Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=
Subject key identifier:   F2:77:E8:E6:84:95:1D:01:64:58:97:95:36:5D:A9:D9:D2:E2:77:EB
Certificate issuer:       /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220
Certificate serial:       360AE284F44A9EEB896725A7A9BCDE6516254F93
Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 03:05:17 +0000
ROA not before:           Sun 03 May 2026 03:00:17 +0000
ROA not after:            Sun 02 May 2027 03:05:17 +0000
asID:                     17995
IP address blocks:        103.165.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl
                          rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 20:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0a:e2:84:f4:4a:9e:eb:89:67:25:a7:a9:bc:de:65:16:25:4f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220
        Validity
            Not Before: May  3 03:00:17 2026 GMT
            Not After : May  2 03:05:17 2027 GMT
        Subject: CN=F277E8E684951D0164589795365DA9D9D2E277EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:36:a7:61:77:7c:55:b8:2b:0f:03:0c:fb:
                    9f:80:76:b2:7e:59:35:d1:d8:eb:47:92:c1:fc:da:
                    cf:02:76:90:53:6f:c1:53:1f:9b:3d:59:de:d4:60:
                    7e:ad:5a:cc:06:cc:6e:b7:3e:c9:c7:2b:fd:bd:08:
                    f8:d8:71:d1:6b:b5:63:19:14:c6:80:b3:c8:66:f1:
                    b3:7d:fb:6a:f1:3d:c2:a1:bd:e8:85:ca:25:02:36:
                    8c:e3:d4:8a:7f:62:5d:9e:d9:0f:a9:5c:44:be:c1:
                    ad:b7:57:d3:cb:06:7b:1b:9a:02:5b:70:d4:80:96:
                    dc:3c:7f:4f:3b:4a:6a:52:ed:5f:e5:2f:2c:6a:e2:
                    b4:f8:1a:0f:5c:12:5b:ff:27:74:ca:67:53:51:87:
                    70:08:bf:e6:49:d1:b3:9b:80:5f:d6:6b:8e:1b:bd:
                    60:fc:8a:77:5a:66:e9:a6:b1:49:98:2f:0d:b3:66:
                    0c:a4:9b:a0:76:7f:63:3c:6a:4a:c4:ab:30:05:ec:
                    8f:b6:eb:f9:3a:94:ee:b0:c3:cc:11:99:ab:31:da:
                    bf:3a:fa:be:37:0e:8c:02:0e:3d:d5:58:02:dc:3a:
                    72:f1:fe:38:e5:da:a1:6d:1a:a4:28:b1:e8:08:e3:
                    5e:6e:54:73:80:42:d0:3c:8b:c2:10:5d:c2:c2:97:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:77:E8:E6:84:95:1D:01:64:58:97:95:36:5D:A9:D9:D2:E2:77:EB
            X509v3 Authority Key Identifier:
                keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:ce:44:c6:29:85:da:f4:eb:f5:48:05:4b:57:05:9e:f8:
         5f:ea:fd:d6:12:37:ce:c7:28:84:bb:35:4d:31:67:c4:1a:fd:
         a0:72:16:a4:e9:c8:00:dc:b9:19:34:38:1c:39:7b:5b:32:8b:
         0a:15:1d:c6:af:69:4b:a2:28:d8:1b:5d:a5:f5:a0:b5:d2:54:
         d0:e2:dc:3f:03:75:f5:9e:98:77:23:66:e3:b6:54:1d:ee:68:
         0e:7d:e3:e6:e6:d8:7b:2a:ca:dc:07:84:25:6b:ec:8c:12:49:
         18:eb:f4:b8:37:ec:75:6d:4a:41:33:64:c2:4f:21:94:a4:91:
         a6:74:2e:8c:1a:e2:c2:16:59:b3:83:3b:22:88:fe:b9:e5:21:
         94:cf:e3:60:a8:c8:3e:63:18:ab:24:ea:9d:38:86:dc:a3:dc:
         71:0a:72:d7:ee:f4:e6:36:5e:2a:46:4b:20:31:76:28:16:69:
         6a:ad:2b:b4:c4:b9:00:7b:3b:2c:34:43:a8:a1:81:ff:d2:15:
         db:23:1f:75:d9:9c:b7:c3:59:00:8a:96:7d:df:69:38:bc:40:
         31:00:d5:ec:7d:39:8b:20:d0:0c:11:6d:08:41:1a:ff:ce:fe:
         a1:31:78:e3:aa:ee:d3:4b:3c:6d:95:4d:12:1a:b6:69:7d:ab:
         06:99:77:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:34:30 2026 by rpki-client