Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa
File:                     3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (raw, json)
Hash identifier:          6eZrQcS7fk+urKWjqhBrdX4ASTj5STJSLSE2pWSJoPQ=
Subject key identifier:   23:7E:CD:2D:F2:29:85:82:27:8C:71:CA:C5:7E:D8:DA:8A:29:5A:C4
Certificate issuer:       /CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F
Certificate serial:       3B61F59C97D333A361A001FECE09023F52EE211C
Authority key identifier: 0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa
Signing time:             Sun 03 May 2026 02:14:13 +0000
ROA not before:           Sun 03 May 2026 02:09:13 +0000
ROA not after:            Sun 02 May 2027 02:14:13 +0000
asID:                     141610
IP address blocks:        103.160.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl
                          rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:61:f5:9c:97:d3:33:a3:61:a0:01:fe:ce:09:02:3f:52:ee:21:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F
        Validity
            Not Before: May  3 02:09:13 2026 GMT
            Not After : May  2 02:14:13 2027 GMT
        Subject: CN=237ECD2DF2298582278C71CAC57ED8DA8A295AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:b7:e4:2e:a8:07:ca:9e:97:31:39:95:9b:
                    8e:a7:c2:50:f0:de:76:b8:8a:10:59:83:f7:e5:48:
                    b9:fa:29:b2:0f:9b:fb:09:97:a6:08:51:0c:61:3a:
                    b3:4d:e6:3f:67:b8:f3:64:08:d9:1a:2e:44:59:62:
                    7f:83:e2:be:87:95:c8:60:8c:db:86:5f:e0:85:71:
                    3a:e2:32:d4:c8:02:c7:c5:2e:b2:02:bc:fb:69:71:
                    14:87:85:d8:c8:59:f6:11:ad:fe:9e:68:96:da:62:
                    4e:73:1f:7d:7f:c3:a2:53:78:58:46:c1:0d:9b:66:
                    de:10:5f:63:75:bc:6d:3c:65:e2:b8:47:cc:45:d5:
                    25:0f:57:30:65:ae:af:bf:1e:c3:e4:68:86:53:8d:
                    02:56:56:8f:12:71:e5:ec:90:06:08:73:51:11:79:
                    ad:ee:a2:81:f6:ad:d5:0c:cd:4e:03:e8:54:3d:cc:
                    f4:6a:11:d9:20:6c:8e:05:f9:ed:c8:74:05:21:81:
                    20:b5:c0:fc:62:0b:c5:e0:f1:f1:84:c7:eb:7d:9a:
                    8e:e4:58:c4:fd:46:46:42:9c:48:ef:dd:b4:a4:1a:
                    54:ee:f6:58:0f:3d:da:e1:cd:ab:cc:9e:4c:70:38:
                    4d:0f:f3:b8:0f:7a:3e:dd:2e:83:4c:4a:0a:c5:98:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7E:CD:2D:F2:29:85:82:27:8C:71:CA:C5:7E:D8:DA:8A:29:5A:C4
            X509v3 Authority Key Identifier:
                keyid:0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:0a:bc:dc:c6:87:3a:d4:91:4a:28:b2:f9:9a:b2:b5:06:72:
         c0:b8:e1:8b:26:18:ed:dc:2b:69:d2:69:93:eb:62:74:9a:45:
         c0:17:25:10:85:13:76:be:12:30:3c:6d:20:e5:5e:f3:91:0e:
         44:3a:17:f2:85:1c:40:d3:de:11:25:a7:8e:22:fd:6f:18:7e:
         30:0e:69:7c:e3:41:f1:79:9f:8f:dd:98:92:8d:ff:1b:4e:c6:
         34:5d:51:b2:05:d0:e6:99:ec:41:be:45:8c:fc:5e:62:ef:5a:
         6e:39:5d:ec:18:04:7a:21:16:9f:59:20:d5:c7:87:4a:7f:57:
         26:2e:e3:fe:de:21:2c:19:e6:d6:60:5f:75:c5:99:68:fd:5c:
         6f:73:6b:fa:29:dd:c9:07:46:5e:90:01:03:10:37:6f:e5:1b:
         6e:12:d4:74:79:4a:6e:11:f3:53:ab:b4:d3:f2:3a:3b:9e:b7:
         3e:f1:fe:8f:40:b0:fa:df:f4:b5:33:38:87:c7:2c:26:a1:40:
         33:c0:cf:bf:8c:c5:17:5c:a6:af:6e:91:44:3c:53:fd:99:7b:
         3b:32:16:da:19:6d:6c:4f:fa:28:9c:54:47:cf:37:82:ad:08:
         00:04:1f:89:fa:47:41:b0:b1:2b:72:63:c0:93:af:c7:5b:b6:
         a6:f8:41:54
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUO2H1nJfTM6NhoAH+zgkCP1LuIRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1
QkZCOUEwRjAeFw0yNjA1MDMwMjA5MTNaFw0yNzA1MDIwMjE0MTNaMDMxMTAvBgNV
BAMTKDIzN0VDRDJERjIyOTg1ODIyNzhDNzFDQUM1N0VEOERBOEEyOTVBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fLfkLqgHyp6XMTmVm46nwlDw
3na4ihBZg/flSLn6KbIPm/sJl6YIUQxhOrNN5j9nuPNkCNkaLkRZYn+D4r6Hlchg
jNuGX+CFcTriMtTIAsfFLrICvPtpcRSHhdjIWfYRrf6eaJbaYk5zH31/w6JTeFhG
wQ2bZt4QX2N1vG08ZeK4R8xF1SUPVzBlrq+/HsPkaIZTjQJWVo8SceXskAYIc1ER
ea3uooH2rdUMzU4D6FQ9zPRqEdkgbI4F+e3IdAUhgSC1wPxiC8Xg8fGEx+t9mo7k
WMT9RkZCnEjv3bSkGlTu9lgPPdrhzavMnkxwOE0P87gPej7dLoNMSgrFmIJTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUI37NLfIphYInjHHKxX7Y2oopWsQwHwYDVR0j
BBgwFoAUC9TgBeTZdS+hvE9SrvXIB1v7mg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTJiNzE1MzYtNzE3ZS00NWRiLWEwM2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVF
NEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1QkZCOUEwRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQkQ0RTAwNUU0RDk3NTJGQTFCQzRGNTJBRUY1QzgwNzVCRkI5
QTBGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzEyYjcxNTM2LTcxN2UtNDVkYi1h
MDNhLTMzOGYxZGZhNDg5My8wLzMxMzAzMzJlMzEzNjMwMmUzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6AOMA0GCSqG
SIb3DQEBCwUAA4IBAQCzCrzcxoc61JFKKLL5mrK1BnLAuOGLJhjt3Ctp0mmT62J0
mkXAFyUQhRN2vhIwPG0g5V7zkQ5EOhfyhRxA094RJaeOIv1vGH4wDml840HxeZ+P
3ZiSjf8bTsY0XVGyBdDmmexBvkWM/F5i71puOV3sGAR6IRafWSDVx4dKf1cmLuP+
3iEsGebWYF91xZlo/Vxvc2v6Kd3JB0ZekAEDEDdv5RtuEtR0eUpuEfNTq7TT8jo7
nrc+8f6PQLD63/S1MziHxywmoUAzwM+/jMUXXKavbpFEPFP9mXs7MhbaGW1sT/oo
nFRHzzeCrQgABB+J+kdBsLErcmPAk6/HW7am+EFU
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:37 2026 by rpki-client