Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134302e302f32342d3234203d3e203338313635.roa
File:                     3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          fksrul4lMZ1/XL5r5cu/WNsWpdzw6wwNzqAHD2IefPw=
Subject key identifier:   F8:1C:83:E0:B8:42:F3:5F:74:82:E9:7F:6D:82:93:9C:6F:5C:6E:E9
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       4E4203D10204576CAEA928B3FE606C225AF31388
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134302e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:08 +0000
ROA not before:           Sun 03 May 2026 03:13:08 +0000
ROA not after:            Sun 02 May 2027 03:18:08 +0000
asID:                     38165
IP address blocks:        103.83.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:42:03:d1:02:04:57:6c:ae:a9:28:b3:fe:60:6c:22:5a:f3:13:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:08 2026 GMT
            Not After : May  2 03:18:08 2027 GMT
        Subject: CN=F81C83E0B842F35F7482E97F6D82939C6F5C6EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:98:d9:09:5b:fa:2b:f0:87:af:5f:80:31:
                    ac:bd:e4:64:26:ee:4b:dc:da:0d:4f:37:33:70:dd:
                    f2:79:f9:3e:9e:7f:2a:c1:ea:a9:47:37:ba:ef:f7:
                    fb:a9:1a:55:e2:ad:46:0b:dc:e0:0e:a1:3d:73:ce:
                    1f:f4:8b:47:0b:d2:26:6c:62:7e:ef:f1:ba:b4:0d:
                    db:d6:31:6f:7b:32:bd:43:78:ad:a4:3d:6d:2a:ab:
                    3c:f9:37:ba:16:46:e2:90:3b:95:7d:35:8a:fd:6e:
                    ea:13:79:46:03:bb:0a:e4:cf:cb:18:fa:7e:f0:0c:
                    ab:bd:c9:0e:e1:5c:0a:a3:45:25:00:67:98:07:da:
                    fc:e9:1d:1b:69:96:24:9b:25:15:8c:f1:c9:ee:2c:
                    c0:d2:47:15:2d:ad:7b:4a:79:04:a6:cf:c4:b1:51:
                    43:18:ab:99:f7:a1:aa:3b:d5:02:44:a5:eb:7d:e6:
                    e5:7b:ea:e0:17:ad:02:69:c7:5c:d8:4b:b6:e0:df:
                    cd:1b:cd:ae:05:72:f2:ac:e3:b3:57:3c:22:60:ca:
                    82:b2:e2:e9:23:16:ab:ed:bd:38:4d:8d:29:f5:b1:
                    f7:f7:72:2f:58:ae:a4:22:c8:7c:6c:43:f9:aa:80:
                    c5:4c:ec:7f:1c:e1:80:34:6a:21:8d:7f:85:59:89:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1C:83:E0:B8:42:F3:5F:74:82:E9:7F:6D:82:93:9C:6F:5C:6E:E9
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134302e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:92:18:7a:a5:09:14:46:40:d9:70:00:64:aa:f9:06:48:a6:
         30:f3:05:7a:ac:99:5c:2c:37:8b:9d:c3:d4:cf:17:a8:02:aa:
         ad:01:27:3b:0c:3e:05:97:7d:33:b7:84:61:db:1a:cc:af:62:
         8d:b4:c9:39:43:2e:70:99:04:27:51:d3:7a:f0:32:2b:f7:32:
         02:24:33:89:2d:a7:11:d0:03:73:e5:ed:f7:d0:c2:f6:b2:e0:
         9a:6d:7a:68:76:b7:e6:64:e6:79:25:d1:38:e3:8f:b4:37:92:
         80:52:9b:3c:6c:19:e7:09:1b:cd:ea:a3:5f:02:fd:94:26:ee:
         af:a6:0e:14:1a:ac:c6:bf:60:cc:36:68:b9:85:36:56:8b:18:
         9c:0c:26:f8:1e:38:8e:78:9b:24:f4:90:06:34:50:f2:22:64:
         a3:71:fa:44:02:e4:a6:a2:07:8e:4a:7f:26:50:d3:fa:cd:e6:
         b9:d2:42:14:59:83:db:bf:74:46:dc:1d:5e:6e:56:9e:3c:48:
         fc:9a:cb:5f:42:1b:26:0e:60:cf:61:63:10:bc:e4:fb:36:6a:
         93:05:a8:e9:66:11:86:f4:00:bc:d3:f2:22:dd:09:94:fc:81:
         cb:e1:72:24:93:97:ef:64:6e:80:6d:9f:12:5f:18:4b:8d:c1:
         21:97:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:58 2026 by rpki-client