Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa
File:                     3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (raw, json)
Hash identifier:          GSlw3zzCCuqCV+/TWCeBscNvFDaa+2WNBQy+mh6Ibro=
Subject key identifier:   6E:CF:56:4D:F2:B1:EB:06:67:5F:87:1B:00:3F:C8:61:66:C0:1A:0A
Certificate issuer:       /CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4
Certificate serial:       36C5EE35AB7B5E9E6C725F791D24EBF120F3F596
Authority key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa
Signing time:             Sun 03 May 2026 02:44:28 +0000
ROA not before:           Sun 03 May 2026 02:39:28 +0000
ROA not after:            Sun 02 May 2027 02:44:28 +0000
asID:                     141107
IP address blocks:        103.216.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl
                          rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c5:ee:35:ab:7b:5e:9e:6c:72:5f:79:1d:24:eb:f1:20:f3:f5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4
        Validity
            Not Before: May  3 02:39:28 2026 GMT
            Not After : May  2 02:44:28 2027 GMT
        Subject: CN=6ECF564DF2B1EB06675F871B003FC86166C01A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:94:e4:51:37:a4:62:e9:70:60:e2:5b:e4:
                    bd:bb:d6:c4:98:13:3c:e9:9b:c3:f5:a5:a2:20:52:
                    a5:6a:bf:ea:f0:b1:eb:fe:fc:af:fd:de:61:50:e9:
                    93:30:bd:88:0b:07:82:b0:42:56:ac:ff:3f:37:ac:
                    cb:36:14:7e:fa:18:6e:77:fb:fd:cf:8e:2c:be:5d:
                    58:a5:88:28:c3:d6:61:64:9d:23:f4:59:53:d8:5a:
                    91:96:55:bd:3d:98:6e:11:ff:4c:af:f3:e6:eb:17:
                    47:2d:5b:28:9e:f3:9c:b3:1a:b9:55:b6:cf:90:cf:
                    b0:e4:4c:a9:ad:87:e1:47:94:4d:5d:c9:53:85:5e:
                    4b:c0:b4:f6:e0:77:93:ab:78:90:10:84:b8:95:9b:
                    ae:1c:66:c8:bc:cf:36:3d:db:74:3e:5a:1e:c6:2b:
                    c7:e6:db:c9:af:66:89:e5:cb:47:b6:84:3a:44:dc:
                    a5:c0:f4:3f:6b:99:62:ce:08:ab:85:f6:d7:6f:94:
                    3b:b4:a3:dc:8f:ef:86:23:ac:68:4d:a5:a9:62:49:
                    e6:01:e6:2c:00:05:76:15:4b:6b:4b:56:ae:53:6e:
                    5b:52:50:4d:ab:2b:3f:69:5d:50:a5:2b:72:33:cd:
                    09:22:fc:bb:74:d3:a5:24:08:88:fb:95:8e:0b:90:
                    ed:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CF:56:4D:F2:B1:EB:06:67:5F:87:1B:00:3F:C8:61:66:C0:1A:0A
            X509v3 Authority Key Identifier:
                keyid:ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:53:7b:36:ac:ab:b4:1e:14:0a:f0:b6:09:92:ee:92:4f:82:
         89:ea:b3:3a:60:fb:5d:8c:81:a8:40:2e:95:a6:22:1c:8d:3d:
         c5:b4:6e:c4:d9:41:3f:c5:61:34:d1:e2:eb:da:87:f8:0d:b1:
         96:b0:c1:84:37:2f:a1:18:d1:15:6d:86:78:25:bd:e1:17:8e:
         18:c9:df:13:b6:be:d8:9b:41:76:62:89:33:9a:b7:75:98:f6:
         0f:ee:0d:1c:ea:99:17:b0:66:2b:f1:57:44:91:d8:03:7a:40:
         1a:1c:97:81:44:2c:60:8d:90:6b:5d:ce:38:5f:df:76:bb:34:
         24:6b:91:47:2d:09:fd:55:e2:ef:79:02:23:98:84:15:ef:5f:
         f8:63:82:22:28:c9:7a:d3:28:d1:74:1d:67:b2:b8:ab:28:1c:
         6f:d1:c4:b7:62:a7:2d:10:05:55:56:b6:ef:65:d7:13:7b:a7:
         ff:ab:aa:a7:9f:d8:1a:d8:d8:2b:8b:1b:55:6e:ce:52:34:be:
         02:1e:69:eb:d3:03:a9:66:e0:5c:f3:74:aa:77:88:28:03:1f:
         be:1b:78:38:12:53:56:c2:5f:3f:df:3c:2c:99:f1:39:f1:4c:
         08:b2:9b:0b:18:71:c8:f7:18:67:76:c1:39:72:bc:cf:b6:8e:
         c1:16:db:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:27 2026 by rpki-client