Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa
File:                     3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (raw, json)
Hash identifier:          ooohintErIiZJY6PsGdeSKgN/xAUtlDemuxd4hTQIlw=
Subject key identifier:   C9:AB:15:38:6D:F9:57:75:6E:59:17:1F:DD:47:39:F4:62:B5:B9:31
Certificate issuer:       /CN=8557597ED1797691974B01C1D7D410DE0468CB64
Certificate serial:       5496437412D218C72F1D22F80758E61DB6C75AAC
Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa
Signing time:             Sun 03 May 2026 02:46:49 +0000
ROA not before:           Sun 03 May 2026 02:41:49 +0000
ROA not after:            Sun 02 May 2027 02:46:49 +0000
asID:                     211407
IP address blocks:        103.195.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
                          rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 22:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:96:43:74:12:d2:18:c7:2f:1d:22:f8:07:58:e6:1d:b6:c7:5a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64
        Validity
            Not Before: May  3 02:41:49 2026 GMT
            Not After : May  2 02:46:49 2027 GMT
        Subject: CN=C9AB15386DF957756E59171FDD4739F462B5B931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:17:5d:13:6f:79:cb:03:08:2d:55:38:6f:
                    8f:12:ba:25:78:0b:01:3a:38:04:4c:9f:29:e2:97:
                    7d:eb:29:4e:a3:70:ab:50:61:b3:ea:5b:9f:dc:33:
                    8a:cb:bf:a8:d7:01:28:71:56:a0:7a:3c:63:3a:8d:
                    11:67:1c:30:f5:4d:69:e5:8c:54:03:b5:f8:20:be:
                    16:f4:15:83:46:6a:80:c5:60:34:e8:40:21:52:a3:
                    6d:70:1c:bb:a9:83:59:65:3e:3d:92:36:56:4e:4d:
                    12:7b:74:10:1a:32:59:05:f7:4f:a2:ce:a7:5b:32:
                    4c:f3:54:a9:8a:1f:e2:1b:63:89:a4:e9:c8:d1:28:
                    f7:27:7f:30:54:92:8e:9f:96:ef:ef:4a:45:86:11:
                    4f:4e:00:08:bd:ad:db:c5:57:c7:ec:d0:dd:b4:91:
                    cc:be:47:7b:ef:f8:4e:1e:24:d5:39:89:f9:00:71:
                    77:04:55:9a:4c:86:bc:e9:f6:a7:1d:10:5e:e5:e6:
                    f5:5a:16:15:65:69:5c:e7:e1:2a:75:30:86:73:5c:
                    32:a5:12:b7:9c:e4:a1:47:e4:52:6b:cf:8c:db:5a:
                    56:07:ec:6b:85:62:87:b9:1b:83:71:d6:32:87:f8:
                    87:44:5f:a7:4e:da:0e:e0:cd:f3:d0:fb:51:72:f9:
                    3a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AB:15:38:6D:F9:57:75:6E:59:17:1F:DD:47:39:F4:62:B5:B9:31
            X509v3 Authority Key Identifier:
                keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:10:5b:10:3b:15:d3:5d:de:62:87:f5:04:bb:f6:02:d8:
         0e:d8:ae:6b:cc:82:6e:2b:9f:16:84:9f:e8:24:bf:61:5c:a8:
         69:ab:d6:06:af:78:f4:bd:79:73:f5:c9:82:43:f9:2a:dc:0f:
         dc:e1:6b:00:30:70:1b:4e:16:ac:26:82:17:34:5a:8f:8d:94:
         13:ba:64:85:3c:7e:52:0e:1a:29:a2:c0:0e:16:62:09:3f:2b:
         68:70:43:87:3d:8a:7b:27:59:f1:16:3b:5d:4c:56:6e:14:26:
         e3:87:6b:c1:77:02:19:bb:a8:0b:5b:a1:13:a6:ce:73:1e:5c:
         8a:22:9c:4f:6b:99:73:8c:8e:d8:42:65:b7:53:c5:5f:91:77:
         9d:8c:92:b3:a5:c3:98:71:31:0e:62:60:c5:95:b8:ad:84:03:
         01:1a:0d:82:54:6a:ea:2c:4c:0c:1f:2a:fe:65:f5:5b:12:b7:
         e8:4c:0e:9d:22:2d:d9:50:c1:73:65:46:3b:f6:b9:ba:61:7d:
         2e:4c:ba:fa:00:2b:02:cb:72:18:77:8e:3e:3c:b8:9e:a8:4d:
         3e:6c:d7:eb:cb:78:e8:79:d2:25:f3:e2:34:10:f9:96:fb:c5:
         70:a4:17:dc:97:38:3d:30:96:6e:51:19:24:d7:67:6e:99:f8:
         b9:17:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:53 2026 by rpki-client