Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa
File:                     3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (raw, json)
Hash identifier:          caZbilaazkpxqRWhkCpM9BxKghMhKlcvJxCPrxBN/3Q=
Subject key identifier:   D5:C4:71:D5:36:89:C9:ED:97:1E:16:72:E0:14:4B:15:02:2D:6A:7F
Certificate issuer:       /CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53
Certificate serial:       764F311A9B162159D4CB905895D86766AF10CA0E
Authority key identifier: 7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa
Signing time:             Sun 03 May 2026 03:19:03 +0000
ROA not before:           Sun 03 May 2026 03:14:03 +0000
ROA not after:            Sun 02 May 2027 03:19:03 +0000
asID:                     141939
IP address blocks:        103.164.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl
                          rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4f:31:1a:9b:16:21:59:d4:cb:90:58:95:d8:67:66:af:10:ca:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53
        Validity
            Not Before: May  3 03:14:03 2026 GMT
            Not After : May  2 03:19:03 2027 GMT
        Subject: CN=D5C471D53689C9ED971E1672E0144B15022D6A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:66:cf:b7:88:c0:78:95:a1:61:25:cf:3d:
                    28:1b:88:ce:81:ec:90:4a:fc:b6:94:c4:71:30:60:
                    6a:bd:7e:0a:f7:35:df:09:a1:38:2e:8b:7b:66:c2:
                    eb:2d:ed:12:65:11:18:22:6b:db:e2:e9:b2:45:e5:
                    a6:c6:a2:cb:f9:7c:37:8e:da:a9:f7:36:dd:b7:08:
                    17:a9:8b:91:dc:76:6f:cd:56:a4:fa:0c:2d:ee:17:
                    ae:e8:39:20:63:7d:21:36:7e:c8:f8:ab:95:db:90:
                    28:b7:5d:9e:ea:7d:7b:16:5f:64:09:09:6f:9b:d1:
                    24:5a:1e:c2:04:39:f6:c9:16:6e:fa:93:68:4a:6e:
                    6e:96:0c:c3:ba:b4:ff:3d:01:53:09:6f:45:22:82:
                    ba:65:70:de:65:d3:c9:c6:e4:41:4a:1c:6b:b1:0a:
                    21:30:e6:59:20:14:a1:59:d6:a1:12:ea:f9:f1:e5:
                    b2:d8:d6:02:d4:4a:9d:bd:56:e6:4a:4f:e8:75:24:
                    3a:02:61:75:9f:30:89:e6:5e:da:e2:54:9e:b9:a8:
                    bd:64:b5:79:2d:c4:02:51:55:02:85:a1:b4:22:02:
                    54:5d:67:d3:e8:66:e3:cf:b5:14:99:ef:6a:d8:83:
                    e5:e8:b5:e6:ae:1b:11:6f:1f:d9:7a:d5:28:36:3e:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:71:D5:36:89:C9:ED:97:1E:16:72:E0:14:4B:15:02:2D:6A:7F
            X509v3 Authority Key Identifier:
                keyid:7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:7e:ac:21:d7:8b:e6:46:59:8f:ec:d8:64:e8:00:92:e2:6e:
         92:51:cf:6b:58:ef:c7:bc:c5:ad:51:5a:3f:b9:d1:96:af:52:
         f3:4b:73:82:ed:54:ae:82:23:1e:21:5d:fb:6e:72:19:8d:d5:
         4c:0b:ce:23:b9:aa:1d:df:ea:db:4c:0a:7f:7b:c1:04:d3:88:
         fe:f2:ee:f5:bf:14:2c:58:22:fc:b3:73:84:35:48:fd:90:99:
         d9:27:5f:97:bf:34:38:ce:8c:08:75:d8:f3:dd:74:20:ce:2b:
         be:7c:f4:e3:64:a5:ee:c1:d9:14:16:2b:03:53:39:11:5a:85:
         85:fb:e7:6d:ff:2b:e1:06:1a:46:14:db:e4:f1:80:de:4d:4c:
         0b:9e:07:70:a4:57:12:12:3b:bf:9a:6f:f0:3b:ce:75:4b:b1:
         20:12:94:c9:3d:3c:f4:88:71:ba:ea:c5:0d:5c:58:3d:9a:43:
         7a:d8:69:63:77:7a:3c:ea:82:d3:c7:14:6f:8f:25:e3:f5:38:
         e0:0f:ea:8c:2d:24:8a:73:1c:e1:c0:39:b5:f7:1a:9a:f5:3e:
         a9:f7:39:09:ae:4b:0a:3e:39:da:44:61:3c:0f:d1:8d:a8:5a:
         9b:b7:c4:08:c0:ac:d0:cf:7c:5d:9c:e6:12:a1:de:4e:1d:b8:
         f2:5e:d1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:02 2026 by rpki-client