Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa
File:                     3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (raw, json)
Hash identifier:          ld7ZAKTrz/u5LDPP3+3DpOULg7oKh+lQm5wahDEcTNc=
Subject key identifier:   79:35:C1:99:7F:84:7C:34:05:83:5B:89:E4:EF:2B:20:E0:48:78:41
Certificate issuer:       /CN=9290697B92D08AFAAFB01253090BE0FE28871EA9
Certificate serial:       7DE4A1DE641AE059238752B3EEB815B0C21E41D7
Authority key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa
Signing time:             Sun 03 May 2026 02:28:48 +0000
ROA not before:           Sun 03 May 2026 02:23:48 +0000
ROA not after:            Sun 02 May 2027 02:28:48 +0000
asID:                     141909
IP address blocks:        103.164.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl
                          rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e4:a1:de:64:1a:e0:59:23:87:52:b3:ee:b8:15:b0:c2:1e:41:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9
        Validity
            Not Before: May  3 02:23:48 2026 GMT
            Not After : May  2 02:28:48 2027 GMT
        Subject: CN=7935C1997F847C3405835B89E4EF2B20E0487841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:64:f2:a6:c5:b6:ee:f2:de:16:2a:d9:d4:
                    03:da:6a:93:f8:de:1b:57:f3:4f:36:6b:e7:57:8e:
                    e3:3b:b0:ee:cf:76:eb:b3:78:fd:08:6f:bb:67:09:
                    01:1c:11:3b:b0:f0:ba:92:cb:44:7e:40:aa:f6:07:
                    46:99:dd:80:ce:b9:77:0b:d2:6a:fe:d8:96:27:81:
                    74:03:13:e2:fe:94:83:13:b0:c9:84:aa:02:74:01:
                    f7:5f:94:a2:f2:56:5c:7a:f9:72:6f:c3:7f:77:ea:
                    01:1d:a2:f1:43:0e:a6:f9:a7:8c:91:97:1f:3e:6b:
                    39:b5:06:1b:bd:7d:0d:82:cb:36:bd:a8:7f:a4:58:
                    ca:08:76:28:8b:db:8a:a9:35:ae:06:6b:40:4a:75:
                    c3:1c:fc:b2:b6:fa:c5:a5:a8:a4:71:fa:66:92:44:
                    e3:a1:2c:24:c1:24:da:6f:4a:06:99:d0:6d:e1:33:
                    12:d8:f5:38:73:36:92:e8:a1:fa:b3:e0:8a:47:d3:
                    87:c0:51:4e:b3:bf:ac:e7:b2:7f:49:3b:6c:2a:b6:
                    46:a0:35:7d:1c:08:f5:73:ba:ba:d5:bc:08:e8:70:
                    41:28:c7:59:82:1e:9e:6e:9d:0a:f9:b3:de:a5:59:
                    92:19:d2:e5:a2:e6:54:d5:3e:aa:7f:5c:7a:f3:be:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:35:C1:99:7F:84:7C:34:05:83:5B:89:E4:EF:2B:20:E0:48:78:41
            X509v3 Authority Key Identifier:
                keyid:92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:3b:e4:8e:f5:15:6d:b9:a7:11:7b:f5:ac:a5:ae:f3:e2:
         14:21:f9:89:8d:67:15:f4:e2:43:7f:36:b3:f7:38:70:0f:82:
         cb:31:43:46:c6:9d:0f:f6:93:c0:e1:66:7e:f0:54:7c:d0:91:
         f5:71:67:43:df:0f:26:e5:d7:a0:69:64:fe:93:77:9b:f5:a1:
         47:ec:b9:d9:f8:6b:ef:67:34:d1:fb:60:c5:72:4a:01:bb:e1:
         64:1e:d9:69:35:5a:70:51:c7:95:f2:be:a5:56:e4:c3:7d:77:
         9d:48:c8:e2:ce:ca:d6:ab:23:4d:f2:ca:07:95:8e:8a:a8:15:
         c0:f2:0b:18:86:0b:8a:5a:d2:ce:c3:ba:eb:3b:ee:b7:79:ea:
         c6:9f:92:0c:a1:8e:c0:c6:79:a8:bd:83:97:1c:73:44:89:bc:
         6a:d3:53:bd:f4:fe:64:59:b5:27:ca:2f:60:bc:d5:fb:09:22:
         3d:34:df:cd:76:0b:52:4f:b4:76:c2:e2:a9:c1:ad:95:d4:d7:
         a8:1f:8a:be:bf:13:5d:7a:8c:14:dc:17:5a:6e:d1:61:5f:86:
         14:9d:87:89:98:be:3c:8d:e6:8c:06:33:3d:a2:37:16:3b:14:
         ec:d3:7a:2b:46:a9:45:db:81:e8:70:49:e8:a3:92:4c:42:49:
         4e:30:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:28 2026 by rpki-client