Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa
File:                     3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (raw, json)
Hash identifier:          oYW4sdySDReabIUJh8DtwbQ7r9wux6oX5lpHgcktZMY=
Subject key identifier:   D7:47:FA:7B:6B:AB:5F:D9:F8:8C:9D:0F:38:E8:9D:A6:7A:98:60:4D
Certificate issuer:       /CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808
Certificate serial:       5A94BE7D8527EEEBDD6E868DCE4476CFDDA2A37D
Authority key identifier: E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa
Signing time:             Sun 03 May 2026 02:29:17 +0000
ROA not before:           Sun 03 May 2026 02:24:17 +0000
ROA not after:            Sun 02 May 2027 02:29:17 +0000
asID:                     141966
IP address blocks:        103.166.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl
                          rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:94:be:7d:85:27:ee:eb:dd:6e:86:8d:ce:44:76:cf:dd:a2:a3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808
        Validity
            Not Before: May  3 02:24:17 2026 GMT
            Not After : May  2 02:29:17 2027 GMT
        Subject: CN=D747FA7B6BAB5FD9F88C9D0F38E89DA67A98604D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a3:ba:e3:06:22:48:19:35:f5:d9:c7:a1:bb:
                    68:07:7f:7f:30:63:78:8b:1a:7e:f0:cf:c0:ce:74:
                    5b:f2:da:c3:3b:5e:67:53:4e:e8:e5:d5:8a:21:5c:
                    e9:ba:d7:c4:32:d5:b7:9c:46:34:9b:1f:cb:c1:1d:
                    4a:e7:ab:9a:1d:d9:f3:54:fe:f8:ef:46:76:6e:1b:
                    21:a8:46:c2:fc:ee:35:47:e5:4b:b8:2f:45:93:8d:
                    34:26:e4:a0:09:d9:dd:a9:5b:61:54:2c:6c:a3:21:
                    6f:a7:b9:ea:15:44:18:0b:5d:62:65:97:cb:f2:24:
                    bb:9d:16:50:7a:dd:dd:dc:a7:0e:41:e0:85:48:73:
                    b4:75:ca:c3:81:47:4b:66:a0:3a:c6:38:e7:f0:6b:
                    2d:17:fa:bd:a1:5d:e1:57:8f:93:08:8e:3f:a6:a6:
                    18:5c:b6:e3:48:67:a9:f5:5a:1e:27:19:2d:af:50:
                    fe:67:94:8b:1d:6e:2a:c3:09:c9:ea:0c:34:01:9f:
                    94:a8:d4:08:cf:88:46:fe:56:ae:33:d8:5e:0a:06:
                    bd:cb:69:3e:0c:28:45:e0:24:b5:dd:6a:36:da:53:
                    b9:96:c8:15:c3:24:af:41:26:ec:3b:70:93:ca:c1:
                    e3:e9:6f:c8:69:50:6c:fa:b3:fc:b2:f1:cf:41:1f:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:47:FA:7B:6B:AB:5F:D9:F8:8C:9D:0F:38:E8:9D:A6:7A:98:60:4D
            X509v3 Authority Key Identifier:
                keyid:E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:8d:cc:78:48:4d:e1:c6:d0:af:08:6c:d0:e1:a5:08:6f:
         69:8a:36:8d:f3:12:96:73:6f:67:e0:52:c8:c3:2f:a6:75:45:
         d3:fb:d9:16:9a:9b:8b:1c:59:2a:2d:ab:28:5a:62:49:0f:c6:
         ab:dd:b6:de:b8:f0:d7:e9:00:7c:83:f8:e0:6d:74:77:48:db:
         12:18:4a:17:10:e6:ce:83:f1:34:eb:57:0c:d8:d8:c5:64:a1:
         b7:95:bf:62:21:b6:b6:71:fb:19:e3:af:5c:9c:a3:74:be:94:
         83:01:22:e5:d4:1a:81:5a:b8:19:8f:87:8d:2f:a5:ed:71:6b:
         ba:f4:8e:a1:98:4e:e9:c0:f7:aa:c5:86:d1:7d:cf:75:55:be:
         2c:e7:0f:0f:a8:cd:8d:b7:d1:a1:06:cd:f4:2e:40:d6:73:a7:
         e1:54:08:d2:74:78:80:db:cd:3b:b7:fe:b7:8b:92:80:ec:e7:
         b5:3f:0c:c7:05:14:1b:a8:23:5b:9e:53:b5:44:a9:03:73:35:
         08:d3:5e:bc:da:d7:95:82:7a:c1:94:33:57:47:b6:82:26:c5:
         60:5f:b5:36:de:87:46:89:d9:76:be:04:96:78:d1:24:63:6c:
         ab:55:76:b6:58:ba:81:0e:2e:aa:57:ec:f4:aa:2b:0d:82:bc:
         57:31:67:63
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWpS+fYUn7uvdboaNzkR2z92io30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5
QTZDQzgwODAeFw0yNjA1MDMwMjI0MTdaFw0yNzA1MDIwMjI5MTdaMDMxMTAvBgNV
BAMTKEQ3NDdGQTdCNkJBQjVGRDlGODhDOUQwRjM4RTg5REE2N0E5ODYwNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqo7rjBiJIGTX12cehu2gHf38w
Y3iLGn7wz8DOdFvy2sM7XmdTTujl1YohXOm618Qy1becRjSbH8vBHUrnq5od2fNU
/vjvRnZuGyGoRsL87jVH5Uu4L0WTjTQm5KAJ2d2pW2FULGyjIW+nueoVRBgLXWJl
l8vyJLudFlB63d3cpw5B4IVIc7R1ysOBR0tmoDrGOOfway0X+r2hXeFXj5MIjj+m
phhctuNIZ6n1Wh4nGS2vUP5nlIsdbirDCcnqDDQBn5So1AjPiEb+Vq4z2F4KBr3L
aT4MKEXgJLXdajbaU7mWyBXDJK9BJuw7cJPKwePpb8hpUGz6s/yy8c9BH42TAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU10f6e2urX9n4jJ0POOidpnqYYE0wHwYDVR0j
BBgwFoAU5doh23bOkdbvckgv/f4CFppsyAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDI5Zjg5MDItMWEwNi00NWE4LWE5OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3
NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5QTZDQzgwOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNURBMjFEQjc2Q0U5MUQ2RUY3MjQ4MkZGREZFMDIxNjlBNkND
ODA4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQyOWY4OTAyLTFhMDYtNDVhOC1h
OTk4LTcyZTQ2YWFhZThmYy8wLzMxMzAzMzJlMzEzNjM2MmUzMjM1MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpv4wDQYJ
KoZIhvcNAQELBQADggEBADAKjcx4SE3hxtCvCGzQ4aUIb2mKNo3zEpZzb2fgUsjD
L6Z1RdP72Raam4scWSotqyhaYkkPxqvdtt648NfpAHyD+OBtdHdI2xIYShcQ5s6D
8TTrVwzY2MVkobeVv2IhtrZx+xnjr1yco3S+lIMBIuXUGoFauBmPh40vpe1xa7r0
jqGYTunA96rFhtF9z3VVviznDw+ozY230aEGzfQuQNZzp+FUCNJ0eIDbzTu3/reL
koDs57U/DMcFFBuoI1ueU7VEqQNzNQjTXrza15WCesGUM1dHtoImxWBftTbeh0aJ
2Xa+BJZ40SRjbKtVdrZYuoEOLqpX7PSqKw2CvFcxZ2M=
-----END CERTIFICATE-----
Generated at Wed May 13 10:39:37 2026 by rpki-client