Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32342d3234203d3e20313430343137.roa
File:                     3130332e3135312e3134302e302f32342d3234203d3e20313430343137.roa (raw, json)
Hash identifier:          7y63iJCGDmrcEh1jqQU2gg7glBcuAKKg0zd+7G7d+bQ=
Subject key identifier:   F6:F2:BF:95:77:DF:4A:ED:5B:04:C2:22:59:72:D5:12:AB:8F:E0:C4
Certificate issuer:       /CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6
Certificate serial:       466D549736034CEBE837C79DCCA74D4D95ADAE76
Authority key identifier: 73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32342d3234203d3e20313430343137.roa
Signing time:             Mon 19 Oct 2026 10:09:23 +0000
ROA not before:           Mon 19 Oct 2026 10:04:23 +0000
ROA not after:            Mon 18 Oct 2027 10:09:23 +0000
asID:                     140417
IP address blocks:        103.151.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl
                          rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 22:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6d:54:97:36:03:4c:eb:e8:37:c7:9d:cc:a7:4d:4d:95:ad:ae:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6
        Validity
            Not Before: Oct 19 10:04:23 2026 GMT
            Not After : Oct 18 10:09:23 2027 GMT
        Subject: CN=F6F2BF9577DF4AED5B04C2225972D512AB8FE0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:9f:93:d5:44:15:09:7b:1e:3a:0b:13:11:
                    14:a9:f3:d5:70:d5:cd:27:10:aa:bf:c0:d8:6a:86:
                    d4:a8:14:91:ed:0b:84:3b:b7:34:0e:18:3b:77:ce:
                    87:66:5e:03:84:be:ad:b4:7a:16:d4:b3:5a:02:f8:
                    9c:e9:49:ca:52:04:bb:41:ad:98:71:43:b0:ce:fb:
                    ae:1a:0f:21:22:c2:60:d5:cc:3c:39:27:13:5d:f5:
                    d9:2e:bb:25:64:1a:55:6c:8b:49:4b:0b:33:f7:96:
                    56:87:1b:54:a8:0c:44:0d:34:ba:26:d1:eb:50:d4:
                    1b:44:0e:87:d7:b4:9d:f8:65:a3:e2:fa:b6:c8:99:
                    4d:1d:bc:3a:ac:3a:32:56:5e:42:ec:41:55:63:52:
                    84:18:ad:2b:4e:66:a3:e8:2f:b7:94:4e:eb:dc:97:
                    f9:1d:95:fd:3d:0a:0a:90:e1:ae:32:e8:ad:ad:0d:
                    3b:a4:66:ce:16:1d:75:fa:6f:de:a2:b2:0f:02:fc:
                    4d:c4:66:1e:2b:90:c8:cf:05:10:fa:ae:6f:19:02:
                    62:86:90:28:33:fd:9f:12:6a:65:5b:43:13:2f:70:
                    7e:43:0a:a7:f8:ed:3a:30:dc:b4:37:fc:a9:07:34:
                    0e:bd:c0:4b:c9:61:99:45:77:62:f0:35:52:5d:6f:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F2:BF:95:77:DF:4A:ED:5B:04:C2:22:59:72:D5:12:AB:8F:E0:C4
            X509v3 Authority Key Identifier:
                keyid:73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32342d3234203d3e20313430343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:16:b4:40:7b:02:8f:eb:5e:52:d5:42:1a:1f:7f:66:d9:07:
         5f:3a:59:9c:3d:e4:ef:e0:f2:0a:d5:8d:82:6e:a7:30:60:17:
         92:f1:6b:4f:34:63:18:b6:d5:ad:61:88:e6:37:dc:ad:59:71:
         cb:5b:2e:e7:b4:dc:df:7e:ba:2c:90:84:23:a2:51:76:cf:ed:
         ca:19:1d:84:22:9e:65:5b:37:39:49:8d:a9:c3:24:b6:1b:80:
         50:c3:8f:55:38:30:88:ae:90:b0:77:2d:f5:af:f3:5c:84:93:
         df:ad:6d:b8:95:40:14:25:21:8a:15:f0:5d:d9:23:49:26:7b:
         ad:54:a4:d5:6d:64:a1:c8:21:31:93:7d:1c:bb:66:f9:c2:bd:
         3e:c7:09:0b:9c:53:81:66:57:d4:ef:e3:44:69:d6:2e:14:44:
         ec:3e:50:32:84:6d:8a:3c:87:e0:6f:6a:43:5f:a5:84:73:66:
         97:fe:81:01:de:de:4a:26:cd:da:70:f6:3e:c2:92:a6:90:e4:
         b3:e0:50:b7:dc:6a:84:ca:e2:82:40:84:49:c5:19:0b:f1:6b:
         82:07:35:56:f7:b0:4f:3c:23:bb:9f:03:28:24:18:00:ce:ce:
         d6:ce:df:69:20:80:be:5e:4e:a7:52:d4:52:65:d9:23:70:f6:
         48:68:f4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:26:06 2026 by rpki-client