Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa
File:                     3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (raw, json)
Hash identifier:          t8Za87lSHjFY3IEP4fG6LW03mFmJ1FnBoJ5/LeJNcH4=
Subject key identifier:   02:B6:7D:A8:D2:CF:8F:54:75:A5:0C:A1:EB:18:F5:ED:E5:18:7C:C5
Certificate issuer:       /CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27
Certificate serial:       0E341791550D295AC00816278E7A7ADE054C2601
Authority key identifier: AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa
Signing time:             Sun 03 May 2026 02:11:21 +0000
ROA not before:           Sun 03 May 2026 02:06:21 +0000
ROA not after:            Sun 02 May 2027 02:11:21 +0000
asID:                     141928
IP address blocks:        103.166.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl
                          rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:34:17:91:55:0d:29:5a:c0:08:16:27:8e:7a:7a:de:05:4c:26:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27
        Validity
            Not Before: May  3 02:06:21 2026 GMT
            Not After : May  2 02:11:21 2027 GMT
        Subject: CN=02B67DA8D2CF8F5475A50CA1EB18F5EDE5187CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e0:55:7d:c4:f4:49:f0:38:ca:45:cd:52:9f:
                    6c:17:58:36:dc:5e:27:7d:cc:f5:52:9f:20:28:18:
                    72:b7:c4:f0:33:26:7f:19:fc:00:ae:2b:be:34:d1:
                    75:22:50:e9:d0:7e:23:9e:ae:5c:9a:67:85:fc:df:
                    a5:78:89:c7:5e:a4:61:7c:d5:1d:3a:5b:1d:5a:3c:
                    ec:02:23:25:d2:56:38:fd:b2:de:03:13:35:d8:20:
                    8d:88:dd:cc:2d:04:45:f9:6f:8e:e4:56:fe:88:16:
                    82:1a:d2:38:fb:73:2d:3d:bd:44:81:28:7b:0f:ba:
                    f0:ff:c4:6c:fe:84:ed:10:2a:8c:d9:00:11:a7:9f:
                    0a:65:b4:26:17:bb:28:a6:a2:a3:ec:60:a5:27:a5:
                    0d:11:93:eb:a6:70:37:ed:87:8c:eb:89:23:73:69:
                    ee:d3:ed:9b:4c:61:64:b5:5a:41:04:2a:63:90:4b:
                    f1:40:78:10:b6:f1:03:7d:99:73:99:1e:2c:79:7c:
                    32:16:fc:e5:0b:24:60:24:e8:b2:ae:5a:85:be:85:
                    1a:d9:4f:f6:d5:59:83:d4:c1:9c:6a:19:07:6e:50:
                    7d:6b:f6:24:c4:e0:d8:3e:fa:6f:5d:6e:90:41:42:
                    01:58:7b:09:98:ac:b1:93:5b:32:c0:91:15:8e:97:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B6:7D:A8:D2:CF:8F:54:75:A5:0C:A1:EB:18:F5:ED:E5:18:7C:C5
            X509v3 Authority Key Identifier:
                keyid:AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:82:3a:ea:cd:0d:b1:2c:8d:1d:4a:d8:d6:dc:45:ab:c6:
         fc:ef:ac:c8:01:96:43:70:a3:bd:21:86:df:fc:6e:34:f5:b8:
         3d:07:2a:d5:e1:8b:e0:e4:9c:27:1b:25:f2:73:d2:74:ea:fa:
         ac:84:70:bf:34:48:92:94:77:56:06:06:ed:80:f8:8d:ed:ab:
         b1:19:0e:b1:f9:53:4c:5c:a0:0e:f3:4d:66:cc:c6:f9:dc:63:
         b9:08:eb:d1:7c:86:09:77:c9:59:1a:72:0c:9b:b5:20:15:43:
         eb:66:8b:6c:24:36:db:2d:01:ed:af:28:4c:7e:38:37:24:3d:
         c4:98:c3:45:a5:1d:3d:8c:7d:53:17:a5:7b:b8:38:ae:e6:4c:
         53:f8:67:3f:a2:c3:c2:39:6f:6e:13:05:47:33:fc:2e:af:31:
         94:c7:a5:e0:ec:f1:91:c8:93:e7:8c:78:7f:66:71:be:4b:93:
         c9:28:26:24:57:40:f5:db:3f:58:b2:3a:09:6a:09:fa:9e:64:
         d5:08:66:eb:c8:7c:67:31:8e:23:a6:aa:db:75:52:a0:ce:15:
         9e:19:f8:be:e5:b6:67:a6:fa:3a:86:80:5f:3e:49:d7:84:b6:
         76:52:de:61:91:bb:0c:23:db:79:47:ae:2a:90:52:0f:6e:91:
         f7:46:80:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:17 2026 by rpki-client