Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa
File:                     3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (raw, json)
Hash identifier:          SvetT4fkB5VuEIEYdhmb+OWzFFcY03lt8k6wWYfq9nA=
Subject key identifier:   94:86:28:3D:B3:96:BA:38:CE:71:5D:E0:DE:4E:DD:9C:63:5D:D2:0B
Certificate issuer:       /CN=F4B592783A4D1278733E583FF474D505E715EAEC
Certificate serial:       0B40695BC1FE8C1A0D194F15F93B2BF0C9B69CC2
Authority key identifier: F4:B5:92:78:3A:4D:12:78:73:3E:58:3F:F4:74:D5:05:E7:15:EA:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa
Signing time:             Sun 03 May 2026 02:45:40 +0000
ROA not before:           Sun 03 May 2026 02:40:40 +0000
ROA not after:            Sun 02 May 2027 02:45:40 +0000
asID:                     141985
IP address blocks:        103.167.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.crl
                          rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:40:69:5b:c1:fe:8c:1a:0d:19:4f:15:f9:3b:2b:f0:c9:b6:9c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4B592783A4D1278733E583FF474D505E715EAEC
        Validity
            Not Before: May  3 02:40:40 2026 GMT
            Not After : May  2 02:45:40 2027 GMT
        Subject: CN=9486283DB396BA38CE715DE0DE4EDD9C635DD20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:5b:f5:24:e8:55:ae:54:e3:bb:4d:db:fd:
                    22:d2:b3:94:96:76:c8:b6:b1:93:66:32:f6:57:55:
                    00:1e:d8:2c:9b:8f:88:b0:4b:05:d9:0d:1b:6b:63:
                    9b:85:93:82:18:0e:44:0f:36:66:95:ad:89:77:49:
                    43:47:8c:08:b8:91:6f:df:5b:30:74:7f:00:f1:25:
                    01:e8:13:fb:30:87:2f:2a:bc:61:2c:6d:e8:c5:e5:
                    be:b5:8b:91:46:db:d2:89:7f:a7:df:73:5d:9a:c9:
                    21:8e:85:c7:06:9c:b6:4d:74:6e:8f:d3:5f:a7:19:
                    f2:4e:91:6a:1f:cd:3c:fa:aa:0f:3e:ee:0f:28:97:
                    4a:96:8c:9a:63:ad:d8:10:dc:13:79:c5:27:4b:45:
                    6f:b4:9f:2c:4b:be:da:9c:f4:ff:ff:5f:7e:35:15:
                    73:8f:62:cd:9e:04:f6:e7:cc:dc:e4:50:8a:e2:92:
                    ed:89:d0:f1:94:71:81:ff:d1:e1:29:f2:2f:24:86:
                    04:d8:f8:02:d0:6c:5b:a4:03:e1:d9:50:d3:5d:27:
                    ac:91:a9:ed:b0:9b:57:cc:36:a6:fe:73:7d:a2:54:
                    45:c4:0c:00:f2:dc:68:29:b1:52:29:4f:d1:6b:4f:
                    2c:66:bf:74:c5:88:ca:2f:9f:e9:ae:96:fd:58:ce:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:86:28:3D:B3:96:BA:38:CE:71:5D:E0:DE:4E:DD:9C:63:5D:D2:0B
            X509v3 Authority Key Identifier:
                keyid:F4:B5:92:78:3A:4D:12:78:73:3E:58:3F:F4:74:D5:05:E7:15:EA:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:68:b0:e9:8b:9a:60:73:ba:c3:76:1b:9e:9f:fd:c3:53:32:
         8d:dc:86:89:b1:29:d9:58:8d:f9:63:26:7e:ed:9a:93:87:16:
         46:17:37:99:f2:55:b6:ae:3f:90:59:75:41:e4:72:6b:75:7a:
         eb:2b:a3:51:8c:39:7c:55:37:f6:fb:00:d7:a5:9e:ec:86:f4:
         bb:8c:78:c1:d0:cd:5a:f1:12:f7:0a:61:54:6d:b1:a5:4e:e4:
         b7:25:c8:ed:96:eb:5b:37:98:15:33:15:d9:26:27:c2:7e:d3:
         c1:32:5e:35:6f:09:60:15:00:88:01:97:12:d7:77:9c:f7:f8:
         b7:46:5c:b2:e8:12:45:6f:63:a6:c1:0f:50:de:75:b3:04:8e:
         9a:db:8b:f8:80:7f:db:d4:4f:d2:58:51:24:c6:4b:e2:56:4a:
         ed:e3:3c:61:92:10:55:be:03:42:d0:bd:f1:8c:3e:ab:29:da:
         be:42:18:6b:6d:3a:ec:84:f6:86:f9:6b:d5:61:3e:43:0d:6d:
         c8:e8:82:f8:1f:14:9d:d1:71:83:83:43:1e:be:ce:e1:d9:fc:
         6e:94:63:f5:e8:e0:7a:12:8d:23:5e:5e:df:fb:5c:f3:22:e9:
         b6:17:28:1e:a4:05:4c:93:1a:ff:7f:0c:6d:6f:da:c8:e0:38:
         b2:9d:78:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:39 2026 by rpki-client