Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa
File:                     3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (raw, json)
Hash identifier:          ahISTiCVoc+28My7h8uDRC0QvRMDpO2sYZ/b3hjHSLM=
Subject key identifier:   4D:11:A8:B6:A2:60:D8:63:9C:4B:25:F5:80:07:CD:63:2B:2C:26:38
Certificate issuer:       /CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A
Certificate serial:       680C389CE28055D99CA61895278207FBED8B84AC
Authority key identifier: B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa
Signing time:             Sun 03 May 2026 02:12:01 +0000
ROA not before:           Sun 03 May 2026 02:07:01 +0000
ROA not after:            Sun 02 May 2027 02:12:01 +0000
asID:                     141983
IP address blocks:        103.167.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl
                          rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0c:38:9c:e2:80:55:d9:9c:a6:18:95:27:82:07:fb:ed:8b:84:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A
        Validity
            Not Before: May  3 02:07:01 2026 GMT
            Not After : May  2 02:12:01 2027 GMT
        Subject: CN=4D11A8B6A260D8639C4B25F58007CD632B2C2638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:06:b9:f1:5d:65:47:d3:a6:aa:a9:02:59:
                    04:d7:da:b8:f6:5f:e9:d3:b4:41:ac:18:cf:d6:fd:
                    ca:c2:22:5c:96:0d:51:4a:e3:02:22:55:17:97:6e:
                    b9:15:8f:b4:38:5a:99:f5:76:c5:9a:02:61:ec:5c:
                    f9:f7:a6:30:54:48:42:83:2a:dd:32:34:3c:ce:cd:
                    66:4c:c1:2e:3b:b2:0c:8d:ae:c3:dc:31:44:9f:26:
                    92:c5:60:69:99:01:5f:96:aa:f1:55:5b:47:84:07:
                    62:c0:6a:c8:03:a6:a0:38:63:f7:2d:aa:e9:18:b7:
                    6e:9d:15:02:5a:84:71:7b:af:57:68:7c:68:a5:fd:
                    f9:64:2f:bf:ee:3d:c7:de:71:3f:24:a5:1f:a1:f7:
                    12:49:d9:0d:a8:35:d1:e1:a9:3a:44:e4:78:77:e4:
                    99:18:97:ab:10:25:d0:11:1c:10:23:aa:4f:2a:74:
                    cd:fa:c7:7a:79:bd:a4:31:6d:47:6e:2c:29:46:3b:
                    cf:ad:9d:2a:d8:8e:43:d8:fb:d4:d4:34:b9:e6:ab:
                    60:fa:ec:7d:ce:0a:cf:63:0d:9a:0c:6b:4d:a5:6f:
                    d6:aa:8c:90:a9:38:03:17:8c:1c:cb:50:d8:b5:e7:
                    b1:02:70:9d:6c:95:b4:42:d0:bd:43:92:ed:e9:a3:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:11:A8:B6:A2:60:D8:63:9C:4B:25:F5:80:07:CD:63:2B:2C:26:38
            X509v3 Authority Key Identifier:
                keyid:B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:08:d9:96:a0:d9:65:9f:25:93:18:d6:4e:05:91:ba:30:
         34:17:5c:b9:30:27:2b:cb:99:3d:c5:c4:05:fe:97:25:a7:9a:
         d6:9c:e4:9b:cd:1d:a8:64:ec:33:1a:fd:bf:53:b0:6c:d0:46:
         1e:2b:3f:57:b5:cd:cc:fc:8b:5a:da:c7:4b:9e:04:56:ec:03:
         22:9d:18:32:69:65:fd:87:c5:d0:0d:f6:53:8f:8d:6b:a9:c4:
         9b:5c:2f:09:ae:ef:09:62:f0:35:d2:1a:f1:0e:cd:1f:3a:de:
         76:7b:e7:26:a1:3b:c0:cc:be:95:77:82:ec:2d:39:28:14:f0:
         a3:35:72:c0:40:47:bd:ca:94:bd:f0:0b:83:f1:48:b8:9d:6c:
         e1:d2:7a:22:90:1e:71:ec:37:93:29:42:97:0f:d7:04:3c:3e:
         4d:66:ec:e3:30:31:8f:62:5d:3a:2f:a3:d8:15:a6:83:34:a0:
         44:51:8a:d3:32:9c:7c:11:08:54:1d:66:94:41:c1:ba:25:34:
         07:9d:dd:4b:91:b6:63:02:92:7c:31:81:be:58:11:11:e4:81:
         df:f5:33:71:46:8f:52:70:56:ea:7f:c1:dd:43:a5:c8:ad:73:
         e8:bd:c5:30:15:c1:31:7f:4e:7a:cb:48:3e:b1:01:20:87:b7:
         59:98:4a:4b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUaAw4nOKAVdmcphiVJ4IH++2LhKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJG
MTMzNzE2QTAeFw0yNjA1MDMwMjA3MDFaFw0yNzA1MDIwMjEyMDFaMDMxMTAvBgNV
BAMTKDREMTFBOEI2QTI2MEQ4NjM5QzRCMjVGNTgwMDdDRDYzMkIyQzI2MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+wa58V1lR9OmqqkCWQTX2rj2
X+nTtEGsGM/W/crCIlyWDVFK4wIiVReXbrkVj7Q4Wpn1dsWaAmHsXPn3pjBUSEKD
Kt0yNDzOzWZMwS47sgyNrsPcMUSfJpLFYGmZAV+WqvFVW0eEB2LAasgDpqA4Y/ct
qukYt26dFQJahHF7r1dofGil/flkL7/uPcfecT8kpR+h9xJJ2Q2oNdHhqTpE5Hh3
5JkYl6sQJdARHBAjqk8qdM36x3p5vaQxbUduLClGO8+tnSrYjkPY+9TUNLnmq2D6
7H3OCs9jDZoMa02lb9aqjJCpOAMXjBzLUNi157ECcJ1slbRC0L1Dku3po4g1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUTRGotqJg2GOcSyX1gAfNYyssJjgwHwYDVR0j
BBgwFoAUuDWodGOEdJvzuae67DCh6/EzcWowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDZiZWRmM2EtZDdkMS00OWE2LTkzZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2
Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJGMTMzNzE2QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CODM1QTg3NDYzODQ3NDlCRjNCOUE3QkFFQzMwQTFFQkYxMzM3
MTZBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2YmVkZjNhLWQ3ZDEtNDlhNi05
M2VkLWIyNzdmMWY3YTZlYi8wLzMxMzAzMzJlMzEzNjM3MmUzMTM3MzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzOTM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnp6owDQYJ
KoZIhvcNAQELBQADggEBAG70CNmWoNllnyWTGNZOBZG6MDQXXLkwJyvLmT3FxAX+
lyWnmtac5JvNHahk7DMa/b9TsGzQRh4rP1e1zcz8i1rax0ueBFbsAyKdGDJpZf2H
xdAN9lOPjWupxJtcLwmu7wli8DXSGvEOzR863nZ75yahO8DMvpV3guwtOSgU8KM1
csBAR73KlL3wC4PxSLidbOHSeiKQHnHsN5MpQpcP1wQ8Pk1m7OMwMY9iXTovo9gV
poM0oERRitMynHwRCFQdZpRBwbolNAed3UuRtmMCknwxgb5YERHkgd/1M3FGj1Jw
Vup/wd1Dpcitc+i9xTAVwTF/TnrLSD6xASCHt1mYSks=
-----END CERTIFICATE-----
Generated at Wed May 13 03:59:57 2026 by rpki-client