Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa
File:                     3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (raw, json)
Hash identifier:          fWxyuXffWj1jqvHAsWNRbofSjd5DXyF8+uTLX0AR1zI=
Subject key identifier:   0F:07:2B:DC:EA:54:E0:12:7B:DD:5B:98:E4:B0:26:40:52:EF:07:EC
Certificate issuer:       /CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B
Certificate serial:       619D7028B56A868E00F2DD94C5E41816C046ADC7
Authority key identifier: C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa
Signing time:             Sun 03 May 2026 02:36:22 +0000
ROA not before:           Sun 03 May 2026 02:31:22 +0000
ROA not after:            Sun 02 May 2027 02:36:22 +0000
asID:                     141616
IP address blocks:        103.161.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl
                          rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9d:70:28:b5:6a:86:8e:00:f2:dd:94:c5:e4:18:16:c0:46:ad:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B
        Validity
            Not Before: May  3 02:31:22 2026 GMT
            Not After : May  2 02:36:22 2027 GMT
        Subject: CN=0F072BDCEA54E0127BDD5B98E4B0264052EF07EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:a3:55:80:e5:f4:eb:9d:22:8d:20:db:c8:
                    ae:b7:0f:85:ba:54:fa:4f:fc:b9:33:3e:bd:6f:cd:
                    8f:94:a2:d6:fd:0d:59:65:2d:99:9a:cc:cc:15:23:
                    0f:8b:3b:ae:c6:dc:cd:af:38:a8:ac:6b:10:f2:38:
                    ef:c5:15:9a:83:8f:1d:18:2e:cd:82:59:c2:16:6a:
                    77:38:cc:44:65:01:b1:2b:be:86:aa:19:51:a1:44:
                    a5:16:bf:32:45:3e:a8:80:8d:a3:b5:78:01:16:f6:
                    fe:9e:20:95:b4:d2:c2:8c:46:45:93:15:dc:89:f5:
                    54:20:5a:39:1c:aa:c1:d8:a5:f1:47:8e:05:c3:be:
                    6d:cd:e3:26:74:dd:f2:eb:79:40:09:c2:fd:03:fd:
                    0b:d4:c1:4c:29:4d:6a:5c:f0:c7:16:95:3f:1c:f1:
                    12:a7:13:1c:fc:07:2f:32:8e:06:7a:50:5d:9e:47:
                    43:43:cc:bf:29:63:b8:30:1d:aa:5f:15:60:ac:c2:
                    3f:ac:f6:e1:7f:43:db:5a:9a:22:f5:35:6c:bd:77:
                    eb:1f:17:69:c7:bf:08:86:e1:a4:c9:aa:79:7f:b5:
                    ce:1c:d9:24:16:3e:e3:b4:08:a6:3a:68:31:75:3e:
                    74:f2:57:53:21:bb:84:7a:69:d2:93:bb:fa:b6:ea:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:07:2B:DC:EA:54:E0:12:7B:DD:5B:98:E4:B0:26:40:52:EF:07:EC
            X509v3 Authority Key Identifier:
                keyid:C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:6e:c7:e2:03:c4:ea:d6:05:f9:48:57:42:f3:c5:18:de:
         6c:bc:dd:0d:4c:48:c7:5c:f5:5b:34:b4:dd:54:db:9c:45:fc:
         b4:da:94:94:cc:95:a1:34:cd:25:5e:a3:76:d9:b1:6c:3d:12:
         3f:e5:66:c8:c7:97:50:53:72:7b:cd:cf:a0:1e:73:90:ae:e3:
         82:fc:07:fa:f5:0a:27:4b:67:80:cd:72:30:13:dc:89:b5:aa:
         d3:43:cd:2a:5c:19:7b:3a:c3:03:e8:1c:7a:7a:42:3d:2e:e3:
         ef:6f:83:bd:3c:d4:1e:81:d1:35:f4:12:cc:72:d1:c6:fb:44:
         68:26:38:d3:1a:db:5e:23:3a:ca:29:5a:0a:cd:40:8d:70:54:
         21:ba:7b:64:10:d6:c6:d5:ed:9d:f6:dc:f4:34:30:50:47:3e:
         f5:83:36:2d:b6:7b:32:b3:6e:45:b1:71:5f:5b:d6:0a:95:92:
         55:6c:63:e3:f2:76:79:bf:f1:c7:e6:52:ae:5c:1d:f9:65:df:
         99:7c:95:87:e7:30:19:d3:2c:5d:f8:8c:2b:eb:da:51:e6:37:
         df:ee:19:12:88:a8:82:d2:44:25:2b:00:ef:72:e7:77:7c:b2:
         43:16:78:24:1c:29:d0:13:4c:b0:04:ef:7b:d9:12:11:60:19:
         f1:e1:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:06 2026 by rpki-client