Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa
File:                     3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa (raw, json)
Hash identifier:          RVWN9lnu+KvZlFcQZ9inyEY0+6TUodWkYC50twZKJSI=
Subject key identifier:   AE:A3:E2:2F:0F:A8:71:5B:C9:04:23:DD:A9:80:D9:9A:DB:53:98:A4
Certificate issuer:       /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Certificate serial:       11F5AA7CD10020BE6F54A3C151DE94AA05D61443
Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa
Signing time:             Mon 05 Oct 2026 04:25:39 +0000
ROA not before:           Mon 05 Oct 2026 04:20:39 +0000
ROA not after:            Mon 04 Oct 2027 04:25:39 +0000
asID:                     149971
IP address blocks:        103.194.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
                          rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 07:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f5:aa:7c:d1:00:20:be:6f:54:a3:c1:51:de:94:aa:05:d6:14:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
        Validity
            Not Before: Oct  5 04:20:39 2026 GMT
            Not After : Oct  4 04:25:39 2027 GMT
        Subject: CN=AEA3E22F0FA8715BC90423DDA980D99ADB5398A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:02:71:19:b5:a3:71:06:e5:96:93:85:75:
                    df:ca:61:0e:fb:e1:7f:f6:12:be:49:3a:a3:c0:e0:
                    d7:d1:a1:2f:a8:c4:bc:07:2b:89:b3:25:67:25:3b:
                    ef:30:8a:97:80:97:76:8c:a7:c1:29:19:c0:5e:bd:
                    4a:35:32:89:b7:d6:35:8e:4e:9a:a9:63:a5:fc:c9:
                    71:6b:db:cc:af:10:f2:9a:f8:63:82:63:fd:1b:b2:
                    d3:2c:8b:5e:fa:1c:9e:b2:fb:09:26:3c:e0:f2:ec:
                    40:d2:1b:0e:14:4a:b5:5f:81:b0:71:0c:68:dc:03:
                    2c:8a:8a:91:18:13:d3:38:eb:5a:10:28:7b:7b:30:
                    0a:b4:21:44:7f:16:e8:f9:9d:16:64:1d:20:17:cc:
                    26:fc:f7:84:d8:63:f8:c8:34:26:80:f3:28:1b:7d:
                    43:ff:86:03:25:29:29:4e:aa:db:e5:af:17:78:5e:
                    39:3f:74:6c:14:ba:92:7c:8d:74:4b:46:ef:5c:dd:
                    48:8c:29:2e:03:1b:c3:44:0b:8d:6f:1a:34:21:61:
                    98:d0:a2:d2:0e:b7:13:bb:07:6c:c9:be:e3:d5:f8:
                    d3:a5:f9:95:92:69:32:a7:73:1f:e8:9a:aa:08:57:
                    41:cd:e3:47:69:01:96:fd:c9:27:82:69:6a:d1:d3:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A3:E2:2F:0F:A8:71:5B:C9:04:23:DD:A9:80:D9:9A:DB:53:98:A4
            X509v3 Authority Key Identifier:
                keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:6d:d5:b9:96:04:74:b0:aa:a4:cd:76:de:25:56:2d:2d:
         37:2c:11:3d:6b:d0:da:21:9f:0d:79:d0:cf:c2:c4:0d:5b:a9:
         10:40:89:28:bb:f2:48:0e:6f:50:6e:17:71:94:2a:08:24:69:
         b0:34:82:3f:56:8d:e6:05:23:e0:4f:04:a5:4f:4f:a1:c7:d9:
         1b:1d:ba:7b:c2:05:21:f6:68:cf:f2:28:c1:48:10:c3:f7:ee:
         f6:6b:27:b1:9a:88:50:3c:e6:47:86:99:26:03:f5:5f:1f:9d:
         aa:8b:3e:f6:3a:62:f6:a5:98:65:24:64:15:44:3a:f2:1b:15:
         2a:25:ae:bd:29:a8:22:93:79:cb:48:1d:41:84:18:5f:f2:41:
         72:7b:8f:c6:12:d2:75:17:92:14:35:7c:b8:6f:12:f7:d5:e9:
         ac:24:10:2e:9e:55:34:17:2e:37:d7:5a:dc:2b:e0:f6:e7:d6:
         66:9b:91:48:63:51:f2:45:10:85:8b:b8:61:56:0d:69:6a:08:
         ff:9c:5d:06:e1:26:cd:bd:bd:87:b6:6b:67:c4:00:cd:8d:43:
         57:59:d0:2e:17:5a:c1:03:72:c8:4c:18:85:1f:97:5f:45:f3:
         43:e6:54:f6:38:ac:c4:f8:c1:a9:ca:09:95:76:61:6d:c1:4a:
         ca:a4:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:04:53 2026 by rpki-client