Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa
File:                     3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (raw, json)
Hash identifier:          NbzRk+anslHWDpTfVCq58hG430siKypJAEmOtHHoBDU=
Subject key identifier:   4A:E4:59:DA:46:4F:87:FC:0F:0A:14:EB:B0:93:2D:5F:35:1B:09:36
Certificate issuer:       /CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A
Certificate serial:       59E69F2CDADAF8997F91D9A3F4A1C9498EF041CB
Authority key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa
Signing time:             Sun 03 May 2026 02:51:16 +0000
ROA not before:           Sun 03 May 2026 02:46:16 +0000
ROA not after:            Sun 02 May 2027 02:51:16 +0000
asID:                     139981
IP address blocks:        103.71.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl
                          rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e6:9f:2c:da:da:f8:99:7f:91:d9:a3:f4:a1:c9:49:8e:f0:41:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A
        Validity
            Not Before: May  3 02:46:16 2026 GMT
            Not After : May  2 02:51:16 2027 GMT
        Subject: CN=4AE459DA464F87FC0F0A14EBB0932D5F351B0936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:1e:1b:58:24:a4:f8:b0:5a:dd:8e:b7:0c:
                    14:0a:5c:2f:b9:2c:03:c9:10:c3:af:c8:f3:f0:a5:
                    fe:9f:72:1a:6c:71:a7:bd:1b:50:df:cb:43:11:27:
                    c5:89:d0:14:00:0d:8a:80:33:43:1d:76:f1:d6:83:
                    72:ba:80:8a:86:60:e7:5b:95:8a:33:50:3b:4b:3c:
                    eb:1f:e5:d3:f9:33:32:22:ca:de:97:36:04:03:91:
                    8a:94:49:2e:9a:11:b6:2d:f9:0b:a4:06:0d:75:3c:
                    2a:5b:f4:8c:6e:d1:87:35:f4:47:fa:c3:0d:fc:07:
                    c4:0a:15:bc:5a:a4:94:bb:ad:12:45:6c:83:b5:bd:
                    a0:ec:f4:ca:85:4f:d5:48:c9:41:43:5e:69:e2:73:
                    4c:66:12:56:f8:d1:f4:c6:33:2a:2f:8d:3c:49:1c:
                    22:ba:57:20:f4:3b:bb:fa:64:56:8b:8c:7b:f8:cf:
                    c7:1a:6d:b6:86:7e:01:f5:f2:34:b0:f9:c4:a9:04:
                    f4:50:76:99:4a:26:42:5b:93:48:0d:da:94:e4:99:
                    38:ba:d8:f0:70:ff:ff:ec:2b:85:81:28:96:bd:a0:
                    9c:23:82:9f:96:2f:22:8e:d2:4d:52:71:a0:a4:64:
                    b8:3d:69:98:b9:47:67:cf:7f:f6:39:62:e8:cd:38:
                    fc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E4:59:DA:46:4F:87:FC:0F:0A:14:EB:B0:93:2D:5F:35:1B:09:36
            X509v3 Authority Key Identifier:
                keyid:4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:21:03:a8:18:64:c9:9a:e0:6f:36:eb:e6:2b:83:22:e6:39:
         d7:af:c8:b7:e8:60:e4:37:6f:1f:45:0d:d2:cb:ed:a5:d4:bd:
         e8:b1:a9:a7:23:c7:d0:34:f4:0c:ac:02:60:99:59:77:a8:33:
         3f:24:d8:6f:06:47:15:be:e5:91:40:58:f3:9b:91:f3:3d:a4:
         56:e2:78:26:13:ff:21:49:65:85:93:87:32:76:e2:84:df:6e:
         e1:b7:70:42:d1:68:f8:cb:d5:a3:3d:2f:d0:20:52:14:5e:b7:
         8c:dc:ab:2f:f1:e5:56:74:e7:cd:f1:f6:52:8e:47:52:bf:4a:
         95:cf:3e:24:83:e5:77:5d:8e:5e:d8:e9:8c:33:4a:63:61:1d:
         f3:b6:9a:c7:35:aa:5a:a1:6f:ee:27:dc:cc:db:71:f6:06:ea:
         10:98:6e:7f:52:5e:aa:aa:5b:8b:d2:f8:ac:0f:bf:6b:b3:52:
         bc:36:ab:70:eb:69:b3:d6:8c:40:1b:3d:62:c0:22:3f:b5:27:
         25:16:58:db:91:04:70:e2:8b:c7:a9:85:61:b9:45:87:66:5d:
         45:58:ba:52:ab:74:b1:28:9a:1a:55:de:af:eb:b9:7e:d8:e4:
         ff:01:7d:d1:1c:3e:a6:b8:78:ca:22:a6:88:08:bc:36:9f:c2:
         c2:c8:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:17 2026 by rpki-client