Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa
File:                     3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (raw, json)
Hash identifier:          eMjrRkEiItNdv20OSL8v5DoNQVMNdFSIv45ei3rnYVk=
Subject key identifier:   C7:84:6D:60:3C:AF:FB:07:FB:67:04:67:D2:29:32:22:7D:CF:55:8F
Certificate issuer:       /CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54
Certificate serial:       2229026E2831FE14E450A28C412A343AA4F347C5
Authority key identifier: AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa
Signing time:             Sun 03 May 2026 02:21:42 +0000
ROA not before:           Sun 03 May 2026 02:16:42 +0000
ROA not after:            Sun 02 May 2027 02:21:42 +0000
asID:                     141906
IP address blocks:        103.164.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl
                          rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:29:02:6e:28:31:fe:14:e4:50:a2:8c:41:2a:34:3a:a4:f3:47:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54
        Validity
            Not Before: May  3 02:16:42 2026 GMT
            Not After : May  2 02:21:42 2027 GMT
        Subject: CN=C7846D603CAFFB07FB670467D22932227DCF558F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:0c:dc:01:12:d0:a6:36:60:6c:a0:d2:25:
                    a9:d1:f6:07:2f:7b:78:7b:4d:6d:ae:26:40:90:c9:
                    4e:d0:53:2a:f6:e5:19:27:25:a3:f9:50:7d:01:9c:
                    61:31:ca:c4:d9:8c:8b:ff:2f:cf:58:b3:fe:b1:04:
                    ba:c1:e2:ac:12:eb:37:76:2a:0c:ef:07:a6:a9:fa:
                    3f:3c:38:76:de:eb:14:26:0c:1a:9f:98:1c:ac:d6:
                    45:f5:5e:23:f0:80:ea:45:44:82:54:da:47:21:61:
                    f8:a1:36:7f:fe:71:70:11:f5:93:1c:75:8b:02:81:
                    14:19:98:58:43:0e:97:14:9c:e9:d9:82:0a:84:60:
                    f9:0f:80:ff:b9:70:d6:ba:fb:53:12:81:d8:3a:61:
                    b7:0b:04:26:15:d8:8e:ee:9b:4c:09:2c:72:95:5a:
                    e5:4f:53:2c:de:53:d9:9c:a3:35:51:a8:cb:bb:b2:
                    dd:80:de:f7:b2:18:bd:11:b2:52:19:19:c3:5d:94:
                    1d:cc:60:30:bd:af:27:a1:b2:48:56:59:a8:92:77:
                    11:e9:73:89:f6:a6:62:d7:81:50:59:c5:73:b7:78:
                    1f:bb:3e:c1:fb:51:b9:39:a3:0d:cf:23:da:10:0f:
                    0a:0e:c5:c4:c6:76:48:ee:55:74:43:02:34:35:93:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:84:6D:60:3C:AF:FB:07:FB:67:04:67:D2:29:32:22:7D:CF:55:8F
            X509v3 Authority Key Identifier:
                keyid:AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:66:32:71:09:e9:3b:9e:c5:b6:7f:ba:c8:ff:9f:47:e0:ca:
         0d:d9:fa:8d:ee:01:ac:7b:71:45:50:94:91:cc:e0:04:20:bf:
         f5:66:3e:1d:4c:35:a1:04:3b:99:01:ed:0f:7d:7f:b3:f4:1d:
         1a:b6:8a:ac:66:c5:ae:bd:c2:9e:0d:37:a1:ee:21:23:33:52:
         0c:a4:61:28:c5:53:e1:13:8b:d6:5c:0c:e2:7b:ee:e2:96:0c:
         7a:92:00:49:be:3c:af:d9:99:82:35:4b:04:d0:dc:05:e1:e9:
         48:8a:eb:02:ce:4a:4f:c0:50:96:e7:e6:0f:79:a3:3c:0e:37:
         9c:00:53:bd:4c:d8:45:8c:a0:b9:fc:84:48:75:c2:14:e2:98:
         c3:99:4d:0d:2a:13:a8:15:0c:66:e5:a6:37:c3:0b:1a:58:b6:
         11:87:e6:70:7c:4c:d3:6e:25:0c:e3:99:83:58:5b:85:96:03:
         9a:7b:0e:c9:1c:e7:07:a4:8e:6c:47:27:78:07:e9:2a:d1:f7:
         f7:4a:9f:a0:92:b2:db:6f:db:c7:a2:fc:a3:44:64:84:e9:60:
         da:77:f5:a3:16:41:31:cb:df:b9:00:c0:ad:9e:3e:98:bb:de:
         48:9e:c1:70:89:8a:e5:49:fd:d0:31:00:cb:74:26:7d:e7:ea:
         b5:93:de:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:48 2026 by rpki-client