Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa
File:                     3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (raw, json)
Hash identifier:          qWv000ASHZPLikMYj8Wss1d2EPIqC0119NVLho36do8=
Subject key identifier:   4E:A7:37:42:B9:B6:6C:55:EA:40:0F:B1:61:31:65:69:3E:FE:36:DC
Certificate issuer:       /CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA
Certificate serial:       17FA222542BAC9321D0BC068D1DB84F071A48909
Authority key identifier: C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa
Signing time:             Sun 03 May 2026 02:43:33 +0000
ROA not before:           Sun 03 May 2026 02:38:33 +0000
ROA not after:            Sun 02 May 2027 02:43:33 +0000
asID:                     141984
IP address blocks:        103.167.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl
                          rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fa:22:25:42:ba:c9:32:1d:0b:c0:68:d1:db:84:f0:71:a4:89:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA
        Validity
            Not Before: May  3 02:38:33 2026 GMT
            Not After : May  2 02:43:33 2027 GMT
        Subject: CN=4EA73742B9B66C55EA400FB1613165693EFE36DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:5e:65:74:0c:80:17:4b:f5:bc:1b:08:88:
                    2e:89:49:96:dd:36:92:f6:dd:a1:ed:36:df:28:2f:
                    21:5b:22:af:77:04:e2:c9:bd:2f:df:62:c9:bb:18:
                    49:43:4b:c5:b1:5b:36:13:b6:b4:ad:72:6a:e5:3f:
                    cb:f8:3c:af:f3:6e:4e:1a:4b:00:9e:d8:8e:e9:34:
                    42:e3:df:3a:20:f0:fd:6d:68:79:77:97:4a:32:a2:
                    50:cd:9f:ba:c1:66:79:af:09:0d:c2:8f:84:09:55:
                    26:63:72:06:4a:86:a5:aa:f0:51:d4:f2:bd:75:72:
                    a0:07:3e:b0:01:57:39:51:be:40:97:83:02:a0:e2:
                    00:7d:42:c5:39:e6:85:c0:44:51:6c:5c:88:fb:b1:
                    6b:75:8e:75:2d:c1:b5:24:a9:d5:21:86:c9:5f:78:
                    95:2a:c9:3a:51:36:8d:34:9c:2a:ee:80:10:1a:42:
                    b8:0c:b1:91:fe:e2:e8:87:20:93:32:88:0f:d9:96:
                    b2:93:c2:ee:6b:0a:b0:75:94:55:cc:f1:39:58:55:
                    d4:ee:6b:cb:77:3a:0e:e1:59:6f:4a:e4:22:cb:ef:
                    12:cd:33:54:f2:9b:22:07:be:f6:22:eb:68:6a:77:
                    8e:d9:75:12:f5:75:7e:f0:0a:0e:ac:2b:7d:6f:0e:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A7:37:42:B9:B6:6C:55:EA:40:0F:B1:61:31:65:69:3E:FE:36:DC
            X509v3 Authority Key Identifier:
                keyid:C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:79:2b:d0:a3:ab:91:51:25:5c:19:d6:57:b0:00:02:cb:c7:
         42:6f:5b:6c:c4:82:1b:67:51:5b:a7:8f:45:2a:62:d1:63:61:
         87:b5:4a:1d:ac:fe:49:42:01:cf:65:e7:70:06:bf:26:fa:03:
         b8:f2:d1:75:5e:5e:6c:19:e4:55:f6:b4:96:eb:36:a4:49:fc:
         a8:86:86:8f:59:72:1a:22:54:45:c7:8c:ce:47:d0:c9:62:f1:
         f0:f4:35:9e:97:9d:0d:09:7e:8a:69:c1:63:73:75:60:01:44:
         96:cd:b8:3c:25:6b:fc:73:8e:06:1b:c8:c8:52:82:9b:3e:99:
         99:38:8f:dd:8a:43:57:2a:2f:f7:d1:87:ff:2e:b7:b5:18:69:
         ba:f9:28:82:86:73:7f:ae:b9:b9:36:3e:89:26:65:89:ce:eb:
         66:0b:76:99:11:45:e2:48:a7:c0:0c:5a:66:52:2e:e7:af:ed:
         16:0b:cd:23:c4:02:44:69:7d:5a:9c:fa:d5:8d:ef:9f:5c:02:
         e0:b0:de:4a:91:c4:ba:c9:43:76:72:1e:38:65:00:3a:85:7c:
         06:4b:3a:8d:b0:e7:b9:19:fe:51:91:05:21:b4:cc:c7:d4:7b:
         3a:ed:45:cc:a8:b2:f7:c8:16:6c:27:48:a6:ad:d7:34:ab:1a:
         d2:75:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:38 2026 by rpki-client