Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa
File:                     3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (raw, json)
Hash identifier:          0buGIXn5F8o+JhXrXgmfNJ2sJWtjHLxvA64EOEEpl5Q=
Subject key identifier:   A9:C2:11:67:C3:9E:49:FF:3E:69:B6:25:8B:80:4E:E2:E0:F2:D6:45
Certificate issuer:       /CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
Certificate serial:       4E163E9F4ACA2353638F85B5C79CD22A13C90A12
Authority key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa
Signing time:             Sun 03 May 2026 02:42:22 +0000
ROA not before:           Sun 03 May 2026 02:37:22 +0000
ROA not after:            Sun 02 May 2027 02:42:22 +0000
asID:                     141065
IP address blocks:        103.155.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl
                          rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:16:3e:9f:4a:ca:23:53:63:8f:85:b5:c7:9c:d2:2a:13:c9:0a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
        Validity
            Not Before: May  3 02:37:22 2026 GMT
            Not After : May  2 02:42:22 2027 GMT
        Subject: CN=A9C21167C39E49FF3E69B6258B804EE2E0F2D645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:93:c9:31:11:a5:d7:97:1a:55:c8:1f:b7:
                    a6:fa:13:c2:48:e4:64:fe:21:d3:b1:7d:a1:d7:ae:
                    37:08:c2:cd:b4:fe:b6:3e:b5:75:df:df:50:b0:c6:
                    bc:89:be:1b:44:c0:46:2b:56:74:97:3b:37:ea:08:
                    ff:80:c9:ca:19:f2:20:04:0c:be:df:2b:5c:5e:04:
                    19:d6:ab:16:5f:75:a3:ea:71:eb:55:ab:89:3e:1b:
                    e7:9e:e9:68:70:17:f9:06:e2:d9:48:02:a1:aa:de:
                    e4:44:f3:a6:46:c0:90:e9:08:0d:a7:13:7d:f3:73:
                    13:70:ec:0b:ce:11:91:1d:5b:7d:71:51:a9:ad:4c:
                    8c:93:6a:48:9c:cc:c7:b6:56:88:66:6b:25:69:c7:
                    2b:3a:b3:a5:a7:4f:43:70:b2:c1:65:e4:09:74:50:
                    08:9c:c4:79:bd:63:47:66:de:89:b0:0f:7e:84:cc:
                    ab:9e:99:5b:c5:d3:58:08:11:11:0c:ad:c0:4f:68:
                    ac:dd:da:e4:06:60:0e:80:5b:d8:3f:8a:6d:60:d0:
                    d4:60:3b:74:86:eb:46:cb:4a:5c:1e:a4:8e:93:82:
                    8c:a3:f0:4d:11:cc:3a:ec:3d:d5:ed:92:46:84:1f:
                    5d:c7:3a:60:b1:25:ac:54:12:b3:ad:06:c5:4a:78:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C2:11:67:C3:9E:49:FF:3E:69:B6:25:8B:80:4E:E2:E0:F2:D6:45
            X509v3 Authority Key Identifier:
                keyid:0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:46:a6:5a:f9:d2:34:38:bf:5a:ff:7e:76:63:4d:c8:4a:38:
         40:ff:9f:50:13:00:24:61:10:49:38:05:3e:4f:cc:71:04:d1:
         4e:9f:84:15:a5:84:17:b0:1d:fb:36:b5:83:07:27:2c:ed:68:
         eb:85:fa:1f:72:ac:a6:2e:27:d1:a9:2b:d8:18:d7:34:89:71:
         f0:0c:34:fd:16:8e:05:3f:99:66:56:a9:06:3f:d8:ba:19:f1:
         a3:d5:a9:13:5e:80:08:b1:1d:b5:49:dd:c7:fe:13:26:89:21:
         f3:da:6d:1b:a0:8c:a7:e6:8f:40:74:e6:cc:44:17:fd:27:84:
         81:5f:2b:53:74:11:d2:93:84:2d:40:4f:1b:f8:ef:93:59:55:
         4a:72:ff:82:62:44:74:b8:2f:37:6b:b4:2b:a7:50:05:e2:ea:
         ca:31:81:6a:06:19:56:fb:fd:c9:b1:06:1b:e0:28:17:18:c8:
         93:b8:d2:93:5e:01:d1:6c:f6:f1:81:11:86:96:dd:8d:0d:b3:
         4d:73:3d:60:06:65:83:8a:04:a0:8a:ec:b6:51:96:21:04:f4:
         51:46:5a:fa:cd:51:75:19:71:80:d4:d9:6f:cf:b3:93:97:d9:
         51:11:e0:70:56:93:2d:c5:c4:6f:b5:a1:7a:ad:ba:aa:dc:d0:
         48:a4:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:18:55 2026 by rpki-client