Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          EhNVRNwBN9rmTh1XBPBt7PuHkNC/TzJTTCRJrkNcKrw=
Subject key identifier:   FE:A1:EB:93:69:77:D3:C5:D1:AB:CF:9E:46:9C:BF:70:76:AC:7D:70
Certificate issuer:       /CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05
Certificate serial:       1EDBF064727C0061867DFD88BBE9503C4C2F8E01
Authority key identifier: E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa
Signing time:             Sun 03 May 2026 02:40:58 +0000
ROA not before:           Sun 03 May 2026 02:35:58 +0000
ROA not after:            Sun 02 May 2027 02:40:58 +0000
asID:                     140389
IP address blocks:        103.160.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl
                          rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:db:f0:64:72:7c:00:61:86:7d:fd:88:bb:e9:50:3c:4c:2f:8e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05
        Validity
            Not Before: May  3 02:35:58 2026 GMT
            Not After : May  2 02:40:58 2027 GMT
        Subject: CN=FEA1EB936977D3C5D1ABCF9E469CBF7076AC7D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:27:09:84:2c:6a:55:7b:e7:e8:d7:cf:74:e9:
                    8b:58:fa:4b:a8:53:91:ed:62:02:c4:3f:63:2d:db:
                    dd:ab:45:97:a2:18:3a:55:1b:68:a2:df:10:0b:43:
                    81:88:f9:11:af:ae:97:e4:91:e0:ad:3d:79:c2:93:
                    74:85:de:60:78:fb:ee:20:18:0a:98:4c:59:26:9c:
                    59:16:ba:33:a3:11:36:76:ca:48:2e:3b:7c:45:40:
                    23:0c:3a:12:69:24:97:5e:7f:c2:f5:7c:79:4c:57:
                    39:19:3d:ce:00:e3:00:b9:e7:14:d4:f9:13:27:a8:
                    f2:df:61:be:ee:ec:f4:f4:f6:2e:66:bc:66:6d:ef:
                    d1:70:bb:06:80:38:22:c9:b7:4f:e7:58:fd:59:bd:
                    13:28:1c:cd:e5:f5:e3:24:95:c8:66:7c:b7:18:81:
                    19:f1:a7:05:f9:b2:f5:b4:07:97:7a:55:d3:11:ee:
                    b0:a4:78:f9:c0:a8:01:ec:94:b8:bf:33:24:ee:23:
                    c3:9d:90:21:f4:17:53:67:5a:78:b5:68:5f:4c:16:
                    ce:f5:6a:b8:50:d3:ca:b4:f3:e9:3c:9c:84:e5:d0:
                    e2:98:84:11:d4:af:a4:8f:85:63:18:1c:51:32:ea:
                    bc:55:2b:a9:d5:78:11:72:3e:ed:b8:a2:3f:25:c5:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A1:EB:93:69:77:D3:C5:D1:AB:CF:9E:46:9C:BF:70:76:AC:7D:70
            X509v3 Authority Key Identifier:
                keyid:E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:2d:04:85:48:3b:12:c0:40:41:bd:7b:af:a9:d1:3e:3c:e8:
         94:1e:4b:77:eb:56:20:ac:77:a2:a8:9d:69:12:35:29:90:80:
         49:13:c4:24:9b:3b:0b:0b:e9:62:1b:fb:11:03:ef:41:cb:52:
         70:ae:b8:90:12:da:bd:d1:63:f0:02:4a:7e:62:73:8a:98:63:
         08:ac:36:85:a2:87:8b:c0:a9:94:fc:13:1a:ba:57:49:b0:61:
         f2:ee:e4:88:55:96:03:67:5f:e3:4f:e4:04:a0:d2:c4:a4:1e:
         e8:4d:4c:fb:bc:b9:8b:8c:10:5e:9a:76:8f:cc:a4:58:d8:23:
         a0:ac:97:6e:5c:37:54:17:58:d5:9e:ed:4e:54:97:f9:04:1e:
         79:3b:c8:99:a6:5d:61:36:3e:2c:bb:9a:48:64:d8:d5:68:e4:
         05:b4:a2:b1:8d:6a:9a:ea:eb:80:02:8b:87:a8:a4:fb:6a:eb:
         3e:c4:9f:bb:1c:67:30:75:8f:ec:be:f5:49:45:2d:8f:4c:b5:
         ea:de:52:9b:1e:0d:d8:1f:af:b3:1e:61:27:05:7a:a7:e5:10:
         67:b1:3c:b1:44:ef:c9:95:ad:45:30:17:a1:b5:69:9a:9e:07:
         c5:50:2f:bd:d9:eb:73:c8:96:b4:80:b6:19:a9:00:af:f4:e5:
         17:0b:c1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:32 2026 by rpki-client