:65:
         31:e3:b4:26:65:b5:89:c5:93:8e:4a:52:d7:50:47:17:ed:37:
         3d:bd:33:a0:d6:63:60:87:03:7e:5e:8b:00:c8:73:21:0c:5c:
         c1:bd:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:54 2026 by rpki-client