Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
File:                     3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa (raw, json)
Hash identifier:          20o6cT5BLNovtqYdA+/pLFKRgD8D7hQ8yuxDKaT2ZSg=
Subject key identifier:   88:30:10:E8:95:BA:AF:1F:C5:81:60:5B:29:80:99:58:B1:1D:FB:EA
Certificate issuer:       /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Certificate serial:       1A171F489D03C8D563B75417FC7DB8D2AA395F3D
Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
Signing time:             Mon 05 Oct 2026 04:24:59 +0000
ROA not before:           Mon 05 Oct 2026 04:19:59 +0000
ROA not after:            Mon 04 Oct 2027 04:24:59 +0000
asID:                     149971
IP address blocks:        103.194.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
                          rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 07:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:17:1f:48:9d:03:c8:d5:63:b7:54:17:fc:7d:b8:d2:aa:39:5f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
        Validity
            Not Before: Oct  5 04:19:59 2026 GMT
            Not After : Oct  4 04:24:59 2027 GMT
        Subject: CN=883010E895BAAF1FC581605B29809958B11DFBEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:2c:20:b3:ec:36:0c:bc:a5:59:53:7e:c1:
                    21:18:b5:6d:b9:4f:12:39:95:3d:1b:c8:c6:c2:6c:
                    e3:a1:f9:52:1a:dc:62:84:0b:2b:3a:cb:21:20:75:
                    47:da:da:a3:3f:0e:6f:7a:e1:bd:3c:bc:5b:c5:a1:
                    f8:7a:6a:d5:d5:e2:71:52:50:80:c5:08:c8:69:38:
                    b8:58:f9:af:92:d4:ae:4d:ad:3b:df:e9:93:4c:78:
                    97:a5:e4:f0:e0:8b:2f:72:69:5e:b7:9e:f8:79:a5:
                    ac:e6:38:bb:f0:b0:13:8c:a4:de:63:ae:8c:e1:66:
                    55:b6:db:02:cb:14:c5:8e:a0:25:21:47:57:32:67:
                    80:01:6c:f6:d2:8a:3e:56:66:55:6e:b2:d4:23:97:
                    58:46:70:c0:0b:9f:68:f2:44:6b:1f:3d:ea:8d:63:
                    ee:c1:ca:8f:f5:98:d1:fa:74:05:f3:88:1d:61:7f:
                    59:7a:ef:4a:0a:49:b3:24:63:17:07:47:ec:99:7b:
                    05:60:79:4d:d9:e3:92:a6:9c:1a:12:3b:56:0b:e2:
                    ee:bd:84:cd:f6:9a:de:26:6a:4b:78:9c:fa:88:30:
                    33:28:da:2d:2b:9f:90:58:63:9a:99:28:73:3a:3e:
                    2e:b8:14:ef:30:cc:10:a0:d5:6a:c7:44:14:71:b4:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:30:10:E8:95:BA:AF:1F:C5:81:60:5B:29:80:99:58:B1:1D:FB:EA
            X509v3 Authority Key Identifier:
                keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f1:dc:ce:54:dd:c2:f3:44:d4:ec:e4:34:6e:b8:ff:c6:54:
         a7:b3:a4:08:d2:66:11:50:66:2d:67:bc:bd:7d:ca:c1:ac:14:
         35:de:a6:7d:31:dc:65:80:55:a6:67:ea:75:4c:da:75:ca:5c:
         54:2e:19:51:15:58:01:93:cf:c2:48:25:22:aa:c9:78:58:ed:
         d6:6f:26:b5:04:1e:f3:74:b7:8b:2f:31:12:09:4c:d2:d6:a2:
         36:08:30:0b:2e:b3:7c:18:7f:65:ef:06:c7:ce:f4:3e:8e:a5:
         c8:04:a4:d1:91:fb:e4:32:eb:d2:f3:40:64:74:c4:0f:53:05:
         a2:8e:55:73:5b:8a:42:a7:21:40:77:d7:52:e6:5c:97:39:ae:
         24:c5:ca:e2:8b:8b:a5:b3:de:38:e9:da:07:e4:21:a0:81:3c:
         f0:dc:7f:08:67:01:9e:a3:d5:60:20:75:af:d8:2d:e6:cd:50:
         f8:ae:67:82:76:cb:26:3c:7a:ef:bf:d5:f2:f1:51:05:23:a4:
         cf:87:bf:69:f5:95:de:e4:bc:4c:f3:e2:5c:ab:40:79:5d:9f:
         ad:cc:a9:21:62:83:8e:9e:49:ff:0f:18:69:34:ef:a0:22:89:
         f0:ee:81:3e:58:ec:f9:a4:71:44:67:3a:e9:a0:65:66:52:a7:
         b9:62:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:09:22 2026 by rpki-client