Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa
File:                     3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (raw, json)
Hash identifier:          45s4cJ7R43K0N6OFbVA9LlP5PkcF712Aofyn3c/ko+0=
Subject key identifier:   09:ED:6F:04:CE:40:53:AC:F4:81:16:C3:81:03:C8:88:3D:E8:BF:BF
Certificate issuer:       /CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA
Certificate serial:       36E92A8D44B9AC4907C507247E2B01172D151ADE
Authority key identifier: C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa
Signing time:             Sun 03 May 2026 02:43:33 +0000
ROA not before:           Sun 03 May 2026 02:38:33 +0000
ROA not after:            Sun 02 May 2027 02:43:33 +0000
asID:                     141984
IP address blocks:        103.167.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl
                          rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e9:2a:8d:44:b9:ac:49:07:c5:07:24:7e:2b:01:17:2d:15:1a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA
        Validity
            Not Before: May  3 02:38:33 2026 GMT
            Not After : May  2 02:43:33 2027 GMT
        Subject: CN=09ED6F04CE4053ACF48116C38103C8883DE8BFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:0c:ec:87:9a:e2:be:4a:bd:37:8d:86:61:
                    a8:11:63:09:50:05:51:9f:4b:55:bb:3c:e8:f0:17:
                    4a:34:6a:5e:ac:db:5e:4a:21:5a:4d:ce:66:6d:22:
                    40:b2:14:06:cc:6e:d8:e4:32:9e:b1:53:92:89:3c:
                    aa:01:0f:77:c0:92:db:bb:13:4b:cc:b0:7e:09:59:
                    f6:5f:fc:33:39:61:82:f8:58:29:de:3d:04:84:d4:
                    56:71:2f:06:0c:76:ee:34:2d:f0:4d:3a:48:0d:79:
                    cb:bc:e3:78:e4:8e:7e:52:9d:37:ad:9d:37:ab:9b:
                    c3:ee:a9:f2:5d:e5:99:05:36:65:18:14:3e:ef:64:
                    fc:17:47:85:bb:73:a6:9d:cd:6b:6b:fc:73:ce:0d:
                    5c:e7:3a:69:37:02:96:65:ff:f4:b7:d4:ba:9e:7d:
                    70:08:6d:7c:7b:55:ab:79:e6:5c:90:a2:4a:97:b1:
                    04:0d:7f:89:d0:62:c9:ca:92:24:9c:45:a6:5b:7a:
                    2c:a4:d9:70:a8:14:6b:c7:50:3b:5c:22:81:54:6e:
                    6f:bc:5f:2c:69:3f:a5:cb:c2:ee:08:fd:af:a7:36:
                    aa:b7:e3:a6:6e:de:5a:fe:be:98:76:2e:55:46:52:
                    f4:e0:c9:48:6e:33:29:6d:f1:bb:6c:84:7c:1b:f2:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:ED:6F:04:CE:40:53:AC:F4:81:16:C3:81:03:C8:88:3D:E8:BF:BF
            X509v3 Authority Key Identifier:
                keyid:C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:9b:ea:71:6c:8b:4c:b1:06:c9:76:7e:19:c1:a0:ca:9e:57:
         5c:01:42:de:97:ab:13:e0:95:81:ed:ca:b2:d4:26:ae:a2:80:
         aa:4b:82:be:13:d7:00:2d:b7:ed:76:46:5f:09:76:0e:7f:de:
         72:50:04:a1:b7:4b:8d:ac:51:ca:94:1a:48:2d:5f:3c:7c:42:
         15:24:10:a8:89:c6:78:4c:b7:20:08:71:21:6c:2e:62:33:4b:
         b1:c3:80:d2:44:1d:d7:d5:b5:b1:68:66:7d:8e:ca:ff:6a:eb:
         1e:a5:7d:ab:ee:12:cc:aa:c3:06:dc:ef:15:15:72:cb:d6:5f:
         50:4b:f4:95:fe:47:4f:d4:38:cf:24:5f:85:5c:7c:a0:2c:98:
         07:ae:42:7a:ab:01:a4:fe:15:d3:c3:3a:e0:70:1d:78:32:3c:
         15:13:6b:57:7e:c7:10:d6:3f:d1:0a:ae:f5:ea:84:e8:c3:8a:
         04:d8:a4:a7:df:a6:b3:ca:ac:0f:cd:27:06:63:35:ef:99:bd:
         c4:2e:6e:9b:db:2c:bd:a8:dd:ad:28:ff:18:bf:f5:23:fa:df:
         9e:69:ee:5f:34:b4:1a:e2:46:75:0f:82:f6:18:77:94:e7:32:
         8f:4f:f5:42:85:ed:a8:79:9e:38:e4:38:3d:ff:32:72:ae:c3:
         1d:b1:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:49 2026 by rpki-client