Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa
File:                     3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (raw, json)
Hash identifier:          /5dNawMylgFAUVXMnACcE1jgMAFNneCBr14eai7kMCU=
Subject key identifier:   E9:7A:80:81:A4:E7:B8:F1:59:9A:F5:DD:D2:99:66:BB:3D:A0:51:C8
Certificate issuer:       /CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E
Certificate serial:       614F847B7702221CF40A0EFB32CAC284324AD977
Authority key identifier: 0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa
Signing time:             Sun 03 May 2026 02:45:39 +0000
ROA not before:           Sun 03 May 2026 02:40:39 +0000
ROA not after:            Sun 02 May 2027 02:45:39 +0000
asID:                     131743
IP address blocks:        103.162.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl
                          rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4f:84:7b:77:02:22:1c:f4:0a:0e:fb:32:ca:c2:84:32:4a:d9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E
        Validity
            Not Before: May  3 02:40:39 2026 GMT
            Not After : May  2 02:45:39 2027 GMT
        Subject: CN=E97A8081A4E7B8F1599AF5DDD29966BB3DA051C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:fa:74:99:eb:99:14:d8:0a:fa:3d:79:4b:
                    99:37:d0:53:ce:dc:bd:de:3e:bc:b9:93:c5:7c:5c:
                    cf:a3:6f:6a:c0:0d:30:c1:92:f3:44:c4:01:02:06:
                    2c:53:bd:8e:29:f0:c6:77:d2:21:0b:e6:09:95:70:
                    f3:6d:47:fd:7e:6a:6a:b8:2f:d4:31:32:27:8b:25:
                    f7:e2:58:df:58:b6:e4:43:e8:ff:e5:f2:93:fc:38:
                    35:36:1f:9e:6a:a0:3d:14:c7:92:c6:98:89:95:ee:
                    50:57:3f:a6:2c:ff:c3:52:f0:58:23:a1:90:ac:81:
                    b8:45:6f:8d:82:56:c3:e5:77:25:51:62:42:19:3f:
                    9e:29:90:b1:4e:46:87:3c:ba:0b:a3:ff:6c:0f:bc:
                    ad:d7:49:08:1a:7b:82:78:bb:50:60:ac:a5:37:b2:
                    db:b5:b2:f8:b3:8c:0f:ac:77:29:b7:23:20:25:5e:
                    af:db:58:e9:49:78:35:94:12:bf:1a:c7:29:93:92:
                    46:30:05:35:3a:38:ea:4c:0d:65:6e:f1:57:9d:fd:
                    e7:36:85:cc:6f:03:5e:62:9c:75:f5:81:30:71:6d:
                    29:f4:9b:08:26:a7:23:26:20:63:80:8b:16:30:2c:
                    42:08:42:e4:78:29:9b:bf:90:d1:19:aa:ce:ae:7d:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7A:80:81:A4:E7:B8:F1:59:9A:F5:DD:D2:99:66:BB:3D:A0:51:C8
            X509v3 Authority Key Identifier:
                keyid:0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:02:9b:86:75:ab:2b:27:80:d3:64:2f:18:9a:a2:ef:95:
         ed:8e:8e:dc:f0:b4:99:67:54:13:0d:dc:2d:db:b5:15:9c:68:
         f4:fc:d2:fa:a0:97:af:9f:f4:b5:bc:95:87:6f:6f:0a:43:78:
         25:93:11:2b:1a:11:0f:ec:33:78:f3:62:9a:66:c1:61:e6:61:
         d6:67:bc:cd:20:a7:8c:fe:6c:92:a0:4b:f5:d3:37:89:83:c3:
         19:ad:38:06:20:d6:50:dd:08:06:3d:65:4e:8e:d0:e1:7a:2f:
         fc:c4:51:57:02:08:57:0d:ef:ad:16:df:38:69:44:ee:56:7f:
         61:c4:10:5d:2b:a4:e8:34:8a:a0:1d:94:9f:ea:a9:ca:77:d8:
         5e:ea:f8:28:36:65:66:72:f7:97:76:74:55:da:bf:4d:43:b3:
         66:0d:23:e5:7b:a1:9d:01:6d:9a:8d:df:ce:6e:03:d9:ae:74:
         99:29:af:31:4e:22:9a:91:ae:db:4a:f3:e1:a8:8e:c2:86:db:
         60:0f:05:c5:64:42:1c:84:57:2f:de:c4:ab:fc:49:95:15:e8:
         c4:18:14:df:48:6f:22:50:5c:9f:d7:d4:c5:01:0b:31:b3:38:
         ab:7e:a4:7c:bb:d6:41:cb:5e:48:df:d9:fb:ba:9d:0d:22:e9:
         44:19:db:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:46 2026 by rpki-client