Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa
File:                     3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (raw, json)
Hash identifier:          7Kp38WdKSSiLKliiaFpY9zvvkr9TIBcqJ58D1X388bM=
Subject key identifier:   81:48:2B:C8:29:08:D8:85:E1:90:99:9B:EE:00:D2:32:AE:0C:FC:0F
Certificate issuer:       /CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6
Certificate serial:       51546A4B5F665B4EB07654C8DD59DF8A0F20EB4F
Authority key identifier: E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa
Signing time:             Sun 03 May 2026 02:49:29 +0000
ROA not before:           Sun 03 May 2026 02:44:29 +0000
ROA not after:            Sun 02 May 2027 02:49:29 +0000
asID:                     142366
IP address blocks:        103.163.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl
                          rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:54:6a:4b:5f:66:5b:4e:b0:76:54:c8:dd:59:df:8a:0f:20:eb:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6
        Validity
            Not Before: May  3 02:44:29 2026 GMT
            Not After : May  2 02:49:29 2027 GMT
        Subject: CN=81482BC82908D885E190999BEE00D232AE0CFC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:3f:3f:51:1e:0e:60:92:e8:66:94:f6:95:
                    f1:f7:2f:f5:6d:91:3c:06:7a:42:ce:22:cb:6e:5d:
                    e4:87:9a:eb:85:2a:71:11:2e:6e:97:86:61:3f:3b:
                    47:68:95:09:5a:b7:c1:68:e9:a0:f4:68:af:f4:84:
                    76:7d:6d:55:96:f8:1c:01:6d:bc:3e:78:fb:6e:a0:
                    74:59:83:9d:91:ea:e7:a2:c2:16:84:de:12:41:6e:
                    71:cc:26:c8:58:a0:b1:8c:d6:04:ae:8e:bd:1e:e4:
                    f3:8d:a7:06:40:e6:8e:22:3b:83:31:68:d5:15:3e:
                    57:a2:b6:9c:83:67:48:b7:51:fb:eb:a4:96:72:02:
                    93:89:95:f8:2d:3b:85:08:95:6b:a1:c5:17:8b:e5:
                    03:22:6f:dc:00:f8:fb:ab:4e:53:8c:4c:00:3c:19:
                    45:e5:f8:e8:ce:90:ce:b9:11:bb:a1:c6:f4:32:4c:
                    e9:2b:2e:9c:57:59:cb:c6:e5:e0:aa:af:1f:9c:24:
                    fd:55:a3:8c:44:97:58:20:65:9d:84:de:e4:7b:41:
                    86:30:f4:cd:6f:44:c9:2a:1a:80:e4:96:6d:b8:09:
                    b5:2f:cf:5c:41:e1:66:01:d2:b1:31:38:29:9d:f4:
                    52:84:b8:68:44:ea:8a:8f:2f:48:1b:15:74:e5:33:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:48:2B:C8:29:08:D8:85:E1:90:99:9B:EE:00:D2:32:AE:0C:FC:0F
            X509v3 Authority Key Identifier:
                keyid:E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ac:58:9b:18:f8:bf:ba:6d:3b:22:82:de:a5:90:9e:8d:59:
         e8:24:7b:98:84:10:a9:73:87:f7:ec:28:3e:4c:ba:6c:ab:86:
         56:7c:6c:af:5f:51:e3:a4:b9:32:93:ab:f0:da:d3:83:13:13:
         b9:6c:4b:71:d3:c5:dd:fd:50:4c:0d:ec:8f:9b:d1:79:6e:7d:
         eb:43:a2:dc:0a:d8:23:2a:7b:ee:41:bf:fd:57:e4:35:d9:ba:
         bc:d0:83:63:e0:e2:7e:6b:03:ea:2e:fd:55:30:4f:81:17:78:
         7e:e3:5a:65:6a:d2:44:5e:6d:5a:e3:a0:10:67:5a:3d:6f:d2:
         40:bf:35:cb:93:ba:13:ca:ed:29:e3:a4:07:64:2d:51:4f:3c:
         95:be:a3:b3:c7:fe:a7:6e:4b:d9:ff:14:ea:22:bd:b3:22:17:
         ec:6f:62:3f:dc:81:34:cf:7c:26:79:51:79:8c:cf:3c:c1:b2:
         cc:2c:15:a1:a8:cc:ca:1b:da:56:cc:a6:0b:92:b3:c5:ba:9d:
         58:a8:c5:7a:b3:2e:52:e0:c9:08:4a:a9:54:c0:64:56:e6:a8:
         02:e1:fe:1b:36:07:66:fb:c4:b2:58:60:04:75:91:78:e1:67:
         83:a0:ee:db:7e:0b:1c:5b:8b:41:d2:67:b7:fc:89:65:34:34:
         c0:af:f1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:55:53 2026 by rpki-client