Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa
File:                     3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa (raw, json)
Hash identifier:          zZxXDi8iy3KS/uupWW0nVAXq3kN53K+3nF+iOYvJuas=
Subject key identifier:   EF:42:1D:6D:68:8E:1E:18:B6:C8:15:F5:4C:B5:0E:04:A6:BB:0F:82
Certificate issuer:       /CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8
Certificate serial:       34BE4E84D7263EA34EB088F6801F88FBBDC60B35
Authority key identifier: E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa
Signing time:             Sun 03 May 2026 02:48:13 +0000
ROA not before:           Sun 03 May 2026 02:43:13 +0000
ROA not after:            Sun 02 May 2027 02:48:13 +0000
asID:                     141969
IP address blocks:        103.166.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl
                          rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:be:4e:84:d7:26:3e:a3:4e:b0:88:f6:80:1f:88:fb:bd:c6:0b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8
        Validity
            Not Before: May  3 02:43:13 2026 GMT
            Not After : May  2 02:48:13 2027 GMT
        Subject: CN=EF421D6D688E1E18B6C815F54CB50E04A6BB0F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:52:1b:11:a4:3d:08:5d:a1:43:f3:05:4e:
                    7e:75:ad:2d:6e:1b:e8:56:32:2d:0f:1f:bc:22:93:
                    c0:9e:7a:c4:01:99:ad:30:a7:0e:c8:28:60:08:be:
                    e6:35:77:c9:25:96:72:86:5f:80:1e:4b:3b:cb:c2:
                    3c:12:69:f5:87:f7:ba:50:27:6d:40:1d:1a:75:f4:
                    14:db:4d:eb:d9:66:71:43:83:15:8b:7a:4b:3b:c0:
                    b3:c5:fd:98:91:51:f7:1b:3a:f5:64:e4:9c:11:d7:
                    1e:6a:60:19:14:44:c0:32:a0:2c:f9:dd:fc:b2:b5:
                    aa:37:32:ac:18:ab:6d:52:30:5c:6f:e3:67:4e:64:
                    61:f7:4b:f4:82:89:90:26:d9:3c:1c:07:e0:fa:e9:
                    e0:e5:a3:55:cf:73:c4:42:b3:94:bf:ae:1a:57:ab:
                    19:36:d1:45:50:f6:ce:53:62:f3:26:1c:33:7d:bc:
                    ab:62:9c:c0:c1:64:5a:68:e0:a0:cc:00:7c:6b:ec:
                    45:26:20:b0:28:7a:55:42:de:cf:f0:92:7c:6b:52:
                    10:3b:66:67:42:e4:f2:c9:07:8b:e8:8a:d2:8c:f2:
                    20:1c:92:96:14:f9:01:ac:b1:f2:28:cd:bc:f2:fa:
                    0a:63:fc:31:d0:6b:df:13:06:63:66:7c:24:98:da:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:42:1D:6D:68:8E:1E:18:B6:C8:15:F5:4C:B5:0E:04:A6:BB:0F:82
            X509v3 Authority Key Identifier:
                keyid:E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:d3:81:8b:91:35:1a:a2:19:7d:e4:5f:67:01:e5:8d:a9:
         56:f9:a4:9c:04:2c:7b:ea:1e:74:63:5b:37:dc:75:69:ba:c4:
         cd:e0:e9:2e:27:85:68:3f:8a:e6:01:71:e8:96:bd:fe:03:ba:
         08:53:d7:73:cd:03:67:d4:1c:74:30:51:14:83:e9:8c:cc:3c:
         f3:5d:4c:c6:36:e7:1e:2c:22:45:b3:da:d5:53:c2:2e:e8:ad:
         24:62:29:76:99:ce:b2:4c:0a:9f:85:89:0d:ef:94:82:82:a6:
         64:83:c9:c5:3c:6d:76:76:1b:ca:44:71:fe:0c:9a:f4:d9:27:
         28:c3:5e:9f:d3:8f:ed:02:96:3d:7f:1b:98:7e:e4:c3:17:e4:
         21:d6:5b:00:46:3f:eb:b5:e7:7d:52:36:33:f8:8c:c0:d4:59:
         ae:cb:15:cc:41:d5:39:32:07:e2:2a:c6:0a:78:ab:3d:e1:e9:
         8b:b6:c8:8e:67:64:8f:4a:0c:b1:e7:3d:fc:93:ff:f0:69:e2:
         37:7d:c3:86:89:c6:02:43:19:1f:90:8a:69:9f:75:e1:c6:9f:
         e7:91:3f:b2:b1:32:74:0e:97:4f:92:62:35:44:13:d4:96:b4:
         40:92:00:bb:6d:d6:c2:60:a2:4d:7c:e4:fb:0d:c1:09:a3:10:
         48:1b:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:02 2026 by rpki-client