Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa
File:                     3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (raw, json)
Hash identifier:          Jz250gHnK9wmceEyoEa7ZzH19MTY0j2TTvLScjld8Z4=
Subject key identifier:   3C:CC:D6:09:89:2D:BF:C8:73:B4:6F:F8:A3:AB:FD:2E:2A:EB:91:37
Certificate issuer:       /CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1
Certificate serial:       690F22FAD860916BD1BC1C1DCF2817A75B37A73F
Authority key identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa
Signing time:             Sun 03 May 2026 03:18:32 +0000
ROA not before:           Sun 03 May 2026 03:13:32 +0000
ROA not after:            Sun 02 May 2027 03:18:32 +0000
asID:                     142338
IP address blocks:        103.169.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl
                          rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0f:22:fa:d8:60:91:6b:d1:bc:1c:1d:cf:28:17:a7:5b:37:a7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1
        Validity
            Not Before: May  3 03:13:32 2026 GMT
            Not After : May  2 03:18:32 2027 GMT
        Subject: CN=3CCCD609892DBFC873B46FF8A3ABFD2E2AEB9137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:9d:64:06:b3:29:59:29:39:65:8e:df:7d:
                    8e:c2:ca:cf:5b:32:79:32:a3:fe:79:a0:41:0c:84:
                    a4:0c:a0:e1:55:d1:34:6d:f0:b6:d0:e6:b5:56:92:
                    96:c7:41:e0:70:76:09:9d:95:b8:85:5b:97:5b:6a:
                    15:6e:6a:b5:82:80:c4:2e:f5:f6:30:44:1a:8b:75:
                    4f:6c:39:11:00:89:db:d2:00:e6:64:55:39:02:71:
                    f9:a3:a2:6a:69:fc:74:c3:13:fd:0c:90:b0:22:79:
                    bf:f9:1e:fc:4c:69:23:79:76:bd:00:bb:f3:78:06:
                    41:69:a1:f7:69:35:31:cc:4c:da:30:e6:48:22:3b:
                    69:af:76:1a:99:77:1c:e0:e7:5a:8a:58:0e:d8:7d:
                    3a:b8:1c:8e:df:d1:84:2b:4e:02:44:50:b9:a8:6a:
                    01:00:1e:2e:58:34:7c:6e:48:58:e4:39:73:e5:c1:
                    1c:40:fb:94:20:e5:cc:30:c7:4c:46:a6:63:ef:74:
                    5b:57:cc:f1:19:4a:b9:48:b2:3b:e9:62:81:fb:a9:
                    5f:50:25:be:cc:db:ca:8b:f6:54:d7:e3:16:99:97:
                    d0:30:c2:84:ec:57:69:65:46:b4:f2:f9:63:db:ab:
                    d1:af:b2:55:76:cb:a0:9c:f1:2e:6d:82:eb:27:e0:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CC:D6:09:89:2D:BF:C8:73:B4:6F:F8:A3:AB:FD:2E:2A:EB:91:37
            X509v3 Authority Key Identifier:
                keyid:AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:f8:f3:4c:64:20:ea:a7:00:93:7b:48:39:89:43:c3:b3:f4:
         08:29:25:21:e2:0d:82:3e:a5:c2:5f:86:a8:51:c4:9b:ac:30:
         a7:3b:c4:07:09:0f:f3:98:f2:90:14:5d:84:d0:bc:30:b0:51:
         d7:a9:6f:9c:04:8c:34:77:ba:6a:69:36:07:cf:ee:57:4e:e6:
         c1:69:d2:c8:38:36:6f:cb:a1:8c:47:b9:61:c1:93:5c:92:dd:
         6c:6a:9f:55:1c:3d:90:a2:b1:7c:8b:46:03:c8:78:bf:3e:f6:
         02:17:58:e0:b2:2f:df:95:96:de:74:37:5e:25:c3:e2:cb:f6:
         96:d6:60:b0:44:b9:59:00:7d:2c:14:a4:38:e9:1d:65:05:35:
         4e:e6:f6:4b:99:42:ac:4f:12:52:8e:aa:08:40:cb:fb:70:dc:
         d4:61:80:6a:93:76:b1:52:f9:32:4a:2e:68:08:9b:65:12:2a:
         b7:38:bc:b8:0d:5a:84:dc:ef:bc:2d:75:a4:4d:7f:4d:20:0b:
         e0:25:a4:a9:4d:ee:35:52:d2:33:f1:ea:96:d4:9a:76:cf:d3:
         6b:d1:a7:84:cb:4e:43:a6:aa:b7:19:fa:cd:ea:bb:a8:09:e2:
         19:4e:0b:a2:da:88:cc:b9:24:70:82:a7:a1:6b:39:f8:2a:04:
         d1:4c:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:16 2026 by rpki-client