Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa
File:                     3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (raw, json)
Hash identifier:          8pY7CX5C+z8Wdb/RykV2FDaB/r21Vc0UIOUPAUQlFnI=
Subject key identifier:   54:10:22:08:C7:2B:BF:AB:32:56:0C:76:F3:3D:D1:9F:7F:39:EE:19
Certificate issuer:       /CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4
Certificate serial:       3781A9EC4499D3E9E423F31C95B17AA633432FED
Authority key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa
Signing time:             Sun 03 May 2026 03:18:48 +0000
ROA not before:           Sun 03 May 2026 03:13:48 +0000
ROA not after:            Sun 02 May 2027 03:18:48 +0000
asID:                     141934
IP address blocks:        103.166.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl
                          rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:81:a9:ec:44:99:d3:e9:e4:23:f3:1c:95:b1:7a:a6:33:43:2f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4
        Validity
            Not Before: May  3 03:13:48 2026 GMT
            Not After : May  2 03:18:48 2027 GMT
        Subject: CN=54102208C72BBFAB32560C76F33DD19F7F39EE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:2a:5e:2b:1b:9c:9b:cb:61:6d:a3:e2:7f:
                    94:0e:1e:62:65:5a:b2:27:78:de:c8:45:74:b2:dd:
                    37:8b:f5:3a:bc:99:86:ef:74:d2:dd:90:5c:c4:6f:
                    84:0d:44:c5:43:39:59:07:da:d2:36:95:66:31:b6:
                    3d:f3:c6:91:62:9b:63:58:60:5f:14:cb:35:69:04:
                    87:a2:ba:16:93:cb:ea:39:58:04:8f:f0:e4:3d:26:
                    05:a8:c9:21:5a:bb:98:c8:cf:e2:55:67:8f:10:43:
                    fe:5e:36:1e:ae:91:c2:94:2c:f8:7e:f9:2c:fe:fb:
                    4f:e8:6c:0f:2d:a2:75:98:af:ef:59:5e:8f:3e:86:
                    a9:bd:0d:05:02:8e:a9:77:e5:7d:2c:e6:56:dc:e9:
                    e5:c3:90:14:50:2a:05:52:ca:c6:a5:e5:17:d6:52:
                    35:6b:d7:6a:6d:08:20:a0:ce:fa:6f:41:61:28:0f:
                    35:99:a5:59:bb:e9:0b:76:18:88:ca:c3:2b:54:31:
                    d8:23:9c:eb:b9:dd:06:6f:d9:72:91:ec:e4:06:67:
                    5e:bd:f0:4d:6f:6a:b5:0c:09:1b:23:f1:26:d3:50:
                    60:34:70:52:25:47:b5:a9:f7:1d:46:5d:96:66:30:
                    cb:80:b7:3d:9d:c7:70:b5:4d:c0:8d:79:5f:1e:ee:
                    53:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:10:22:08:C7:2B:BF:AB:32:56:0C:76:F3:3D:D1:9F:7F:39:EE:19
            X509v3 Authority Key Identifier:
                keyid:DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:fb:62:b8:f7:f3:70:d9:08:ce:e5:7b:00:0d:9b:19:df:e6:
         31:b2:92:d5:25:f0:73:86:60:43:eb:39:88:ed:f3:9e:b1:28:
         bb:d2:32:d3:44:4c:ba:04:00:9f:77:f3:12:5e:d5:fd:e7:9f:
         b7:16:d5:07:51:f0:25:23:6d:44:1a:4c:e5:13:4a:78:16:f4:
         a9:d3:45:5a:46:69:b4:e5:fe:a2:31:45:b9:ba:09:d3:38:18:
         25:90:69:37:9a:26:0d:f5:c5:fc:ea:18:28:95:a6:7f:33:47:
         8f:f8:c1:1d:62:be:1c:9a:c9:12:7c:62:cf:03:98:b6:e2:62:
         eb:35:cc:6f:83:07:c6:f2:f0:0c:d7:b4:02:ab:6c:8c:a8:8f:
         ae:92:3f:da:44:93:87:b6:b9:86:dc:61:ba:4c:b7:9f:b6:fc:
         72:05:52:6d:86:07:80:d5:61:a4:01:66:11:f9:7f:5a:05:23:
         3e:3a:9d:80:67:d6:38:a7:09:46:b3:ad:8d:35:63:4e:76:8a:
         3b:c3:f6:14:a5:be:9a:c7:30:ba:5e:7c:1f:e1:5d:c2:86:c7:
         ca:20:31:81:b4:3a:9c:ac:44:aa:ce:f5:86:ce:0f:3e:6f:ed:
         4a:ee:23:3d:31:3d:c1:5c:07:0c:39:cf:52:02:41:ba:69:3b:
         27:af:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:53 2026 by rpki-client