Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa
File:                     3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (raw, json)
Hash identifier:          uFKAqSD6oWq2rEbik7/vRzt6HsV3cf1Z8RYkorvCjFs=
Subject key identifier:   C0:5A:F6:18:2F:E4:4F:58:86:E3:AC:EB:BC:3D:09:94:95:66:63:3A
Certificate issuer:       /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09
Certificate serial:       0C228A440AD4A83112238EC596EAA395F9B26C86
Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa
Signing time:             Sun 03 May 2026 02:31:09 +0000
ROA not before:           Sun 03 May 2026 02:26:09 +0000
ROA not after:            Sun 02 May 2027 02:31:09 +0000
asID:                     141596
IP address blocks:        103.160.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl
                          rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:22:8a:44:0a:d4:a8:31:12:23:8e:c5:96:ea:a3:95:f9:b2:6c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09
        Validity
            Not Before: May  3 02:26:09 2026 GMT
            Not After : May  2 02:31:09 2027 GMT
        Subject: CN=C05AF6182FE44F5886E3ACEBBC3D09949566633A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:0c:c9:5a:46:7c:1c:18:1b:93:e3:dd:50:
                    5a:75:c8:e8:bc:3c:c1:e1:27:31:f6:e2:b9:7e:aa:
                    e4:eb:d1:44:33:5c:af:f3:25:96:91:36:1c:ad:a7:
                    53:fb:de:be:d5:97:3d:6f:44:84:b4:9f:5c:46:73:
                    93:ec:79:52:96:d8:c8:ea:7d:36:9b:af:20:df:52:
                    5a:7a:45:3f:b1:aa:2b:7a:c3:b7:36:92:78:51:82:
                    d2:fd:a8:a3:32:91:18:d0:92:40:a5:ff:a0:c3:a8:
                    c7:cf:2a:d8:47:f7:96:f6:bd:88:7c:b7:99:7e:13:
                    d4:f6:2e:04:6f:ce:a2:37:8c:98:22:c8:21:77:5f:
                    39:5d:0c:3e:cf:2d:8a:56:cd:f1:ae:fd:43:2b:37:
                    ba:5e:49:24:88:3c:d1:81:d7:2f:60:b1:9c:0e:73:
                    42:43:d3:ad:1c:0f:38:d9:df:e0:44:00:eb:7a:9c:
                    90:ec:47:43:ee:f9:eb:2b:f6:d0:68:e6:fb:e3:d3:
                    ea:aa:e0:e0:6e:7e:9e:37:2c:48:f4:36:09:3f:45:
                    0c:29:f0:55:33:ad:3e:25:2a:97:af:9b:df:8a:75:
                    dd:69:cc:cb:1a:80:02:b0:13:1b:c8:55:bb:91:75:
                    03:c8:2e:6f:20:61:c3:65:1c:67:2e:35:c3:ae:64:
                    36:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:F6:18:2F:E4:4F:58:86:E3:AC:EB:BC:3D:09:94:95:66:63:3A
            X509v3 Authority Key Identifier:
                keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:64:da:43:7a:92:13:c8:ee:cb:fb:5c:c5:e7:2f:9f:26:40:
         d0:5d:4d:01:a8:26:b3:05:df:5c:f1:f7:8e:71:bd:b4:5d:ee:
         c9:57:97:ba:db:8f:6f:74:39:00:4b:d0:2e:83:92:5d:f2:3c:
         08:ab:17:7e:b2:eb:03:4c:36:76:e0:c1:a3:cb:d7:4b:45:76:
         f9:95:20:15:07:7c:6e:bc:41:d7:b2:76:25:79:98:82:a8:e4:
         bb:82:20:fe:4a:e1:ea:32:68:11:77:19:a9:7f:51:f9:6f:c1:
         36:45:a3:74:bd:58:3e:f0:aa:73:3f:34:f7:9e:76:58:7e:84:
         14:26:44:44:7b:c4:fc:d2:d4:ec:5a:19:6e:92:97:79:51:0d:
         6b:7d:7b:99:f8:a7:cf:42:0c:09:7b:fc:07:11:b0:29:99:24:
         e7:18:3c:f4:fb:34:97:5d:a1:28:d1:32:9c:ab:25:e6:e9:5f:
         51:33:d2:c0:5f:6c:4c:e4:46:03:dd:bb:40:b6:82:86:1f:21:
         44:86:f3:6b:6b:b8:90:9d:45:13:66:ca:ae:3b:fb:a7:f1:f7:
         15:0f:36:2f:f4:f0:ef:0c:48:a6:e8:5f:0e:b9:de:57:72:9c:
         3c:aa:75:35:aa:3a:3f:06:4a:85:4b:ce:16:95:b8:3e:dd:e2:
         40:e0:a4:31
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDCKKRArUqDESI47FluqjlfmybIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2QjdG
QjZFNEQwOTAeFw0yNjA1MDMwMjI2MDlaFw0yNzA1MDIwMjMxMDlaMDMxMTAvBgNV
BAMTKEMwNUFGNjE4MkZFNDRGNTg4NkUzQUNFQkJDM0QwOTk0OTU2NjYzM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2gzJWkZ8HBgbk+PdUFp1yOi8
PMHhJzH24rl+quTr0UQzXK/zJZaRNhytp1P73r7Vlz1vRIS0n1xGc5PseVKW2Mjq
fTabryDfUlp6RT+xqit6w7c2knhRgtL9qKMykRjQkkCl/6DDqMfPKthH95b2vYh8
t5l+E9T2LgRvzqI3jJgiyCF3XzldDD7PLYpWzfGu/UMrN7peSSSIPNGB1y9gsZwO
c0JD060cDzjZ3+BEAOt6nJDsR0Pu+esr9tBo5vvj0+qq4OBufp43LEj0Ngk/RQwp
8FUzrT4lKpevm9+Kdd1pzMsagAKwExvIVbuRdQPILm8gYcNlHGcuNcOuZDY5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUwFr2GC/kT1iG46zrvD0JlJVmYzowHwYDVR0j
BBgwFoAU3PrNBOlHijbwWM0X3g6mt/tuTQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGEwOTlhZGYtN2UxMi00ZTgzLTk1YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRF
OTQ3OEEzNkYwNThDRDE3REUwRUE2QjdGQjZFNEQwOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQ0ZBQ0QwNEU5NDc4QTM2RjA1OENEMTdERTBFQTZCN0ZCNkU0
RDA5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRhMDk5YWRmLTdlMTItNGU4My05
NWMyLWRkN2Y3NzQ5NDc4OC8wLzMxMzAzMzJlMzEzNjMwMmUzNDMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDMxMzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6AoMA0GCSqG
SIb3DQEBCwUAA4IBAQAmZNpDepITyO7L+1zF5y+fJkDQXU0BqCazBd9c8feOcb20
Xe7JV5e6249vdDkAS9Aug5Jd8jwIqxd+susDTDZ24MGjy9dLRXb5lSAVB3xuvEHX
snYleZiCqOS7giD+SuHqMmgRdxmpf1H5b8E2RaN0vVg+8KpzPzT3nnZYfoQUJkRE
e8T80tTsWhlukpd5UQ1rfXuZ+KfPQgwJe/wHEbApmSTnGDz0+zSXXaEo0TKcqyXm
6V9RM9LAX2xM5EYD3btAtoKGHyFEhvNra7iQnUUTZsquO/un8fcVDzYv9PDvDEim
6F8Oud5Xcpw8qnU1qjo/BkqFS84Wlbg+3eJA4KQx
-----END CERTIFICATE-----
Generated at Wed May 13 02:36:36 2026 by rpki-client