Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32332d3234203d3e203338313635.roa
File:                     3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (raw, json)
Hash identifier:          X2L0BGiTvmgLJtgSEYwPB9xF12na1ku6hIINh+wHP14=
Subject key identifier:   1D:FB:F4:5B:E3:8C:C6:59:0D:40:A2:1E:A2:B2:74:21:6D:80:A6:51
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       1CA0D441F2BAB322E1F178EE15940D4207F772E3
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32332d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:13 +0000
ROA not before:           Sun 03 May 2026 03:13:13 +0000
ROA not after:            Sun 02 May 2027 03:18:13 +0000
asID:                     38165
IP address blocks:        103.247.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a0:d4:41:f2:ba:b3:22:e1:f1:78:ee:15:94:0d:42:07:f7:72:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:13 2026 GMT
            Not After : May  2 03:18:13 2027 GMT
        Subject: CN=1DFBF45BE38CC6590D40A21EA2B274216D80A651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:21:28:72:12:3e:bc:1e:06:6f:3e:fc:20:
                    f3:6d:fa:64:24:0a:5b:6b:d6:21:75:33:86:5f:2b:
                    78:74:61:6d:fa:fb:7c:00:3a:e7:83:07:30:42:c5:
                    bb:3d:2c:1c:19:13:1a:ae:31:9f:b2:fd:87:66:4b:
                    d7:b6:df:a4:05:fe:a6:f4:49:9a:8a:b9:c0:37:06:
                    e2:b7:31:da:0e:3c:d2:d9:84:3f:f0:4e:55:de:1c:
                    2d:2b:9d:b9:fb:ab:a3:a2:6a:fe:5c:6f:ce:63:47:
                    37:d8:44:48:d8:69:c1:57:1d:cd:b0:d9:cd:7f:89:
                    2a:3a:a3:ee:f5:fb:aa:71:aa:1e:44:44:46:59:56:
                    21:18:b4:48:64:8b:9b:9d:7c:b3:2e:e6:ba:40:41:
                    17:5f:43:f8:08:2f:48:f3:94:10:1b:1b:48:3f:ee:
                    ab:da:3d:6c:77:24:02:ae:7b:94:9d:f1:00:d9:5c:
                    85:56:75:c1:0d:36:66:cd:4c:a2:47:88:67:fb:2d:
                    f1:db:2a:5a:4f:11:88:7a:6d:32:82:97:5c:e9:9d:
                    ec:93:6f:0a:f6:67:14:22:fb:8b:bb:3d:13:72:39:
                    0f:81:19:2c:d1:9e:81:8b:aa:d3:85:9f:aa:2b:8b:
                    02:9c:e9:a1:a7:51:75:6c:87:93:53:aa:f2:0a:5a:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FB:F4:5B:E3:8C:C6:59:0D:40:A2:1E:A2:B2:74:21:6D:80:A6:51
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32332d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:93:82:9e:34:6c:77:0b:8b:2a:1d:05:1d:02:8a:b8:ed:94:
         47:98:e2:03:ad:11:6c:82:aa:f4:55:3b:5b:ce:82:3b:21:2f:
         16:3a:6b:c6:6e:88:ce:4e:38:46:8f:ef:40:13:7e:59:5e:b7:
         29:29:cb:88:29:61:91:63:5f:df:cb:88:48:05:04:94:39:9f:
         9f:14:5d:b5:d2:ea:55:a4:23:9d:c1:c4:f1:6d:1a:90:c6:5e:
         59:ab:db:e3:70:3b:4f:f0:4b:5d:9f:07:69:a5:80:fc:f8:c5:
         d8:0f:2f:c3:9c:16:d0:80:ec:10:f8:38:cd:23:31:fd:2c:fc:
         ce:6e:0b:59:ba:af:59:c0:b0:a5:84:18:ef:6d:52:fc:bd:1f:
         bc:a7:08:da:e2:71:bf:75:70:b4:e9:16:c5:b3:9e:c0:9f:cf:
         c0:be:29:3a:98:fc:2a:f0:f6:a3:7d:57:36:e9:86:a9:99:04:
         bc:df:e0:d0:38:40:b0:3e:74:e7:b6:d9:64:51:48:4a:a4:57:
         77:89:2f:bf:42:05:f3:e4:ee:f7:86:47:ed:57:c3:da:02:c5:
         93:de:16:84:c3:33:f0:43:cc:8e:47:17:23:81:ce:5f:65:c3:
         14:2c:44:3c:e8:d5:5a:64:82:15:58:4f:69:47:8f:bd:ba:d6:
         71:64:45:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:51 2026 by rpki-client