Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa
File:                     3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (raw, json)
Hash identifier:          xKZvI7DoYttGR54Om2vm9eFapdM+/V55V6OhpEXUV68=
Subject key identifier:   D9:68:CB:8C:5B:5E:A9:55:D2:92:B8:F6:BB:CB:CB:7D:FC:24:32:A7
Certificate issuer:       /CN=F4B592783A4D1278733E583FF474D505E715EAEC
Certificate serial:       2338456E3DB9A0B3B1D8A726EC133FF5C67493BF
Authority key identifier: F4:B5:92:78:3A:4D:12:78:73:3E:58:3F:F4:74:D5:05:E7:15:EA:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa
Signing time:             Sun 03 May 2026 02:45:40 +0000
ROA not before:           Sun 03 May 2026 02:40:40 +0000
ROA not after:            Sun 02 May 2027 02:45:40 +0000
asID:                     141985
IP address blocks:        103.167.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.crl
                          rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:38:45:6e:3d:b9:a0:b3:b1:d8:a7:26:ec:13:3f:f5:c6:74:93:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4B592783A4D1278733E583FF474D505E715EAEC
        Validity
            Not Before: May  3 02:40:40 2026 GMT
            Not After : May  2 02:45:40 2027 GMT
        Subject: CN=D968CB8C5B5EA955D292B8F6BBCBCB7DFC2432A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:4b:a1:f8:6c:45:91:19:3b:83:d3:a9:e4:
                    85:10:d3:d6:9d:90:7f:eb:3d:ee:9f:a5:c5:d9:e5:
                    59:24:21:19:d8:ae:15:be:bd:fc:94:77:bc:9f:8f:
                    e3:b0:ff:bc:e5:2f:b6:08:40:7b:90:0c:27:50:9f:
                    e8:14:e0:86:90:d9:dd:51:77:bc:7d:ca:12:95:9b:
                    80:5f:9f:31:e3:ac:c7:f9:53:a6:b6:14:79:ce:ca:
                    b3:a5:70:74:b8:30:a9:64:ef:e1:46:5b:df:6e:38:
                    ff:df:ae:be:6b:be:b0:02:37:1f:19:24:e1:ad:62:
                    2a:dd:e5:af:67:47:b5:46:f2:5d:14:0e:7b:6d:b9:
                    90:60:8e:e8:54:1c:65:66:2c:36:ce:68:e4:97:1f:
                    ad:79:37:a3:b5:83:24:d2:cb:3a:88:04:cd:c9:70:
                    db:0a:c2:25:58:98:eb:bf:9c:0c:ff:c0:45:66:d3:
                    b9:3b:b6:6c:90:05:bd:b9:75:9f:97:00:e9:97:6b:
                    91:88:e1:28:b5:64:47:4d:ae:5a:ec:b8:ce:fb:5d:
                    22:f3:32:27:27:fb:d1:76:a8:81:42:7b:dd:a4:63:
                    53:b0:d9:cc:66:a9:8c:c8:ea:b9:36:f8:5c:c2:d4:
                    fe:7f:76:e2:3a:4f:d2:c9:59:f7:92:1f:02:34:b5:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:68:CB:8C:5B:5E:A9:55:D2:92:B8:F6:BB:CB:CB:7D:FC:24:32:A7
            X509v3 Authority Key Identifier:
                keyid:F4:B5:92:78:3A:4D:12:78:73:3E:58:3F:F4:74:D5:05:E7:15:EA:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:38:0d:65:99:91:27:fd:1c:7e:14:b3:0e:c9:b3:56:af:dc:
         4f:84:e6:86:8a:ef:54:e7:fb:16:ce:f9:46:4b:c4:c5:c0:92:
         1f:35:f7:04:41:d4:49:3a:47:a9:61:47:a9:85:a8:53:14:60:
         ac:f6:1a:86:de:a2:c9:14:a1:6d:16:6d:bb:5c:28:40:a0:58:
         72:cc:65:e7:6b:1c:b1:8d:b7:e4:a4:42:5d:0c:2e:c4:9e:de:
         18:19:54:4d:45:e6:17:f5:c8:88:0e:e7:37:83:26:45:a5:95:
         1c:24:ec:f3:50:a0:94:88:dd:21:97:48:0e:00:4d:96:c6:35:
         8f:5a:91:b8:79:1b:05:fb:e4:e1:24:ee:eb:f1:ad:f4:26:32:
         91:bb:d9:0d:ca:2c:d3:5b:f0:e6:22:ab:15:a1:b2:2f:11:92:
         1c:c9:f5:aa:e9:d4:dc:1d:12:c0:02:89:27:5a:b6:43:ec:b9:
         4c:ea:2b:54:39:d5:5a:65:42:bb:f8:19:14:59:ee:1a:b0:4d:
         ac:c5:67:94:5f:2f:10:36:98:49:7f:44:6b:ba:a7:69:78:9b:
         60:c6:0e:c7:15:8b:08:42:c0:16:78:09:dd:89:d1:83:1f:f2:
         0a:63:8c:45:26:e1:ce:db:c3:7e:44:95:f4:cb:0c:69:1e:cd:
         bd:a1:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:14:48 2026 by rpki-client