Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa
File:                     3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (raw, json)
Hash identifier:          baidtJB1I5sZbU9lybxXsdsHbmGXConPY+qLEFZYE2g=
Subject key identifier:   7A:E2:DF:12:A7:42:64:D5:D4:1B:1B:62:EC:43:59:A1:DF:D8:23:DB
Certificate issuer:       /CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8
Certificate serial:       06694131FC0D09F37986768B01F31EE4C42B3DDB
Authority key identifier: 9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa
Signing time:             Sun 03 May 2026 02:28:37 +0000
ROA not before:           Sun 03 May 2026 02:23:37 +0000
ROA not after:            Sun 02 May 2027 02:28:37 +0000
asID:                     141615
IP address blocks:        103.161.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl
                          rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:69:41:31:fc:0d:09:f3:79:86:76:8b:01:f3:1e:e4:c4:2b:3d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8
        Validity
            Not Before: May  3 02:23:37 2026 GMT
            Not After : May  2 02:28:37 2027 GMT
        Subject: CN=7AE2DF12A74264D5D41B1B62EC4359A1DFD823DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:ba:58:0b:ef:ae:ce:16:0d:fa:1e:19:90:
                    3f:88:ed:82:4f:c2:d4:d5:00:0d:98:5f:71:ab:d9:
                    7b:48:c2:77:f9:c0:d0:e8:e5:97:ca:98:40:ce:60:
                    1d:78:b9:c4:2f:6d:1c:ed:00:29:b7:9d:1a:7e:f3:
                    c1:4e:48:c5:6b:87:91:35:f0:04:b6:eb:d7:3a:fd:
                    54:44:c9:20:8e:8b:1d:d7:bf:2f:6b:f8:25:f0:4c:
                    42:93:7a:e2:07:eb:8b:53:39:af:35:73:1c:fc:ad:
                    66:b7:2b:5d:da:b8:89:8d:09:cd:bd:0b:76:80:7b:
                    ab:23:a5:ae:cd:78:23:a7:1b:f2:73:ce:b3:e6:0d:
                    dd:17:7d:1c:0e:e4:62:f0:34:bd:72:ff:59:2d:ff:
                    7d:0c:87:a9:84:b6:54:a2:a4:e2:45:4c:45:a9:83:
                    71:43:f3:c4:19:1b:91:af:87:a4:2d:9f:22:40:dc:
                    47:06:eb:62:12:6e:9d:f9:8b:22:24:43:7a:f7:34:
                    98:b4:39:c1:df:d5:24:4c:bf:8f:2e:c4:a1:5e:32:
                    2c:10:bf:48:f4:fe:29:86:ec:e1:0f:ae:06:10:06:
                    cd:03:66:f2:e6:6b:0c:67:05:97:0b:1a:0c:02:0c:
                    2c:6a:df:15:a7:30:15:50:2c:6a:6d:58:d0:2f:5b:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:DF:12:A7:42:64:D5:D4:1B:1B:62:EC:43:59:A1:DF:D8:23:DB
            X509v3 Authority Key Identifier:
                keyid:9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:a2:bf:05:cf:16:61:c4:c6:a3:cf:74:c9:8b:ac:cc:67:
         a7:07:b8:5e:7c:41:06:fb:10:18:5a:c7:89:f6:aa:fe:9e:c9:
         62:cd:a0:ad:6e:60:42:b1:aa:84:e3:44:4b:95:25:7f:62:93:
         2e:88:95:93:0d:55:f7:a7:42:2a:e2:14:7f:b4:24:04:b9:20:
         2b:06:09:50:98:71:9b:52:97:e7:0d:f5:83:da:34:75:cd:f6:
         73:90:57:0f:05:cc:a2:95:76:d4:da:6e:4a:a6:23:14:40:1c:
         f2:78:0d:25:0c:9c:08:57:bd:51:a6:af:ea:ff:4e:f9:e2:93:
         15:33:b2:85:3b:8d:28:67:7f:b7:c1:23:ef:ec:7f:07:d2:7a:
         84:79:63:6f:e3:22:c7:7a:79:8c:22:bb:63:26:99:46:97:90:
         93:57:15:1c:95:69:e5:f3:cc:d5:7e:d5:44:a3:7e:b8:ed:d9:
         b5:a2:2f:8b:31:d6:4b:25:5a:c8:f1:8e:24:4b:03:b0:10:ce:
         75:28:61:9d:75:66:45:fa:d9:36:ac:70:8b:18:be:2b:ee:6c:
         db:db:8f:48:d6:a0:91:98:81:a8:b2:10:bd:14:80:9e:da:61:
         a5:a1:42:7d:31:3e:b5:c4:a7:6a:a4:b7:55:3d:8b:e9:e5:bf:
         32:d7:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:58 2026 by rpki-client