Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa
File:                     3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (raw, json)
Hash identifier:          lXhYJ0DA1ZPF7j87Xae2VDeesVSyf9L7rCounE/aVVg=
Subject key identifier:   85:D6:68:59:42:4D:1D:54:7E:6C:89:BF:CA:5E:A3:56:D4:F9:F1:29
Certificate issuer:       /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09
Certificate serial:       6EEB491BA314F5E441CFA48A2CF5E234495B8DF7
Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa
Signing time:             Sun 03 May 2026 02:31:10 +0000
ROA not before:           Sun 03 May 2026 02:26:10 +0000
ROA not after:            Sun 02 May 2027 02:31:10 +0000
asID:                     141596
IP address blocks:        103.160.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl
                          rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:eb:49:1b:a3:14:f5:e4:41:cf:a4:8a:2c:f5:e2:34:49:5b:8d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09
        Validity
            Not Before: May  3 02:26:10 2026 GMT
            Not After : May  2 02:31:10 2027 GMT
        Subject: CN=85D66859424D1D547E6C89BFCA5EA356D4F9F129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:90:3f:65:8f:04:5b:9f:56:ba:5b:c8:5b:
                    f4:b4:f0:af:69:75:ca:c7:49:c2:a8:67:0b:a5:33:
                    2e:0d:90:d5:ec:e5:3f:e5:be:48:8e:04:31:da:1e:
                    1f:24:29:81:85:db:3a:0e:45:03:71:79:d1:9f:ff:
                    31:2a:2d:23:40:e3:9b:0e:54:fe:6b:25:58:60:94:
                    54:f8:f2:30:48:08:2b:e5:ff:9a:b2:c0:0d:72:8d:
                    5e:1f:0f:41:02:da:0f:44:08:16:8a:a2:0c:9b:da:
                    0c:de:da:b5:ac:39:7e:94:2b:1a:d0:62:cd:b5:57:
                    0b:e0:85:0a:2d:c3:c2:cf:5f:85:55:23:90:45:dd:
                    4f:19:50:b1:25:d1:6e:5e:7e:c9:cd:95:1f:b4:ab:
                    6e:cd:57:d4:9e:91:30:bf:58:80:57:ba:3a:69:14:
                    bb:07:a3:35:e5:69:a9:c6:d0:7f:f1:e5:63:44:c4:
                    1e:96:3f:1a:89:6a:7b:06:22:61:15:36:fd:a8:d0:
                    89:99:34:d6:88:e1:7c:1a:fd:39:cd:d2:df:f0:c7:
                    ba:71:30:a4:fa:f4:e1:e6:b5:c9:1a:f9:35:18:71:
                    33:fc:fe:f4:14:19:48:08:79:59:5c:12:f8:66:61:
                    f0:bf:3a:83:d1:81:5c:b0:63:6a:c9:88:cc:8f:97:
                    4e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:68:59:42:4D:1D:54:7E:6C:89:BF:CA:5E:A3:56:D4:F9:F1:29
            X509v3 Authority Key Identifier:
                keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:3b:21:35:fe:49:f6:a2:0b:ac:b6:0f:42:6d:1d:42:ff:67:
         9a:8a:9a:21:15:f1:a0:ce:72:76:39:e3:72:55:cd:4e:06:2d:
         55:c4:bd:b9:4c:58:ed:2f:1f:a8:29:83:64:ca:96:7a:3f:23:
         17:5c:3e:31:10:57:ab:61:01:2e:4d:cd:6e:5d:d4:df:20:32:
         79:f8:5b:df:da:bb:d4:cd:80:26:fa:cc:08:58:ca:ba:8b:d7:
         23:2d:c6:17:06:17:f6:79:d1:de:30:b0:9d:36:39:f1:3d:77:
         0d:24:61:3b:8a:41:fa:65:99:4f:0a:93:a3:df:cd:0e:c8:2f:
         f5:2d:22:86:01:d7:8b:dc:9b:a7:57:27:bc:41:72:0b:5c:d3:
         a2:ea:19:42:8e:d4:31:9c:ef:0e:fd:50:22:0b:7a:7c:7a:24:
         bc:f2:e7:31:eb:52:ea:a6:5f:cf:52:29:00:86:b9:34:5f:6d:
         04:97:c0:57:64:10:26:90:83:3e:6e:e2:c5:ec:ac:e8:02:ac:
         92:66:07:ee:07:c9:2b:47:47:a4:5d:59:fc:12:9a:d7:5d:9b:
         91:5e:39:0e:d2:e7:d0:e9:65:72:2f:9a:a4:68:67:04:73:1e:
         43:20:2d:de:79:ea:df:e4:55:52:e5:c0:9c:9c:46:af:b8:8e:
         a9:15:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:32 2026 by rpki-client