Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa
File:                     3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa (raw, json)
Hash identifier:          HkWboPR/l28Qd/gjZFN0EmMYcGZiEVTHPsAa19NTjWI=
Subject key identifier:   DE:C6:3A:30:2E:76:54:C2:46:E2:3D:57:35:A5:AE:9F:4A:17:CC:57
Certificate issuer:       /CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8
Certificate serial:       63462537A28B26E366DF40A877C00FDAAFA568DF
Authority key identifier: E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa
Signing time:             Sun 03 May 2026 02:48:13 +0000
ROA not before:           Sun 03 May 2026 02:43:13 +0000
ROA not after:            Sun 02 May 2027 02:48:13 +0000
asID:                     141969
IP address blocks:        103.166.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl
                          rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:46:25:37:a2:8b:26:e3:66:df:40:a8:77:c0:0f:da:af:a5:68:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8
        Validity
            Not Before: May  3 02:43:13 2026 GMT
            Not After : May  2 02:48:13 2027 GMT
        Subject: CN=DEC63A302E7654C246E23D5735A5AE9F4A17CC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:78:9e:1f:53:57:d7:c6:cc:86:61:b0:52:
                    33:a4:c1:b0:f6:f8:e2:27:c3:07:5b:9d:4c:9b:df:
                    63:7a:b1:38:3a:7b:d0:67:f7:5d:81:0e:6d:1a:69:
                    e2:68:54:fc:77:84:d4:f7:0d:ea:e7:df:d0:e7:db:
                    f4:6e:26:08:e0:90:c8:cd:77:da:45:0c:56:e2:50:
                    8b:75:64:18:9d:b9:a1:33:b5:79:6d:4e:f3:37:5e:
                    14:91:ee:93:a3:1b:01:d3:52:db:f7:b5:c4:ad:eb:
                    9f:42:d3:f8:cb:71:c7:f5:2c:93:f4:26:4e:e5:e0:
                    4a:33:a3:99:f6:a1:b7:71:15:36:62:e2:a4:ba:f9:
                    0d:ec:e4:58:52:da:99:e7:03:05:10:7b:b4:f9:bc:
                    e0:ca:14:65:19:99:38:23:11:99:91:ae:81:61:0e:
                    40:f3:62:a8:8c:62:b3:ba:78:d3:c9:a9:3b:69:8e:
                    12:73:a9:93:28:37:ac:71:47:a4:e8:59:20:21:db:
                    11:ec:8d:31:bd:93:a5:15:40:35:5d:d9:4b:f4:5e:
                    46:0d:c3:c4:22:71:43:4e:43:ba:64:94:c3:26:e3:
                    fd:96:72:30:cd:b8:14:53:cf:a6:de:3e:c0:f8:ed:
                    16:c5:74:9d:17:6d:33:bb:32:c1:20:05:de:6d:24:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C6:3A:30:2E:76:54:C2:46:E2:3D:57:35:A5:AE:9F:4A:17:CC:57
            X509v3 Authority Key Identifier:
                keyid:E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:34:0c:d2:56:4a:4e:aa:3c:cd:78:d6:d9:c9:82:80:2a:95:
         f8:50:4b:a6:93:d2:dd:da:50:f9:bd:27:60:12:a2:68:58:a0:
         df:be:b3:d0:53:d0:18:65:ff:5c:08:e3:70:8d:d5:12:11:20:
         8b:c9:67:49:cb:b1:d8:42:66:12:3c:91:d0:b4:7f:af:3a:4c:
         2e:67:59:93:93:05:1b:81:e3:a7:6f:3d:0e:c9:1d:66:8f:37:
         c7:31:ab:5b:68:f7:56:1c:1d:ab:d8:ac:90:ff:3c:38:4c:bf:
         4e:19:cd:63:59:c9:9e:f3:50:e1:59:3c:03:55:7b:0d:1f:32:
         ff:b3:78:ea:42:ed:76:71:79:af:a6:0c:74:02:65:a0:c1:6a:
         95:38:50:8f:0b:bc:0f:bc:ab:01:a7:e2:51:2c:5c:fe:fc:6b:
         c2:55:11:95:b1:51:e1:d9:62:5a:13:f3:f1:35:38:93:fc:17:
         50:0d:3b:99:ef:38:f1:77:ac:41:0b:29:2e:7a:8e:02:b6:62:
         ec:59:6b:73:29:e9:2d:09:f3:22:4a:57:92:e1:76:00:70:86:
         38:38:74:f9:da:9a:db:45:74:fa:9e:09:d6:fb:f8:af:3f:49:
         19:c1:56:d4:b2:a0:01:c9:1b:ce:63:ad:7b:f8:35:84:89:17:
         2b:a2:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:54 2026 by rpki-client