Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa
File:                     3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (raw, json)
Hash identifier:          yMPJNSkMGIl2UvT1CYNlCKulD32gYlJwLvlyIrBqbfE=
Subject key identifier:   28:72:29:57:7C:93:FA:BE:C3:D2:54:9C:AD:01:05:B0:F6:31:FF:C8
Certificate issuer:       /CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
Certificate serial:       37DBEDD1E1039F8A9CDE7CAA745F4F94A2CFC5AE
Authority key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa
Signing time:             Sun 03 May 2026 02:42:23 +0000
ROA not before:           Sun 03 May 2026 02:37:23 +0000
ROA not after:            Sun 02 May 2027 02:42:23 +0000
asID:                     141065
IP address blocks:        103.155.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl
                          rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:db:ed:d1:e1:03:9f:8a:9c:de:7c:aa:74:5f:4f:94:a2:cf:c5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
        Validity
            Not Before: May  3 02:37:23 2026 GMT
            Not After : May  2 02:42:23 2027 GMT
        Subject: CN=287229577C93FABEC3D2549CAD0105B0F631FFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:75:2e:a2:7d:73:f9:c2:0d:67:48:b1:bb:
                    e2:77:fe:07:c5:21:6a:1a:73:20:e8:07:41:de:f7:
                    f4:21:18:35:5a:79:fb:6d:08:13:35:6c:ee:e4:6e:
                    fb:0d:68:0e:37:9f:6a:57:9c:ea:94:8c:c1:81:12:
                    1d:67:03:57:86:0c:a0:a8:ae:2c:85:26:70:e8:1a:
                    f3:c3:39:0c:9f:2c:32:61:e0:2f:3e:56:13:8e:03:
                    9d:04:bb:3a:59:e8:d4:56:c9:07:da:7c:81:2d:5b:
                    3d:87:e7:d9:53:bf:7a:c9:be:7f:19:53:90:ce:82:
                    aa:1d:27:d5:69:9a:e4:34:cc:94:61:6d:d3:27:f4:
                    8a:e5:d7:62:96:56:d4:4f:36:06:e9:06:5e:62:52:
                    4c:9b:a2:07:1e:8f:9b:1f:bf:bf:e8:3d:9a:47:42:
                    21:86:a9:2d:ed:95:45:06:c9:13:fa:a9:0a:82:83:
                    d2:9f:e2:04:25:48:f2:5d:29:5f:b2:9e:5c:6a:6c:
                    6a:d2:f2:23:d6:e4:ba:05:d1:c5:5c:98:9b:27:9d:
                    1e:8c:60:7e:ac:dc:2f:bf:2b:67:1e:97:05:7d:b0:
                    df:89:16:97:23:f4:df:37:19:88:83:19:c4:f2:07:
                    86:c7:8d:cd:f2:d6:9c:82:a4:1b:8e:11:31:08:69:
                    26:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:72:29:57:7C:93:FA:BE:C3:D2:54:9C:AD:01:05:B0:F6:31:FF:C8
            X509v3 Authority Key Identifier:
                keyid:0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:40:9b:e8:8a:1d:13:a7:56:aa:c6:ca:2c:69:d3:63:46:46:
         09:52:1b:d6:70:94:cc:22:0d:c9:3d:42:d4:d1:b3:f9:91:f8:
         df:c0:7c:fd:da:58:e8:92:ab:97:af:5a:80:04:dc:d8:d1:5c:
         ad:61:9e:a0:d0:27:2f:06:01:d5:3f:05:46:1c:e6:7e:eb:40:
         a3:7b:1a:8f:3c:d3:d8:ca:6c:ae:3d:c8:c1:5b:a4:ab:40:0c:
         c8:b0:27:35:f9:12:7c:a6:d8:93:49:c6:11:f5:2a:4e:50:a9:
         0e:5e:7c:7f:85:75:89:10:69:6a:8f:7b:41:85:78:de:01:c5:
         ac:98:45:35:fa:05:d5:61:1f:39:4f:a4:86:f0:34:ba:09:93:
         78:54:f0:1f:f0:ed:c9:8c:94:f0:bb:69:13:53:f0:10:62:bf:
         91:f8:94:4b:e9:69:e5:3e:a5:29:9f:79:58:75:7a:ce:08:45:
         75:27:95:17:b4:d6:e4:20:99:19:f3:47:79:3d:5b:db:54:ba:
         f2:b3:e8:af:8f:e9:57:d6:cc:77:a5:f2:6d:86:46:d2:55:57:
         f6:3c:ee:6a:6b:46:cc:23:b8:82:08:fd:47:68:fe:7b:3c:d1:
         71:66:db:28:39:56:6a:9f:37:be:e4:ff:ac:d8:76:03:22:07:
         bf:b5:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:35 2026 by rpki-client