Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa
File:                     3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (raw, json)
Hash identifier:          A6nVc+CU4v4uaObx3pcTTBPbO/2k+l19C2GraBAa5qQ=
Subject key identifier:   10:CF:D5:98:2E:D2:F1:C0:C1:7D:B6:3A:1A:1D:5A:99:20:35:F6:8F
Certificate issuer:       /CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA
Certificate serial:       0CA06C0D5B746332BAA9FC9CACFE0186AEB13800
Authority key identifier: 28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa
Signing time:             Sun 03 May 2026 02:27:46 +0000
ROA not before:           Sun 03 May 2026 02:22:46 +0000
ROA not after:            Sun 02 May 2027 02:27:46 +0000
asID:                     141909
IP address blocks:        103.164.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl
                          rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a0:6c:0d:5b:74:63:32:ba:a9:fc:9c:ac:fe:01:86:ae:b1:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA
        Validity
            Not Before: May  3 02:22:46 2026 GMT
            Not After : May  2 02:27:46 2027 GMT
        Subject: CN=10CFD5982ED2F1C0C17DB63A1A1D5A992035F68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:53:86:5a:f1:3c:b8:47:e4:72:53:fc:bf:
                    b0:eb:a5:e8:a2:1e:a3:d3:95:84:4d:9b:75:c3:74:
                    3f:2b:fe:c7:e4:3f:35:f2:74:9c:54:88:13:d9:5c:
                    05:59:eb:d8:41:d9:83:88:aa:1f:fd:0f:39:03:48:
                    dc:4f:97:50:0e:8d:54:88:6a:95:d0:98:0b:34:76:
                    51:9b:6e:a6:f0:6f:28:5e:84:7f:eb:d8:27:e3:ec:
                    25:79:9f:10:88:58:01:76:0d:10:28:dc:fc:ca:1e:
                    92:b2:65:f0:5d:13:0f:0b:e1:f3:3f:21:e5:27:89:
                    d7:4d:87:e4:2c:68:cf:ce:d3:ad:bd:e1:6d:6a:a4:
                    93:ff:ea:50:9d:a1:c3:9e:df:51:78:53:94:78:c3:
                    68:05:d0:e9:9a:cf:41:a7:7e:2f:64:59:cb:df:53:
                    7f:e0:e4:8d:b7:63:1a:d1:b9:79:76:cc:c6:f2:fa:
                    ca:89:d9:2c:ca:ad:56:26:ab:45:69:28:7a:d9:ff:
                    a5:be:fd:a7:a9:09:e3:80:a0:99:73:20:ec:46:9a:
                    2f:fd:82:3e:62:1a:6d:68:70:5e:36:c2:37:8c:4e:
                    a0:fa:16:76:cd:12:17:ae:51:77:21:fd:cc:ed:84:
                    82:ac:e8:06:b7:d6:34:49:f6:91:28:37:43:60:ba:
                    05:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CF:D5:98:2E:D2:F1:C0:C1:7D:B6:3A:1A:1D:5A:99:20:35:F6:8F
            X509v3 Authority Key Identifier:
                keyid:28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:4a:ed:69:5b:4b:48:38:e3:99:f2:7f:c5:6e:f9:0d:f1:3a:
         a2:c6:9a:c8:4e:10:83:9d:02:c1:c5:fc:16:59:66:d2:74:6f:
         55:7c:de:59:cb:d6:a0:39:13:19:14:3e:21:dd:89:09:c6:76:
         4b:26:9e:11:4f:c5:de:0f:ca:92:0a:ac:9b:c5:e8:f1:79:83:
         4d:36:5a:b9:09:34:48:90:f3:46:af:69:d5:d2:8e:52:80:4b:
         0b:24:a1:64:81:25:9f:12:32:d1:79:06:90:69:78:40:5b:da:
         c6:b5:cd:eb:34:69:fd:0f:83:63:ad:80:28:ac:b0:94:8f:8e:
         ac:c8:c8:bb:c0:a3:c7:18:29:79:3f:d2:0c:62:c7:e9:91:82:
         f2:32:9d:ad:ec:54:26:a6:84:29:13:c2:af:53:0c:d4:84:49:
         f6:7a:a9:6e:fe:e0:07:a0:6b:86:c7:5a:18:ed:05:59:2f:c7:
         ec:01:00:76:c1:eb:a9:02:34:e0:e5:7c:65:e7:d5:7d:bc:4e:
         a7:8b:c1:20:d6:08:82:60:e6:53:30:05:92:6b:b5:cd:22:83:
         c4:b7:65:6e:d0:ee:35:04:1d:a0:c2:af:96:41:10:a1:8b:ff:
         b0:58:26:72:40:4b:fc:e9:ba:07:3a:76:66:a8:e3:e1:2c:56:
         9d:9d:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:13 2026 by rpki-client