Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa
File:                     3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (raw, json)
Hash identifier:          EE9ymycRiG5es8LdeuDyt4ZBgyII9pYHMLKeHbtmxMg=
Subject key identifier:   7F:FC:B4:CE:99:3D:F9:D3:0D:C6:3E:99:22:85:A7:5C:58:52:9E:E6
Certificate issuer:       /CN=7ACC57BA3042B007AA1613352A73FFD3162E565F
Certificate serial:       4808C979F99E1BEAD891E95400D469E4CF3643BE
Authority key identifier: 7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa
Signing time:             Sun 03 May 2026 02:19:16 +0000
ROA not before:           Sun 03 May 2026 02:14:16 +0000
ROA not after:            Sun 02 May 2027 02:19:16 +0000
asID:                     141592
IP address blocks:        103.160.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl
                          rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:08:c9:79:f9:9e:1b:ea:d8:91:e9:54:00:d4:69:e4:cf:36:43:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ACC57BA3042B007AA1613352A73FFD3162E565F
        Validity
            Not Before: May  3 02:14:16 2026 GMT
            Not After : May  2 02:19:16 2027 GMT
        Subject: CN=7FFCB4CE993DF9D30DC63E992285A75C58529EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:80:09:bc:27:b3:dc:83:52:a5:d2:30:68:e6:
                    2b:7e:7f:ed:72:1e:d1:8b:24:68:d1:d7:90:20:f3:
                    fe:3a:76:0d:68:9c:81:d2:cc:83:3d:0f:ef:8f:44:
                    a1:ab:ff:63:45:98:7d:1b:3f:f5:b0:28:a8:f6:71:
                    58:d9:97:76:af:c5:76:cd:c4:d7:11:bf:88:fb:d3:
                    c5:3d:a8:63:03:3b:88:0e:b6:a8:6e:b4:15:c1:74:
                    f8:1e:84:bd:32:8a:40:ff:26:30:eb:df:5f:d0:b8:
                    46:0b:82:ec:4b:ac:b2:f3:96:d4:28:ec:30:6f:80:
                    b6:00:a2:e7:76:e5:1f:13:9b:5a:74:95:e4:7c:b3:
                    17:38:72:c9:6a:54:8f:b2:f2:9a:fa:b6:81:75:ce:
                    1f:96:34:bc:c7:b7:83:65:2c:74:0c:f3:b8:19:6b:
                    db:bf:e2:34:65:db:0c:1b:ec:c6:2c:6f:a7:9f:06:
                    3a:52:ea:b9:cb:17:3d:44:f5:ca:8e:5f:39:14:81:
                    08:bc:27:dc:01:5e:77:cc:6e:30:19:a8:94:ea:a6:
                    fb:25:c1:51:13:9c:39:06:34:94:42:6d:42:8f:86:
                    64:c0:36:b1:95:27:c5:0d:5b:a5:f3:5e:a7:07:a5:
                    62:7d:a3:10:19:f9:da:08:19:a4:5b:10:e1:39:f9:
                    f2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FC:B4:CE:99:3D:F9:D3:0D:C6:3E:99:22:85:A7:5C:58:52:9E:E6
            X509v3 Authority Key Identifier:
                keyid:7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:a1:03:25:c3:63:72:0c:71:7f:93:ec:b3:28:02:1e:19:7a:
         87:4d:7e:c3:b9:07:e8:56:65:e1:67:b1:de:38:fc:15:90:ad:
         06:1e:69:93:2a:de:47:6d:ce:d1:7e:87:65:8f:0d:80:47:0c:
         dc:5d:d6:57:98:b3:43:f8:52:db:9b:57:fd:92:01:2d:d0:78:
         0f:09:f5:91:94:90:0b:80:58:b3:26:59:fe:a8:a7:66:0e:00:
         fe:6f:dc:08:f1:3f:0c:45:85:e3:2e:50:1c:fe:19:bf:93:7c:
         a0:58:c5:c3:84:60:00:5f:01:75:e8:12:fe:bd:15:a7:58:df:
         80:41:c5:01:fa:7a:aa:8a:fe:6b:47:d6:5a:27:f0:17:ab:62:
         87:6f:12:8c:d2:21:b2:8f:64:72:72:e2:05:3e:b7:13:45:e3:
         ff:a6:1a:49:9b:e9:ff:2e:e9:c8:cb:80:ef:b9:99:d1:1c:33:
         33:20:42:c3:f7:d6:3e:a5:99:a4:2b:bd:f9:47:c6:f1:3b:4d:
         12:cf:80:9f:04:08:88:26:53:c5:3e:51:30:83:dd:28:e4:da:
         da:e8:d2:14:ea:39:06:e4:10:f0:f2:e1:f3:67:d2:d4:f0:7c:
         ba:b4:bc:9d:61:91:78:35:5d:80:e5:e6:73:a8:bc:d0:41:8b:
         db:90:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:10 2026 by rpki-client