Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa
File:                     3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (raw, json)
Hash identifier:          pSVzT2vio9bf7LUyfGmLirM4hVE1PKigRBwf0BFNg8U=
Subject key identifier:   F2:91:3D:99:BF:43:4C:2C:BD:78:BF:4D:69:15:3F:64:4C:5A:E1:77
Certificate issuer:       /CN=C7CDFA6BC067C7A495919AAD0E26180B86353954
Certificate serial:       285C5ADB1891AF29042E431E61520CFA12D13C2A
Authority key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa
Signing time:             Sun 03 May 2026 02:41:30 +0000
ROA not before:           Sun 03 May 2026 02:36:30 +0000
ROA not after:            Sun 02 May 2027 02:41:30 +0000
asID:                     141606
IP address blocks:        103.160.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl
                          rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5c:5a:db:18:91:af:29:04:2e:43:1e:61:52:0c:fa:12:d1:3c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954
        Validity
            Not Before: May  3 02:36:30 2026 GMT
            Not After : May  2 02:41:30 2027 GMT
        Subject: CN=F2913D99BF434C2CBD78BF4D69153F644C5AE177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d4:92:7d:32:e5:7c:c0:9f:d3:c1:c0:0a:6d:
                    1d:02:20:70:b3:ed:af:09:94:43:ef:3a:b0:40:b3:
                    ce:30:a5:e6:f7:50:f5:4e:8b:ab:96:e2:1a:96:03:
                    40:11:4d:7c:6c:b6:c8:d4:61:b4:6f:c8:b7:4d:97:
                    66:12:ed:d5:ae:84:a4:4c:ca:3b:17:04:54:9c:87:
                    24:d2:23:32:46:7d:88:9a:a5:5f:82:95:27:9b:33:
                    c8:33:ec:09:0b:82:d3:0c:e8:da:17:68:29:6a:a9:
                    6a:49:a4:05:e6:32:da:ba:b2:5c:8e:9a:fc:fa:dd:
                    ee:98:5c:96:9b:c0:83:39:b2:dc:5c:5c:b0:3d:db:
                    80:6a:f9:59:61:c6:81:b3:48:4d:7d:86:4f:8e:50:
                    d3:c7:bf:be:a8:b6:c7:33:cf:91:14:33:a0:cf:8d:
                    63:c8:5d:da:45:70:c5:23:99:22:ed:d4:7f:e8:1a:
                    02:b4:a4:9e:70:81:ac:1f:bc:b2:b5:02:cd:e9:83:
                    56:3d:b2:3b:73:a2:39:7b:a7:c9:d8:55:87:02:97:
                    e3:e5:f4:f7:c9:12:2d:66:76:a3:24:5b:7d:5b:c4:
                    02:3d:1b:86:d5:bf:99:a1:80:66:4d:32:8a:fa:e2:
                    72:15:d1:19:c7:99:37:58:ee:4b:84:9b:17:e1:1b:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:91:3D:99:BF:43:4C:2C:BD:78:BF:4D:69:15:3F:64:4C:5A:E1:77
            X509v3 Authority Key Identifier:
                keyid:C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:12:3a:b6:ee:06:c1:80:b4:52:d7:8e:91:e8:14:67:e0:de:
         32:12:49:7e:3a:b5:b1:e7:c7:af:24:69:db:07:1c:c1:01:8a:
         d7:ca:7f:f3:a6:5e:8c:8a:48:dd:8b:55:1d:56:59:93:32:19:
         fe:e9:46:ee:46:13:c4:88:d7:9c:2b:89:be:3d:45:3e:86:b6:
         ce:7c:95:71:88:69:64:23:ef:1d:49:cd:8d:f9:e0:ca:2e:6d:
         e5:97:89:c3:02:72:c1:6a:77:f1:ed:5b:b5:9f:1b:44:e3:0b:
         f7:4c:f4:67:c7:45:d6:2a:25:ca:d4:38:e9:ad:c2:16:ed:65:
         2a:83:5b:f2:33:71:f0:cd:4c:3b:f5:4a:78:11:97:2c:01:f4:
         d8:57:a6:7c:95:f9:80:91:db:bb:9d:d0:f5:23:9e:c8:69:92:
         b7:db:ae:38:49:27:df:e2:1e:8c:d7:5d:60:52:e1:99:fe:b8:
         87:4b:4d:f0:45:99:3a:ef:98:3d:c3:b3:88:bb:c4:38:f9:48:
         91:e2:e9:37:d9:88:2a:0e:a4:b0:a1:bf:7f:40:61:8c:61:44:
         a0:f4:85:08:fe:f0:44:56:64:51:49:e5:4f:83:5a:e8:06:e2:
         95:f0:29:df:8c:bf:e5:a0:03:0e:d2:14:7c:9e:e7:f2:2b:b1:
         e1:0b:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:07 2026 by rpki-client