Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          px9X+O9ny0l4vYxfzIWreJmM643EB907pN6w+j83CNY=
Subject key identifier:   95:2C:C7:BA:3E:3A:E2:FA:FC:2F:2F:4D:12:FB:38:2F:5D:83:A2:6E
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       4AF470BC1093F02F1C699EE48E696B42936C3D03
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:28 +0000
ROA not before:           Sun 03 May 2026 02:10:28 +0000
ROA not after:            Sun 02 May 2027 02:15:28 +0000
asID:                     58369
IP address blocks:        103.4.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f4:70:bc:10:93:f0:2f:1c:69:9e:e4:8e:69:6b:42:93:6c:3d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:28 2026 GMT
            Not After : May  2 02:15:28 2027 GMT
        Subject: CN=952CC7BA3E3AE2FAFC2F2F4D12FB382F5D83A26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:9b:7f:bb:5d:e5:4a:9c:f5:c6:34:70:da:
                    68:2e:bd:f1:ec:e7:33:a0:56:c2:a8:f3:0c:3a:75:
                    5b:22:32:8d:55:2a:35:84:b7:f6:ce:fd:02:77:b4:
                    48:6a:7c:60:f2:02:98:a4:13:bb:97:34:df:44:5d:
                    bf:2c:da:fa:9f:a7:37:15:d2:62:35:44:c2:1d:b8:
                    87:c6:c4:b0:39:89:70:cf:37:04:11:b7:0a:94:13:
                    d2:03:05:75:15:6a:f0:81:19:2d:cd:7f:da:0b:3d:
                    8c:22:c2:18:2e:b5:21:8c:3e:6c:71:6c:d5:91:5a:
                    f7:18:15:54:30:72:e9:2c:e4:76:5b:dd:51:da:d6:
                    b5:0a:8c:5a:3a:e9:c4:b8:9e:ec:1e:28:2c:26:f3:
                    ad:98:af:e2:b0:93:2c:2b:c8:c7:7c:2b:c5:7a:d3:
                    af:3d:0e:6e:3c:a2:12:6c:30:97:b0:21:8e:d4:4c:
                    30:00:80:32:8e:8e:b6:f8:6e:8b:8a:af:d3:85:0e:
                    59:37:72:ec:9a:c4:33:2c:93:82:bb:bf:20:61:26:
                    8e:bf:dc:a3:68:19:a5:5d:9f:22:ed:5d:bf:23:ea:
                    ae:e5:2f:f8:71:d1:31:ce:85:38:a1:e4:fe:e4:9e:
                    c3:96:16:00:05:2a:79:e1:26:01:d3:2f:ba:83:ac:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2C:C7:BA:3E:3A:E2:FA:FC:2F:2F:4D:12:FB:38:2F:5D:83:A2:6E
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:1e:f5:ac:3b:fc:66:05:80:db:ac:e2:d9:0c:dc:e8:80:c5:
         83:c8:8e:d8:d2:3a:ba:b7:7d:7f:ed:13:29:36:98:1a:ac:9a:
         76:6a:49:80:53:29:f7:94:b6:99:3e:48:52:2f:53:15:1e:fa:
         42:12:bf:bd:7c:f1:94:4f:6f:27:c4:b2:fe:ad:1b:c0:ad:13:
         79:b3:5d:5e:48:7f:a7:2a:fd:fd:bf:34:d7:cf:de:27:d7:94:
         47:45:d8:e3:57:77:c3:2d:d3:fa:80:71:6f:bf:51:11:86:e8:
         53:e3:d3:1e:81:3d:ba:f2:88:e2:3a:a3:52:c0:7c:bd:2c:42:
         f5:c7:18:8e:dd:e1:b0:51:23:17:2e:9b:2a:d1:06:74:38:a4:
         45:90:ea:24:09:55:18:2a:78:e4:b8:fd:04:2e:87:99:60:bf:
         ac:8b:82:be:81:01:6e:f5:c8:10:70:ad:ab:f6:23:88:4f:40:
         0e:bd:1d:b8:f1:e7:f9:c4:35:a3:74:f8:ca:7b:e8:70:98:1c:
         ef:56:01:dc:cf:a1:a9:65:6d:31:b4:df:8c:d3:00:0b:c4:04:
         b5:bf:2b:96:24:ef:cb:72:59:c0:47:64:e2:79:92:77:04:48:
         36:14:d3:b4:f7:25:40:98:8a:1c:d2:e4:e5:fd:72:b6:3e:0c:
         48:2b:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:47 2026 by rpki-client