Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32332d3233203d3e203538333639.roa
File:                     3130332e342e3136342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          C3ZucUdInhfTlY2tCL8suX1ubKZXM/lQjyc4EItRagY=
Subject key identifier:   9D:F3:C4:90:37:B5:22:90:17:D0:0E:36:F3:EA:EA:67:F2:B7:6D:D4
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       5BFD5D489D6F1D67BB1A5BFFB9AE6AF1F11196D7
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32332d3233203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:23 +0000
ROA not before:           Sun 03 May 2026 02:10:23 +0000
ROA not after:            Sun 02 May 2027 02:15:23 +0000
asID:                     58369
IP address blocks:        103.4.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fd:5d:48:9d:6f:1d:67:bb:1a:5b:ff:b9:ae:6a:f1:f1:11:96:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:23 2026 GMT
            Not After : May  2 02:15:23 2027 GMT
        Subject: CN=9DF3C49037B5229017D00E36F3EAEA67F2B76DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:51:7a:1a:51:34:03:c6:9c:2c:8a:a9:1d:
                    87:f9:2a:47:b1:af:ec:48:6b:4b:1f:94:98:7b:9c:
                    10:29:eb:3e:ee:68:57:ee:96:c2:77:93:fb:a7:1e:
                    26:df:80:19:80:bf:38:de:04:bc:ca:e6:8d:86:00:
                    ca:4a:61:be:5d:42:ce:81:29:9b:2b:b5:a1:94:85:
                    1a:29:79:a6:e2:c8:03:72:5c:c5:bd:c3:24:de:96:
                    ad:15:eb:54:48:46:25:20:c9:f7:e4:e2:bf:22:32:
                    48:e8:c6:1b:2e:42:34:c7:30:d7:a2:ab:f4:80:27:
                    c1:1e:14:c7:b3:f2:5d:8e:fe:08:7b:b9:95:a3:97:
                    de:70:10:6c:b8:aa:2e:09:e7:71:15:e9:83:4f:3a:
                    e6:dd:11:39:1a:4c:36:25:4b:74:0d:b3:64:cc:b8:
                    f6:74:fc:d2:13:94:0c:c2:83:ba:81:f4:46:6e:07:
                    de:e3:3e:aa:ee:82:90:2d:08:02:8a:0a:4b:ab:b9:
                    8b:c2:b4:71:8d:b2:12:70:80:cc:10:1a:16:c1:9e:
                    a5:d1:66:de:25:73:9a:0b:a5:fe:d7:5e:47:96:9b:
                    08:6b:a4:3f:e2:82:2f:a9:46:2a:58:17:22:f5:10:
                    46:f5:82:41:c2:d1:8e:0d:d0:1f:a5:34:a1:c9:df:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F3:C4:90:37:B5:22:90:17:D0:0E:36:F3:EA:EA:67:F2:B7:6D:D4
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:b6:4f:67:ce:88:a9:34:4f:be:45:ec:dd:e6:fc:6d:d6:c2:
         14:fb:f4:3b:13:f0:7e:76:6c:33:97:c2:5f:d2:af:c7:4d:27:
         9e:16:7d:a9:3a:e3:32:3b:3c:3b:a6:82:61:6a:6a:88:50:c2:
         72:2f:c5:68:2f:5f:d9:88:c4:10:1b:84:cb:18:a4:a0:5f:cb:
         ad:cc:e2:23:7e:ab:57:31:d2:eb:3d:76:d6:f5:b7:ad:dd:ad:
         fc:4c:e3:81:ee:76:84:ab:c5:86:18:13:bb:97:e9:5b:ff:17:
         01:b8:75:12:61:da:6a:d5:f2:61:b9:c6:44:43:0a:91:f6:5e:
         c0:7e:81:5e:0c:05:66:f0:f2:1c:b9:54:db:a1:a4:34:38:ea:
         2e:90:63:af:4e:00:79:3c:2e:b4:ab:dd:ac:34:99:64:69:d3:
         c9:01:b0:30:1f:a7:48:59:5f:86:68:5f:dc:0e:0d:53:17:19:
         b7:dc:ad:13:44:50:2a:21:ac:bd:a6:03:c5:ed:fb:66:53:34:
         4a:0d:8b:fc:21:5f:40:d0:17:e5:85:82:49:0f:bc:02:fe:2f:
         ef:e6:5f:62:c7:55:b9:a7:6e:51:32:d6:f5:a7:34:9a:08:0d:
         97:08:22:f4:6e:93:d4:6a:6b:0b:af:ad:e9:be:cd:a4:a9:d1:
         36:de:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:41 2026 by rpki-client