Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa
File:                     3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (raw, json)
Hash identifier:          fn14xb7Fet3D9STECs6nLsztZDz4SqE0tmJcaxx1cKk=
Subject key identifier:   A6:1B:B3:45:42:9F:E3:EC:25:30:17:FF:B6:83:E4:B7:FB:97:E0:34
Certificate issuer:       /CN=0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C
Certificate serial:       7F27D4BA0A73324D465954DB16E67915ADD73882
Authority key identifier: 0D:C6:61:9B:D5:EE:04:1C:F9:43:A5:C6:0A:14:AA:09:A7:E1:E0:8C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa
Signing time:             Sun 03 May 2026 02:30:07 +0000
ROA not before:           Sun 03 May 2026 02:25:07 +0000
ROA not after:            Sun 02 May 2027 02:30:07 +0000
asID:                     141617
IP address blocks:        103.161.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl
                          rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:27:d4:ba:0a:73:32:4d:46:59:54:db:16:e6:79:15:ad:d7:38:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C
        Validity
            Not Before: May  3 02:25:07 2026 GMT
            Not After : May  2 02:30:07 2027 GMT
        Subject: CN=A61BB345429FE3EC253017FFB683E4B7FB97E034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:63:a1:34:ec:3c:bd:c8:d9:a0:fe:54:f3:76:
                    46:2e:55:27:a4:bd:56:d5:34:d1:15:47:26:36:92:
                    ca:69:0e:44:c5:a7:02:c3:dc:5b:82:e0:ea:e0:f4:
                    11:90:17:f2:76:ac:90:8e:48:af:f9:9d:e8:51:3a:
                    73:07:6f:ab:5d:8a:ed:7f:0e:c7:eb:d7:7e:1d:8b:
                    6e:e1:fd:b8:66:5d:1a:61:d8:2f:52:46:91:96:5b:
                    53:60:1a:a4:b8:bf:87:36:0f:94:2a:4f:91:aa:0d:
                    9a:37:2d:26:f7:be:f4:92:08:d6:3d:0e:a7:fe:04:
                    97:77:77:95:e6:dd:6a:e4:3c:61:e9:fe:55:d4:e5:
                    35:1f:6c:07:87:dd:c2:64:ff:b8:14:d4:23:1e:6a:
                    66:9c:33:28:16:cb:6c:f9:11:11:7b:cc:03:b4:af:
                    7c:d0:61:e0:10:e6:57:db:85:96:1e:f3:5f:b4:38:
                    70:e1:5c:57:9d:1d:a1:b2:19:22:db:fb:20:7a:0c:
                    86:9d:3f:fc:bf:b3:46:4e:57:f2:65:ea:99:b9:31:
                    8d:db:ea:71:2e:5b:03:e9:ad:23:20:2d:da:18:e0:
                    21:40:ae:e8:75:f8:5d:7c:bb:b7:a3:8a:3e:4b:74:
                    ff:b7:33:0d:16:36:5a:10:1c:b8:fd:b2:e5:d2:28:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1B:B3:45:42:9F:E3:EC:25:30:17:FF:B6:83:E4:B7:FB:97:E0:34
            X509v3 Authority Key Identifier:
                keyid:0D:C6:61:9B:D5:EE:04:1C:F9:43:A5:C6:0A:14:AA:09:A7:E1:E0:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:a9:73:32:bb:e5:c6:7d:34:e1:bf:6e:8f:5e:1e:33:e1:
         fa:c8:e2:86:95:65:80:4f:b3:14:8f:89:03:b0:f2:db:e2:fb:
         b8:38:9c:be:85:ad:3a:f9:90:58:c7:d2:66:88:1b:4b:3f:07:
         a4:72:19:ce:23:e3:64:41:4f:43:75:99:74:87:de:a5:1e:45:
         d6:3c:7e:0d:ad:51:42:56:35:e7:ed:5a:ff:9b:75:5b:7d:a9:
         1c:1a:27:61:87:c7:47:75:a2:98:ca:48:5d:7f:19:0d:f1:b7:
         b9:68:86:cb:01:39:85:ea:b5:73:49:d7:d5:4c:b1:24:f3:a4:
         3f:70:de:3d:7d:4f:45:81:5c:13:a0:15:7f:4c:b8:6b:f2:6c:
         bd:83:41:ac:34:c6:9c:25:64:e3:33:07:65:59:e8:e0:17:06:
         cd:f1:a7:50:55:34:b8:8c:dd:32:cb:81:89:79:e7:3e:d9:14:
         45:34:67:2f:2d:e0:ce:77:7c:fd:ce:91:6b:dd:ab:8c:8c:e9:
         d9:01:8e:b5:71:cd:a1:55:53:e2:e5:00:3a:4b:bc:b6:38:20:
         98:df:39:36:59:cf:a9:c6:29:19:0b:77:91:eb:1c:04:cf:77:
         00:88:c4:d5:59:88:3e:33:24:71:01:13:00:47:5e:4b:67:e7:
         95:e6:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:34:37 2026 by rpki-client