Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa
File:                     3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (raw, json)
Hash identifier:          FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=
Subject key identifier:   63:65:F6:4C:71:34:CC:82:71:2B:F4:14:AC:3C:CD:2C:C9:36:D7:6F
Certificate issuer:       /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21
Certificate serial:       7B79F2CABFDEACB9E75375312DAC8FCE813881E7
Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa
Signing time:             Sun 03 May 2026 02:51:17 +0000
ROA not before:           Sun 03 May 2026 02:46:17 +0000
ROA not after:            Sun 02 May 2027 02:51:17 +0000
asID:                     141636
IP address blocks:        103.162.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl
                          rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:79:f2:ca:bf:de:ac:b9:e7:53:75:31:2d:ac:8f:ce:81:38:81:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21
        Validity
            Not Before: May  3 02:46:17 2026 GMT
            Not After : May  2 02:51:17 2027 GMT
        Subject: CN=6365F64C7134CC82712BF414AC3CCD2CC936D76F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:e9:9b:73:42:62:43:d3:ff:d7:4d:a7:7f:
                    7c:a2:48:17:5f:14:76:3f:55:b8:57:20:5d:1d:02:
                    95:29:f2:d3:24:78:34:5d:61:0f:40:2a:e0:eb:4f:
                    24:b9:85:c8:9c:7a:26:14:d5:11:34:1a:d5:96:08:
                    f2:43:5e:57:ab:2c:c7:ec:88:b3:d5:e1:11:13:07:
                    ae:c4:03:e7:9f:ae:da:1f:bb:01:a1:b9:a0:9e:78:
                    d1:c2:06:57:55:dc:45:01:42:8a:83:df:06:17:05:
                    ad:3e:e0:b8:d4:35:6a:8b:0a:62:3a:04:34:ea:df:
                    bb:68:ad:ed:62:35:9d:b9:ca:e0:dc:b4:d5:83:48:
                    93:56:64:b1:ee:c8:78:81:2e:d6:4a:e2:bd:f0:17:
                    fc:20:a9:9c:0e:0e:c8:b4:0d:19:6d:1c:16:f3:48:
                    d5:14:34:63:6f:bc:28:ad:a7:60:3c:4d:16:b6:d5:
                    fb:f8:f0:f3:18:21:f1:ec:88:e5:e6:01:63:3f:9c:
                    10:f8:2b:41:0b:a3:fc:c7:4b:4a:5a:4e:39:39:f2:
                    78:e9:93:31:bc:ca:0f:20:a0:d8:7e:b1:28:eb:aa:
                    c0:a0:10:a0:a4:42:2d:61:73:e8:d8:a1:67:db:6f:
                    6d:ff:da:9e:cf:b5:ad:d4:32:59:5b:42:6d:d9:dc:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:65:F6:4C:71:34:CC:82:71:2B:F4:14:AC:3C:CD:2C:C9:36:D7:6F
            X509v3 Authority Key Identifier:
                keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:a6:e9:49:6b:54:13:66:66:75:ad:b9:92:a8:54:7c:94:5f:
         d4:ad:0f:5a:f8:be:2a:ff:2a:b8:08:56:cf:58:50:25:c4:3b:
         47:05:27:82:73:a4:02:46:09:85:12:9d:a0:85:07:2b:cb:71:
         64:bd:8a:b8:10:16:76:fd:8c:a1:9f:c8:ec:70:ab:bb:a5:a3:
         8b:45:1f:26:a6:8c:4d:40:07:6d:1c:7a:6d:d9:ca:aa:bc:2e:
         49:bb:44:3f:60:4a:96:96:40:3e:95:60:6e:0a:6d:22:bc:2a:
         f2:dc:b3:51:d0:c4:88:d4:21:3d:9e:ca:9d:97:ae:08:71:d0:
         b7:8c:1d:ec:f4:fb:d4:e4:40:28:66:d5:14:68:e6:ef:8e:53:
         38:4c:ad:a7:35:3f:0b:e7:e9:19:e8:65:ec:cf:29:cf:5a:c4:
         ce:53:61:08:69:e0:74:00:43:b9:1f:d8:df:5d:51:1c:1d:1d:
         96:cc:03:1e:df:db:43:a0:24:cc:7a:bf:35:07:fe:c1:6e:1b:
         fb:28:19:9f:e7:24:cc:71:ad:e6:dd:29:13:6f:41:d5:e1:84:
         36:00:e0:02:ec:4f:68:0f:24:6e:c5:86:12:29:8c:06:c7:63:
         e6:31:72:14:d6:b4:dd:1e:da:fc:a5:0a:5e:03:de:9f:15:90:
         fa:e0:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:05 2026 by rpki-client