Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa
File:                     3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (raw, json)
Hash identifier:          OyG3mFe6SrJhcLOwFyBCeuQpeyeUH09cXSgAgqZj+fA=
Subject key identifier:   F6:48:BD:DA:A4:D0:63:C1:79:D5:8C:B9:68:5C:48:E5:7E:1A:E5:76
Certificate issuer:       /CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6
Certificate serial:       5EF01C4E12DF03B200FD2B714DA3550FD7708772
Authority key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa
Signing time:             Sun 03 May 2026 02:31:52 +0000
ROA not before:           Sun 03 May 2026 02:26:52 +0000
ROA not after:            Sun 02 May 2027 02:31:52 +0000
asID:                     141064
IP address blocks:        103.155.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl
                          rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f0:1c:4e:12:df:03:b2:00:fd:2b:71:4d:a3:55:0f:d7:70:87:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6
        Validity
            Not Before: May  3 02:26:52 2026 GMT
            Not After : May  2 02:31:52 2027 GMT
        Subject: CN=F648BDDAA4D063C179D58CB9685C48E57E1AE576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:94:51:25:df:3d:7d:c3:cb:35:45:9d:ec:
                    dc:f7:0c:6f:0d:9a:88:c3:ed:dc:85:53:e2:df:d1:
                    e5:0f:38:7f:f6:43:a7:f1:b5:43:a6:b9:aa:05:99:
                    ae:f2:07:ed:87:fc:a7:98:73:21:a1:54:8a:c0:33:
                    cb:c5:10:a7:06:b6:52:18:5c:ec:46:03:53:b5:93:
                    ea:b5:be:cd:dc:ca:ab:54:5a:d8:b6:69:24:5d:cc:
                    5b:87:03:2d:a2:50:00:1a:87:9a:6f:49:85:66:64:
                    32:72:4c:a2:aa:04:31:28:4a:89:17:b0:8f:2d:9c:
                    ce:bc:10:4b:73:7c:7f:54:90:13:d9:6e:b9:b5:fe:
                    0f:8c:10:cd:bd:7c:9c:02:51:1b:8f:62:22:fc:ed:
                    d9:73:73:65:41:d5:78:f9:10:f5:1f:53:56:7d:6f:
                    79:78:14:96:3d:db:b5:5c:ae:b8:f5:60:17:d5:be:
                    a6:18:8f:79:d2:bb:bd:8d:48:10:7d:05:97:d4:5b:
                    da:1c:23:84:45:6c:c3:1d:63:07:57:44:00:f0:32:
                    54:0b:2d:f3:80:ab:6f:6c:e4:ad:21:62:83:32:a3:
                    79:08:c4:6a:28:78:a7:85:99:6c:2a:35:8f:42:22:
                    eb:93:eb:f9:c1:f2:1f:0d:e9:ba:98:e6:f5:5f:5d:
                    90:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:48:BD:DA:A4:D0:63:C1:79:D5:8C:B9:68:5C:48:E5:7E:1A:E5:76
            X509v3 Authority Key Identifier:
                keyid:02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:e7:b7:38:94:63:ab:b0:fd:6d:39:8f:7c:8a:1e:26:f9:65:
         e3:b9:31:01:4c:e1:7e:42:44:e8:fc:6c:ea:3c:d1:6b:77:b4:
         7b:57:ea:92:55:cc:7e:66:25:40:fe:92:fa:4c:e2:a0:aa:d2:
         41:d4:04:2c:77:a4:aa:e8:de:d9:63:eb:72:32:75:fa:16:36:
         0f:b5:b9:66:4e:8f:cd:cf:bc:72:e1:c8:b2:84:31:bd:f0:b1:
         7b:81:98:5f:46:ba:d3:5e:38:41:21:74:c5:f0:71:20:82:24:
         a2:20:52:72:11:54:86:08:3f:d5:8d:d3:ff:10:51:c2:8e:06:
         33:44:2e:9e:8e:67:e8:85:22:d9:61:19:60:18:43:87:82:dd:
         31:01:34:2e:e8:85:d3:b5:c7:ad:23:1a:e9:22:0e:c1:f0:3f:
         67:da:8b:14:81:41:a8:c1:4f:5c:80:2d:88:cd:8a:de:8a:c1:
         65:ac:11:09:b0:9d:a9:25:f9:4d:4f:36:cb:21:bf:12:98:51:
         fa:23:df:23:49:47:9c:8c:51:f9:d6:a2:09:77:f5:81:cb:f0:
         06:3b:63:f0:1e:d4:59:f6:44:d2:92:cf:a7:35:6e:70:52:c2:
         0d:2e:1c:be:7a:a3:1e:39:9a:97:ab:00:45:94:8d:e0:e0:97:
         b1:0c:90:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:17 2026 by rpki-client