Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa
File:                     3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (raw, json)
Hash identifier:          FJISYiehb+isZLmdCEovtMtqPbmkmTJQ7IEYdacbi0g=
Subject key identifier:   0B:EF:AD:23:23:2E:AC:0C:9C:7D:55:20:0B:EA:FF:88:42:A9:1C:BE
Certificate issuer:       /CN=C1107160ED19380A2A35934230DDBD4EBFCD6BB6
Certificate serial:       180ABD5EB6B497EC7D5D8198266CFC0F97486CE7
Authority key identifier: C1:10:71:60:ED:19:38:0A:2A:35:93:42:30:DD:BD:4E:BF:CD:6B:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa
Signing time:             Sun 03 May 2026 02:47:19 +0000
ROA not before:           Sun 03 May 2026 02:42:19 +0000
ROA not after:            Sun 02 May 2027 02:47:19 +0000
asID:                     142368
IP address blocks:        103.170.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl
                          rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0a:bd:5e:b6:b4:97:ec:7d:5d:81:98:26:6c:fc:0f:97:48:6c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1107160ED19380A2A35934230DDBD4EBFCD6BB6
        Validity
            Not Before: May  3 02:42:19 2026 GMT
            Not After : May  2 02:47:19 2027 GMT
        Subject: CN=0BEFAD23232EAC0C9C7D55200BEAFF8842A91CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:b4:f1:1a:6d:e1:f4:ab:1b:cd:d0:fa:0f:
                    d4:ba:3e:7a:16:97:85:87:80:69:00:5a:29:42:92:
                    b8:41:28:09:4d:10:85:38:73:13:71:58:03:6c:38:
                    f3:eb:3a:f0:4d:b8:a5:56:fb:e7:46:3a:58:ff:b9:
                    14:68:e6:ce:e4:85:4a:e8:5d:ed:2d:66:fd:68:65:
                    35:68:ac:4e:5b:9b:e3:b2:64:48:78:4e:bc:b5:c1:
                    0b:96:db:d7:5c:8b:90:32:6a:f2:a2:2e:79:ec:d5:
                    d0:6e:6a:45:bd:86:e2:8b:cc:02:e7:91:6e:12:df:
                    ff:2a:be:9d:ff:f0:88:15:4b:37:d8:2e:ea:1f:b5:
                    1c:77:1c:1b:9f:99:14:94:dd:f5:cf:c7:75:d8:80:
                    ae:61:60:0b:c4:05:68:f9:f9:25:e8:5b:20:29:56:
                    70:9a:9d:b0:99:24:e0:13:f4:e6:1a:ed:8f:2b:38:
                    94:89:48:8b:5d:f5:25:a5:1e:c9:7e:e1:be:af:63:
                    36:1c:84:f7:f9:42:15:c7:ae:8c:3b:74:a7:45:4f:
                    0b:88:71:b6:cb:d0:f2:37:5c:56:d4:cf:19:c3:11:
                    fd:e1:69:55:86:6d:8e:7d:fc:d3:fd:25:d0:19:e4:
                    1d:06:9c:e5:16:20:bc:d4:5e:d5:5a:d0:97:db:31:
                    4f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EF:AD:23:23:2E:AC:0C:9C:7D:55:20:0B:EA:FF:88:42:A9:1C:BE
            X509v3 Authority Key Identifier:
                keyid:C1:10:71:60:ED:19:38:0A:2A:35:93:42:30:DD:BD:4E:BF:CD:6B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:c3:87:bf:b0:f9:09:5f:1c:94:7f:65:ce:8c:5a:9f:4d:
         41:09:df:4b:47:2a:65:b2:03:dc:9e:21:3d:cf:33:f7:50:ca:
         66:7e:a0:89:99:a8:4e:ed:df:88:11:e9:dc:39:5f:e2:e0:26:
         2e:f3:17:4a:b3:29:79:c3:c1:66:14:cd:6b:57:af:1e:2e:99:
         db:eb:fb:56:d1:82:88:86:3b:3c:4a:07:8e:ee:72:30:64:fe:
         33:bd:ef:e6:aa:e8:97:f4:c7:cd:51:04:6c:55:94:09:8e:1b:
         30:db:d2:cb:ce:00:57:bc:7e:dd:b4:1e:40:f5:5e:38:a2:46:
         ae:7d:b5:3f:53:94:84:df:bb:bf:e4:ad:a0:25:8e:5f:74:fc:
         63:fa:36:03:4f:09:d8:03:2d:3a:87:ce:3c:c4:d9:11:f0:c8:
         85:0b:5f:a0:6d:1a:5a:3d:85:22:cd:6f:e9:42:83:a7:c4:d8:
         47:eb:2d:d4:55:40:87:52:79:dd:6d:46:38:55:ae:ce:50:3c:
         2f:f8:2d:bd:5d:75:b0:a9:00:10:af:e9:60:c5:e5:cd:9b:42:
         13:fd:14:2c:bc:c6:30:5b:f4:6f:20:bc:71:69:2a:ba:cd:66:
         49:59:47:ba:f8:d9:b1:9a:54:45:59:0e:71:a6:19:6a:c3:88:
         de:46:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:49 2026 by rpki-client