Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          YUN+BY5pcnBVMiCm7rVh9YVL1oMMPlCxBU9cg/9p1D0=
Subject key identifier:   42:34:44:D8:3F:55:43:5C:9B:1D:B2:88:64:2C:76:68:EC:56:9C:65
Certificate issuer:       /CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05
Certificate serial:       74032310C373AFD0B2EC1A168CDFC02A856F5913
Authority key identifier: E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa
Signing time:             Sun 03 May 2026 02:40:58 +0000
ROA not before:           Sun 03 May 2026 02:35:58 +0000
ROA not after:            Sun 02 May 2027 02:40:58 +0000
asID:                     140389
IP address blocks:        103.160.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl
                          rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:03:23:10:c3:73:af:d0:b2:ec:1a:16:8c:df:c0:2a:85:6f:59:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05
        Validity
            Not Before: May  3 02:35:58 2026 GMT
            Not After : May  2 02:40:58 2027 GMT
        Subject: CN=423444D83F55435C9B1DB288642C7668EC569C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:a8:6c:02:f4:d8:70:e2:81:c8:2b:04:ef:
                    cf:37:62:ef:a2:3c:3c:21:ab:ba:80:4d:ba:09:dd:
                    b2:1d:99:34:1b:49:ed:c9:64:42:df:b8:0f:76:35:
                    c1:44:21:9c:af:f9:b6:33:01:6e:e5:95:7d:a4:65:
                    66:ac:8a:de:94:64:0b:ed:2e:de:fa:6a:f6:bb:eb:
                    57:94:00:d1:6e:a4:9b:fd:33:2a:f0:b9:37:71:b4:
                    91:6b:99:c8:9d:e3:5d:ec:eb:0f:06:be:f7:7d:2f:
                    b8:3c:6d:33:b5:00:35:a4:4d:da:31:34:36:31:e8:
                    a9:79:c6:a1:3c:05:26:66:e4:9d:c2:42:66:b2:f9:
                    3d:27:ae:cb:38:a7:c3:a5:83:5e:09:81:ea:d2:63:
                    96:97:95:e6:b1:5f:37:dd:9e:97:49:01:05:b1:fa:
                    f4:10:79:00:cf:7e:d1:75:5b:0b:62:b0:f4:e5:66:
                    1a:59:04:49:47:01:8d:ef:05:3f:fb:5a:ee:29:86:
                    3b:a3:10:ac:36:ea:62:69:4a:77:c2:47:a2:b0:a0:
                    66:9c:c8:e7:83:e9:a9:33:a5:c8:0e:9d:9e:f7:b8:
                    5a:aa:63:93:48:32:94:57:74:41:fb:22:39:61:03:
                    4e:eb:58:10:fc:49:de:50:b8:0d:1c:61:d9:09:97:
                    56:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:34:44:D8:3F:55:43:5C:9B:1D:B2:88:64:2C:76:68:EC:56:9C:65
            X509v3 Authority Key Identifier:
                keyid:E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:92:d0:8f:cb:fc:d7:6e:33:8e:04:ab:cf:97:c0:da:6f:0e:
         26:04:96:ac:3d:bd:03:da:0c:f7:2d:e1:15:ce:d5:ab:d1:83:
         58:7b:ab:57:41:eb:27:d8:13:e2:24:4c:55:b9:7a:08:03:59:
         a6:4d:c1:61:e6:81:a6:67:f5:36:fc:89:a6:10:64:24:92:80:
         e0:21:6b:b6:21:22:84:4f:bc:39:07:16:61:97:87:3a:d3:72:
         68:8b:25:d9:09:2b:df:eb:64:1a:7e:ef:60:6b:9d:cf:b9:72:
         10:e3:79:66:75:60:8a:e8:23:26:ef:71:1a:ed:27:ab:8d:59:
         25:bd:b8:e9:b4:16:ae:2c:fe:57:47:a8:58:44:8c:c7:3c:03:
         3f:8f:1a:b4:31:74:ff:ef:63:44:df:c1:cf:0b:28:58:6e:15:
         42:b9:e9:28:32:6f:8e:36:5f:4b:5c:72:ea:fb:fe:0f:88:81:
         69:6e:e6:de:d7:49:a8:e5:c8:89:4b:77:25:55:1a:b1:94:88:
         67:d4:1b:31:34:30:03:40:4f:42:65:0b:46:3d:9f:b6:a2:5b:
         db:ce:05:e3:26:24:e6:01:80:40:f1:9f:e5:c5:33:e3:da:6d:
         36:4e:96:fe:b0:aa:bc:7e:ed:e1:df:77:e0:ff:92:c4:e2:5a:
         5d:96:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:50 2026 by rpki-client