Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134312e302f32342d3234203d3e203338313635.roa
File:                     3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          caorMzAk2rhKrHkZPEylYGbz3q7q/4kgUFG0ZpSaKuk=
Subject key identifier:   FE:7C:E5:B0:ED:BA:75:CF:3A:C9:BA:3A:20:67:D6:BD:2F:4D:97:CD
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       5F0DAD037C65669A307F5CC7AF7757C3C342371F
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134312e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:14 +0000
ROA not before:           Sun 03 May 2026 03:13:14 +0000
ROA not after:            Sun 02 May 2027 03:18:14 +0000
asID:                     38165
IP address blocks:        103.83.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0d:ad:03:7c:65:66:9a:30:7f:5c:c7:af:77:57:c3:c3:42:37:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:14 2026 GMT
            Not After : May  2 03:18:14 2027 GMT
        Subject: CN=FE7CE5B0EDBA75CF3AC9BA3A2067D6BD2F4D97CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:c4:92:09:d6:27:92:6a:57:13:5d:f5:13:
                    0c:2d:e2:f7:99:35:f0:ae:bd:37:04:da:4d:9a:22:
                    74:f9:a3:9f:1e:67:f1:19:6e:ba:8c:9c:ad:a1:a1:
                    c5:2b:4d:81:c9:0c:e8:68:f6:f0:af:2e:a9:35:fd:
                    50:81:c0:0a:4b:2b:f6:58:7e:76:d1:03:27:24:55:
                    a8:eb:95:4b:98:c4:b6:d5:03:a5:85:a1:ac:b9:f9:
                    de:ef:81:1e:34:05:d0:f9:fb:e1:eb:79:84:1d:51:
                    6a:94:d9:e2:f2:1c:5d:ef:c7:b3:63:50:57:34:fb:
                    84:60:cb:7b:25:a3:59:91:58:1a:49:7a:84:ac:c7:
                    00:86:ce:79:03:2c:93:cf:a8:64:79:08:b7:79:f4:
                    6a:2a:e2:94:ac:71:80:fe:b5:9f:a1:63:87:c4:90:
                    17:e5:8c:a9:4e:3d:7d:23:18:2f:5f:c7:b6:39:64:
                    28:00:4d:53:5e:34:b9:c5:c4:d4:50:fe:ef:57:63:
                    b2:5b:bd:1f:a2:72:ef:46:d4:3a:fa:9a:75:3f:ee:
                    4e:44:94:74:f9:d4:4f:b9:54:8c:ed:1f:8c:a3:e7:
                    f2:1e:7c:c3:4c:7c:41:dc:9b:8c:43:a4:db:06:05:
                    ca:20:67:fd:97:61:5a:76:ac:09:e1:98:34:b6:c8:
                    2a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7C:E5:B0:ED:BA:75:CF:3A:C9:BA:3A:20:67:D6:BD:2F:4D:97:CD
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134312e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c9:01:ad:8d:22:c2:b7:35:a5:21:05:b6:68:9f:01:05:20:
         86:71:88:b1:cb:b9:15:81:ef:91:c7:fe:20:2b:07:a8:fc:4b:
         fb:ce:68:af:ab:84:a3:13:16:3f:90:a6:14:88:27:0e:f0:d8:
         85:1f:7d:8d:31:22:a6:24:0c:bb:8c:59:a4:fd:c0:0c:88:d5:
         88:6a:75:e9:f2:ba:9f:36:10:64:e2:ca:7f:9a:62:90:91:a9:
         f9:44:26:b9:db:03:4d:cb:82:cf:5a:f3:be:3d:95:98:50:c7:
         8c:00:ba:bc:b9:7e:3a:95:f0:c2:0b:4d:fd:3a:d6:fb:96:96:
         dc:3d:5a:f7:7d:0a:04:c6:6f:93:0f:01:69:62:61:c1:7f:c3:
         fb:ed:84:0f:a2:75:9f:d4:dc:be:d8:01:f0:0b:e8:5e:c5:63:
         b9:fd:d1:ac:29:cd:f9:3d:1c:6f:33:12:81:1e:b3:f9:2f:02:
         62:fb:8a:d7:2f:38:17:97:87:11:46:6a:34:df:a6:d3:67:47:
         44:6d:5b:29:b3:50:b6:a2:84:df:97:10:f4:0a:6d:31:d5:76:
         06:64:9e:1a:1f:0e:1c:78:46:75:79:f6:d6:5f:c2:11:60:24:
         79:eb:be:d5:71:d7:dd:6c:5b:e6:a8:3a:f7:8b:b4:7e:81:b5:
         bf:05:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:36 2026 by rpki-client