Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa
File:                     3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (raw, json)
Hash identifier:          uLmIeQ2k8rCrLaWqYXUCyu46HdG2z+aP2gfmGAZojFg=
Subject key identifier:   C7:A2:49:9B:8F:D1:B7:59:EF:84:98:09:60:ED:D9:85:93:D4:CB:74
Certificate issuer:       /CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D
Certificate serial:       0C223E1AA2C52B2F0653146FF2B99BCE48CADD0C
Authority key identifier: CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa
Signing time:             Sun 03 May 2026 02:40:53 +0000
ROA not before:           Sun 03 May 2026 02:35:53 +0000
ROA not after:            Sun 02 May 2027 02:40:53 +0000
asID:                     141952
IP address blocks:        103.166.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl
                          rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:22:3e:1a:a2:c5:2b:2f:06:53:14:6f:f2:b9:9b:ce:48:ca:dd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D
        Validity
            Not Before: May  3 02:35:53 2026 GMT
            Not After : May  2 02:40:53 2027 GMT
        Subject: CN=C7A2499B8FD1B759EF84980960EDD98593D4CB74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:96:2e:c0:03:2b:9c:65:8a:14:2b:1e:c0:
                    e9:c3:73:00:ed:79:ad:e8:9d:f5:3b:b1:f3:4c:47:
                    8e:d6:c8:a2:20:43:ba:f1:a0:e5:e0:c9:18:0e:cc:
                    22:77:95:1e:ef:88:7f:19:13:57:4f:33:ad:34:72:
                    2e:f1:b6:fc:51:46:4a:7f:22:3e:8b:2d:06:84:04:
                    82:b5:c7:b8:9d:44:ba:e5:66:df:2e:95:57:ab:38:
                    bc:1f:75:7d:3f:a0:4d:f9:99:85:e2:92:f2:0c:11:
                    b6:f5:3b:bd:80:1c:6a:6c:d0:67:18:2a:9a:ed:6d:
                    e4:0b:4e:8a:9b:cd:73:0c:0f:99:54:40:88:20:fc:
                    03:da:3d:ed:42:bf:2d:ea:b7:26:3a:9f:4f:74:92:
                    af:e4:51:c6:52:4f:67:c6:f0:17:b3:15:08:a7:95:
                    3b:34:df:4c:c7:35:c0:e3:04:8d:f6:9f:ba:38:4a:
                    c2:d9:a0:fc:aa:71:4c:b0:4d:68:e6:9f:41:46:cc:
                    0b:57:be:b6:30:dc:d4:23:cb:9c:6c:73:27:88:9f:
                    09:03:0f:c5:fb:18:12:7c:72:81:8c:bf:0e:47:70:
                    35:e9:81:a5:cf:f3:04:79:5b:77:15:40:12:38:ca:
                    95:4c:9b:01:44:2a:e2:26:c0:ce:5a:32:58:6b:5a:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A2:49:9B:8F:D1:B7:59:EF:84:98:09:60:ED:D9:85:93:D4:CB:74
            X509v3 Authority Key Identifier:
                keyid:CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c0:41:7d:e4:6c:1a:39:f1:c1:a2:e0:8b:c4:b7:32:71:1d:
         09:4c:d0:33:5a:5c:01:4f:9d:06:23:bf:30:cd:5c:f7:0f:96:
         4d:c1:32:a4:a9:7a:66:e4:7d:bf:f6:72:1b:ae:f2:d5:be:c8:
         10:d2:83:94:8b:2d:87:48:f0:49:ce:6e:73:ea:78:e7:b9:8b:
         4d:18:fe:be:56:e2:65:6c:b8:3d:6a:cb:96:57:be:df:40:f3:
         88:e1:6a:b4:1e:30:17:97:2b:15:b3:4d:b5:65:1f:00:7a:81:
         fa:6a:b5:0e:41:ed:31:b6:5f:10:5f:8b:80:10:83:0c:c6:60:
         a3:22:96:c7:25:f6:be:4a:0d:2f:b6:56:22:a1:a4:82:0b:8b:
         74:51:54:53:47:01:80:90:e3:be:57:9b:d2:13:1b:1e:72:5c:
         3e:01:11:4c:73:cf:eb:e9:11:f2:8a:05:29:05:06:84:0e:d9:
         cd:f2:7e:59:ca:de:68:bd:38:13:26:ba:14:90:37:b3:93:0f:
         ea:87:b2:cd:14:c9:3a:76:e0:6d:e4:31:67:8c:ee:e4:ba:f6:
         16:94:f2:0e:67:1f:9e:2d:1d:89:0a:d0:b7:6b:24:1b:bc:63:
         01:0b:88:4c:a7:16:9c:40:1f:53:93:af:78:a5:27:a9:9d:18:
         68:4c:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:37 2026 by rpki-client