Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa
File:                     3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (raw, json)
Hash identifier:          kO0czL3TN60s3A1dU0vSyh5gDjSRSVnVJULPxG64o8c=
Subject key identifier:   6F:C3:5F:DD:78:52:54:64:96:34:88:18:94:39:8E:CC:58:02:30:B9
Certificate issuer:       /CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4
Certificate serial:       1A2060EB8EFC34CA8C2C6D95B86C450ABFB84196
Authority key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa
Signing time:             Sun 03 May 2026 03:18:48 +0000
ROA not before:           Sun 03 May 2026 03:13:48 +0000
ROA not after:            Sun 02 May 2027 03:18:48 +0000
asID:                     141934
IP address blocks:        103.166.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl
                          rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:20:60:eb:8e:fc:34:ca:8c:2c:6d:95:b8:6c:45:0a:bf:b8:41:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4
        Validity
            Not Before: May  3 03:13:48 2026 GMT
            Not After : May  2 03:18:48 2027 GMT
        Subject: CN=6FC35FDD785254649634881894398ECC580230B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:f3:35:71:75:52:a5:da:47:da:af:40:53:
                    81:8b:07:78:6a:d4:60:16:e4:54:19:98:b0:0f:8e:
                    4f:af:23:6c:52:f8:35:b5:69:22:6f:ff:ee:4c:c6:
                    3b:f3:7d:2d:1a:43:99:53:79:23:16:1d:c5:9a:ca:
                    78:34:fb:e8:2c:38:b5:b5:06:05:24:7f:24:1f:11:
                    2d:70:f3:0b:36:10:98:64:c8:6a:33:95:72:dd:20:
                    c1:93:54:2b:c3:ef:59:00:42:63:62:c1:16:73:10:
                    24:ed:22:16:ee:72:f2:ae:f8:0d:99:05:11:6b:4d:
                    14:2c:ee:d3:2e:41:fb:b7:25:fe:04:9e:09:3e:41:
                    5f:df:c7:a3:cc:b7:e1:f8:4c:da:f1:67:63:5c:98:
                    8d:80:44:be:1d:2b:fd:39:e5:45:6d:d3:cd:dd:de:
                    05:ef:8d:33:6b:2b:53:7e:73:2d:49:44:e6:b8:83:
                    c3:46:8f:36:31:be:2e:f5:d0:95:90:b0:38:75:b9:
                    07:94:89:aa:ac:11:91:e9:a1:45:28:38:86:40:ed:
                    2c:1e:4a:87:05:af:9d:70:13:b9:a1:a2:ac:a7:51:
                    2a:f2:96:af:30:31:9e:e8:31:77:f6:9c:9e:f0:bd:
                    28:38:b9:81:de:1a:49:cd:02:35:a7:dd:1e:df:89:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C3:5F:DD:78:52:54:64:96:34:88:18:94:39:8E:CC:58:02:30:B9
            X509v3 Authority Key Identifier:
                keyid:DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c2:c9:f4:32:7a:03:d9:1d:df:96:a4:c3:88:2c:49:79:f8:
         ea:58:b7:36:61:cf:23:2e:52:ba:85:d1:56:37:4c:5b:ac:ca:
         35:7b:5e:6b:58:26:08:71:38:8e:1f:9f:b8:e3:cc:d2:5b:91:
         29:85:78:97:d4:3a:26:e6:45:33:1e:3a:43:5d:61:eb:18:66:
         de:7d:36:cf:be:42:26:84:5d:99:f3:38:b3:67:4d:89:03:96:
         36:62:f9:77:5e:a2:20:f2:4b:92:d8:f9:f8:80:e0:45:44:a5:
         fd:39:82:84:d6:ad:5f:f8:fb:c6:f6:aa:20:ef:ac:9f:b2:77:
         0c:f8:4e:aa:33:37:aa:1c:a3:15:86:4e:38:b6:ab:ef:20:bc:
         29:83:36:06:82:71:fe:e3:5f:8a:a8:17:96:6e:70:cd:3d:14:
         4d:26:e3:73:82:dc:10:ac:70:6e:79:9b:e5:6d:fb:5c:67:ef:
         c8:e5:7d:f1:bb:16:a5:9f:d2:e3:46:c0:29:df:e7:5b:92:4d:
         9a:4c:cd:6a:1a:03:5b:44:52:32:b9:e2:55:5c:88:95:e6:c9:
         38:d6:c7:73:2d:ce:a6:44:10:19:47:34:86:25:0e:36:fe:1b:
         39:43:e0:af:b4:ec:47:c7:06:a1:b8:80:d5:06:48:27:4a:d1:
         3f:0b:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:13 2026 by rpki-client