Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa
File:                     3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (raw, json)
Hash identifier:          85/rZ6LwJ+jBT8qlN/LTVMyuVN987z9Fl30YQ8p1+qo=
Subject key identifier:   F4:58:6F:F3:6F:6A:2A:87:F1:B5:0F:77:B3:2C:83:9F:79:45:EA:A6
Certificate issuer:       /CN=44428DF327C8FF800708E2196181BCB000E14F9B
Certificate serial:       354DFA8DA8509C880F79D196491029CDF7A8E029
Authority key identifier: 44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa
Signing time:             Sun 03 May 2026 02:23:51 +0000
ROA not before:           Sun 03 May 2026 02:18:51 +0000
ROA not after:            Sun 02 May 2027 02:23:51 +0000
asID:                     141600
IP address blocks:        103.160.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl
                          rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4d:fa:8d:a8:50:9c:88:0f:79:d1:96:49:10:29:cd:f7:a8:e0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44428DF327C8FF800708E2196181BCB000E14F9B
        Validity
            Not Before: May  3 02:18:51 2026 GMT
            Not After : May  2 02:23:51 2027 GMT
        Subject: CN=F4586FF36F6A2A87F1B50F77B32C839F7945EAA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:9a:23:97:38:33:7f:b9:8b:b5:dd:3e:d2:
                    c1:63:4b:05:b7:89:29:81:e6:c1:81:25:93:62:49:
                    11:ab:bd:7d:38:e2:5a:da:fc:bb:09:2d:a4:aa:e6:
                    8a:c3:c8:51:10:80:fb:cc:ae:cd:28:13:51:4a:24:
                    cb:c4:3c:10:56:af:ad:89:91:90:b6:84:df:de:3b:
                    b7:c2:9c:f3:d9:ec:17:ba:85:d3:ae:72:ed:90:a6:
                    0a:e0:15:66:42:16:73:9f:cf:e3:2d:2b:8b:79:39:
                    73:36:54:c8:cb:14:0d:87:f1:c1:8e:dc:b0:c7:fa:
                    97:db:3d:66:14:28:a5:e4:ce:32:08:e2:70:67:53:
                    45:2b:79:af:eb:cc:c5:55:26:a1:44:eb:b1:3d:80:
                    a6:df:94:37:5b:83:0b:c0:a6:51:6d:01:88:59:71:
                    cc:9c:b8:f5:61:e4:7c:7e:61:cf:da:4c:3d:ec:d8:
                    eb:73:2d:7b:28:a0:8a:97:ca:d2:e7:8b:c3:8e:b5:
                    4e:e1:d1:27:77:6c:a5:d6:08:b9:bc:d0:83:53:4a:
                    39:85:e3:01:66:a1:e8:a9:8e:04:b6:e8:68:a2:26:
                    d6:60:51:51:1c:ae:e9:93:59:f3:2a:d8:bc:89:1e:
                    13:04:0b:b5:b7:ad:bd:81:57:f3:b0:c3:08:ee:a0:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:58:6F:F3:6F:6A:2A:87:F1:B5:0F:77:B3:2C:83:9F:79:45:EA:A6
            X509v3 Authority Key Identifier:
                keyid:44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:8e:e8:31:39:0f:a0:f0:ab:2e:f5:ab:92:e7:16:0d:24:
         95:6c:c6:51:f5:7a:76:ba:e7:a2:24:5d:28:4d:98:87:1d:f3:
         72:25:cd:83:a5:48:76:ad:e3:6e:0c:22:75:17:fe:4c:a9:bb:
         d6:6b:b0:5d:04:c4:cb:61:f0:c2:61:4d:16:29:7b:55:1a:f0:
         ce:1f:78:76:cc:61:5d:5b:de:54:bc:e9:63:fd:5e:2b:f9:5f:
         74:83:6d:2a:d1:d0:36:e6:a2:89:0d:ae:4c:73:7f:b0:ff:94:
         60:fe:fd:61:2a:cf:4a:6d:cf:b1:bb:d4:49:3b:67:51:96:08:
         56:87:bf:7d:b9:59:17:22:33:81:ac:f2:d6:b1:13:63:2c:35:
         cb:b0:4e:19:5c:7c:9a:b5:e6:36:2c:29:a2:fc:5b:64:eb:44:
         5b:c2:68:d0:f0:73:6b:52:bd:e9:59:2b:6c:e0:8b:79:3c:10:
         25:e0:88:9e:b9:1f:61:20:c2:ee:1c:7e:b9:6f:52:62:82:80:
         0a:33:09:b7:fd:59:90:94:f0:35:88:37:f0:a0:19:d4:e7:c2:
         d1:d3:53:11:5d:4d:02:55:b2:75:ec:32:51:90:2d:65:a0:00:
         a4:58:9c:85:eb:ea:05:3b:c3:ac:81:00:02:0e:59:d2:5e:90:
         49:9a:ab:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:07 2026 by rpki-client