Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136352e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136352e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          0UnpbT0BYtaHIWI3US3EnnephiDRVMdBMQ0hWEyVc0w=
Subject key identifier:   82:75:EC:71:55:7E:72:12:13:71:5C:02:A7:7B:C8:9C:4A:AB:26:31
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       68C58939AFC75B6618D3B8673DC42F0665546AD2
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136352e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:20 +0000
ROA not before:           Sun 03 May 2026 02:10:20 +0000
ROA not after:            Sun 02 May 2027 02:15:20 +0000
asID:                     58369
IP address blocks:        103.4.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c5:89:39:af:c7:5b:66:18:d3:b8:67:3d:c4:2f:06:65:54:6a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:20 2026 GMT
            Not After : May  2 02:15:20 2027 GMT
        Subject: CN=8275EC71557E721213715C02A77BC89C4AAB2631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:d4:36:6e:74:f5:05:31:6c:e5:92:71:1e:
                    63:51:de:64:fd:d0:e1:7d:8b:6d:e1:66:42:dd:0c:
                    21:85:a4:1b:eb:60:23:5b:93:60:09:58:dc:5a:a5:
                    22:3a:96:d2:79:23:a7:da:95:78:67:69:f8:ac:4d:
                    b9:7f:79:c3:00:de:e5:52:f1:39:a9:ff:5b:f5:e8:
                    07:5c:ce:ca:3c:e9:fb:0a:88:4b:ee:9c:8c:c9:89:
                    d7:25:b1:78:82:8d:c2:93:e4:8b:c6:b9:63:24:32:
                    f0:59:e5:d1:3a:c6:ba:0b:91:10:51:39:e5:58:1d:
                    c8:02:63:e8:5d:05:b8:69:0d:b6:93:aa:3c:cd:c2:
                    28:07:5f:c4:43:ae:28:5c:5e:7f:f3:60:9e:ff:b8:
                    29:c6:a1:e4:58:8c:cc:db:e9:49:72:fb:24:ce:47:
                    41:b7:23:e2:8a:43:cd:86:00:1a:66:8c:76:33:35:
                    f7:ce:61:18:0f:4a:40:17:bf:32:fb:c5:28:fc:e8:
                    e9:25:06:49:49:66:36:7a:6c:94:eb:18:b3:02:9b:
                    55:97:e9:0d:0f:ba:19:62:c6:36:ba:e9:71:12:86:
                    7d:bc:56:66:45:50:10:3f:ae:d7:df:ee:52:b6:1b:
                    d9:b6:28:60:42:75:fe:e9:38:17:91:9a:8a:d5:4f:
                    31:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:75:EC:71:55:7E:72:12:13:71:5C:02:A7:7B:C8:9C:4A:AB:26:31
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136352e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:b5:c3:5c:cd:f5:69:3a:d2:0a:2e:a0:41:c6:42:e6:5f:
         70:64:30:e8:1c:bf:3d:69:a8:5b:bb:e0:e6:ae:11:fd:28:7d:
         f1:c2:2d:9f:39:20:50:dc:d9:cf:4d:bc:1b:fb:a3:e2:0e:b0:
         e3:83:4b:1d:0f:49:14:0c:68:57:83:73:4b:a7:b5:e1:06:57:
         93:c2:92:ff:92:ad:38:43:ff:ad:39:45:1a:66:4b:71:d5:9d:
         8d:57:a6:8f:1e:7b:7b:e8:07:56:f2:0e:1e:d3:20:6b:db:37:
         7a:bb:e0:0e:8b:c4:aa:b0:b7:ff:14:13:2c:3c:e5:37:13:8e:
         ff:c4:87:be:ea:3e:80:7d:7e:e1:66:30:26:13:de:4b:12:24:
         48:b9:eb:44:f8:b8:f8:60:47:8a:de:46:fd:8c:8f:cc:f6:b5:
         28:51:04:77:2f:48:5a:c2:6a:b1:dc:86:2c:65:50:3d:d2:a3:
         f9:4e:05:87:d1:4f:5b:cc:5e:3f:6b:9e:7c:28:a8:c0:fc:27:
         e0:a5:f7:66:03:e0:e4:51:e2:d3:cb:90:88:56:dd:c9:7f:a3:
         5c:e7:9b:3c:96:7e:1f:fc:b6:4f:8b:03:1a:fe:de:3b:12:49:
         cb:ab:a2:f5:93:21:5e:2c:62:68:2a:9e:b5:0c:80:bd:1f:59:
         e4:44:32:72
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUaMWJOa/HW2YY07hnPcQvBmVUatIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0
MkY5RDUzNzAeFw0yNjA1MDMwMjEwMjBaFw0yNzA1MDIwMjE1MjBaMDMxMTAvBgNV
BAMTKDgyNzVFQzcxNTU3RTcyMTIxMzcxNUMwMkE3N0JDODlDNEFBQjI2MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9NQ2bnT1BTFs5ZJxHmNR3mT9
0OF9i23hZkLdDCGFpBvrYCNbk2AJWNxapSI6ltJ5I6falXhnafisTbl/ecMA3uVS
8Tmp/1v16Adczso86fsKiEvunIzJidclsXiCjcKT5IvGuWMkMvBZ5dE6xroLkRBR
OeVYHcgCY+hdBbhpDbaTqjzNwigHX8RDrihcXn/zYJ7/uCnGoeRYjMzb6Uly+yTO
R0G3I+KKQ82GABpmjHYzNffOYRgPSkAXvzL7xSj86OklBklJZjZ6bJTrGLMCm1WX
6Q0Puhlixja66XEShn28VmZFUBA/rtff7lK2G9m2KGBCdf7pOBeRmorVTzGzAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUgnXscVV+chITcVwCp3vInEqrJjEwHwYDVR0j
BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5
NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE
NTM3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzAzMzJlMzQyZTMxMzYzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnBKUwDQYJKoZIhvcN
AQELBQADggEBAAYNtcNczfVpOtIKLqBBxkLmX3BkMOgcvz1pqFu74OauEf0offHC
LZ85IFDc2c9NvBv7o+IOsOODSx0PSRQMaFeDc0unteEGV5PCkv+SrThD/605RRpm
S3HVnY1Xpo8ee3voB1byDh7TIGvbN3q74A6LxKqwt/8UEyw85TcTjv/Eh77qPoB9
fuFmMCYT3ksSJEi560T4uPhgR4reRv2Mj8z2tShRBHcvSFrCarHchixlUD3So/lO
BYfRT1vMXj9rnnwoqMD8J+Cl92YD4ORR4tPLkIhW3cl/o1znmzyWfh/8tk+LAxr+
3jsSScurovWTIV4sYmgqnrUMgL0fWeREMnI=
-----END CERTIFICATE-----
Generated at Wed May 13 04:47:36 2026 by rpki-client