Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa
File:                     3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (raw, json)
Hash identifier:          VOmlgkQp1tgA9VYOLX2CHv85GyyaVqqf5FgzdISInaI=
Subject key identifier:   77:70:09:0F:9D:3C:A0:2B:0D:F2:0B:63:A8:0A:49:D4:56:93:19:E3
Certificate issuer:       /CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53
Certificate serial:       7142925C02686A0E701D2D1B119A01F003FAE8C2
Authority key identifier: 7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa
Signing time:             Sun 03 May 2026 03:19:03 +0000
ROA not before:           Sun 03 May 2026 03:14:03 +0000
ROA not after:            Sun 02 May 2027 03:19:03 +0000
asID:                     141939
IP address blocks:        103.164.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl
                          rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:42:92:5c:02:68:6a:0e:70:1d:2d:1b:11:9a:01:f0:03:fa:e8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53
        Validity
            Not Before: May  3 03:14:03 2026 GMT
            Not After : May  2 03:19:03 2027 GMT
        Subject: CN=7770090F9D3CA02B0DF20B63A80A49D4569319E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:32:d7:82:d0:ee:b6:07:27:9a:b8:3e:e0:
                    66:15:89:5e:8e:d8:6d:e3:09:47:91:b0:ee:54:dd:
                    cb:77:89:fb:36:ba:a1:2e:dc:95:31:2e:57:04:2d:
                    08:af:c3:37:80:3b:c5:4d:98:08:57:4b:58:4e:bf:
                    5c:9d:d2:62:73:21:26:2e:79:d6:25:84:27:12:38:
                    4d:49:90:c2:3a:2f:7a:5c:23:ec:dc:d1:84:b9:6a:
                    78:75:1b:6e:59:9e:4b:a2:74:0d:9b:cc:da:44:15:
                    e8:71:74:d3:ec:f4:a1:a7:9f:fb:4f:a1:a1:42:f2:
                    d4:01:da:09:6a:e9:7c:3c:1c:f5:a4:71:78:02:3c:
                    1a:f2:46:06:4a:73:bc:9d:69:5d:b4:35:a0:62:12:
                    49:0a:dc:8d:c2:2e:61:2a:0a:58:b7:58:4d:89:82:
                    a6:84:7b:25:81:de:47:01:39:39:db:14:1f:28:c4:
                    b9:33:8f:18:cc:a8:2a:50:83:54:c8:d7:7e:a6:84:
                    e4:e8:c2:6e:be:7e:e6:7b:f2:91:d3:ca:30:80:4e:
                    d0:56:c8:e5:c1:72:e1:27:69:12:2f:66:2d:64:60:
                    0c:2b:e3:12:7b:e4:3f:b5:5f:27:9f:13:27:6b:7b:
                    3d:14:9f:fc:a5:68:6c:90:a8:e8:3e:66:e7:7b:87:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:70:09:0F:9D:3C:A0:2B:0D:F2:0B:63:A8:0A:49:D4:56:93:19:E3
            X509v3 Authority Key Identifier:
                keyid:7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:bd:31:ab:85:79:b8:da:e1:84:21:36:a9:c8:c4:b2:b8:
         25:a2:99:ba:98:65:68:dc:fe:af:73:3e:02:87:b6:10:4d:74:
         a0:a6:4f:af:23:57:78:f2:9f:21:b2:13:75:ee:c2:8d:d4:29:
         8a:6e:0c:5d:17:19:65:98:6d:f7:6e:17:5d:29:5b:05:3b:f8:
         f9:06:00:03:47:dd:55:97:46:0e:49:ae:f5:3e:3a:17:39:88:
         a4:01:85:e2:ca:b7:a5:49:e0:41:8b:c9:9d:a9:36:54:09:85:
         dc:24:ba:22:e8:9c:6c:c3:43:da:45:bb:41:c6:83:5f:b5:35:
         06:d7:d9:b6:32:57:91:d7:23:f1:25:74:02:77:53:11:d4:d8:
         17:d0:09:9b:6c:da:0c:5a:5e:c4:4a:16:ba:9b:ac:c5:0a:78:
         8a:ef:d8:ca:95:81:b7:e6:df:86:33:47:52:50:38:92:db:ca:
         a7:12:72:5d:9d:5a:7b:95:f2:c1:f2:f3:3d:c8:97:d5:61:d4:
         06:e7:db:a1:5d:87:03:e8:91:0e:a2:fc:9a:2a:b6:92:97:fd:
         8e:3b:14:35:ba:25:40:8e:f3:c4:e7:e9:fb:0d:7a:47:e2:4f:
         6e:44:4d:6b:04:a7:63:63:a6:55:fe:c0:f2:0d:f8:1e:2a:81:
         43:6e:a0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:13 2026 by rpki-client