Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa
File:                     3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (raw, json)
Hash identifier:          Pavi+Ibkd+bl9I6ebmoiu+/5SxrpK9sFhLxy2ZXQkGw=
Subject key identifier:   1A:D5:DC:E3:A4:84:EB:12:A1:32:01:74:33:75:CF:16:96:7D:F6:5B
Certificate issuer:       /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709
Certificate serial:       0BD97A4D168DB21C41ED1929823ABD91111322F9
Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa
Signing time:             Sun 03 May 2026 02:51:21 +0000
ROA not before:           Sun 03 May 2026 02:46:21 +0000
ROA not after:            Sun 02 May 2027 02:51:21 +0000
asID:                     141959
IP address blocks:        103.166.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl
                          rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d9:7a:4d:16:8d:b2:1c:41:ed:19:29:82:3a:bd:91:11:13:22:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709
        Validity
            Not Before: May  3 02:46:21 2026 GMT
            Not After : May  2 02:51:21 2027 GMT
        Subject: CN=1AD5DCE3A484EB12A13201743375CF16967DF65B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:07:07:b6:b2:0f:71:36:11:11:eb:eb:ee:
                    2e:1f:6f:cc:62:12:f4:1b:92:0c:55:1a:d1:52:1e:
                    b1:1e:c2:fd:8c:a7:87:0b:20:0d:92:5f:5d:96:e8:
                    d5:79:bf:7c:a5:05:18:00:50:53:ba:cc:6c:4d:c1:
                    ba:fa:de:f3:e0:95:ba:88:1a:00:9e:a6:9c:53:ec:
                    a2:a7:00:20:9e:6b:0f:64:36:32:17:45:5a:88:87:
                    fe:ee:12:91:c9:e7:6b:22:52:3d:92:95:cd:16:b4:
                    1b:02:4f:9e:ad:01:b9:36:5f:7e:ff:a6:28:ee:be:
                    82:aa:72:a9:b5:4f:63:24:fe:7b:ca:41:c9:84:db:
                    df:55:9a:94:dd:b5:de:bb:ca:87:d1:55:bb:75:ec:
                    73:4d:d1:86:de:7a:2d:3c:5b:63:06:ac:a8:a2:65:
                    9d:eb:61:09:8e:9f:fd:6b:e0:fe:2b:ba:a7:8d:25:
                    67:db:2f:44:cb:4d:9e:5e:11:d9:0a:cb:50:6b:3b:
                    0a:84:49:ea:98:fe:67:f1:60:7d:92:22:b2:ff:98:
                    49:1a:3b:ba:53:84:dc:2e:c7:70:4e:34:09:6d:e5:
                    ed:54:ee:df:3a:30:14:92:01:eb:34:73:40:67:5b:
                    ce:a6:52:29:2d:59:94:52:f9:f8:d3:af:b8:86:01:
                    3d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D5:DC:E3:A4:84:EB:12:A1:32:01:74:33:75:CF:16:96:7D:F6:5B
            X509v3 Authority Key Identifier:
                keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:93:2e:88:b8:88:a7:af:15:53:9b:3d:db:68:33:13:69:c6:
         ec:4e:ae:41:91:a8:aa:50:a9:4a:75:ec:67:f6:e1:0b:7b:8a:
         ea:a4:87:07:ff:94:1e:85:69:67:fe:35:53:7a:fb:a2:22:f3:
         68:dc:12:1d:30:8a:33:18:53:a3:e7:16:59:01:57:ad:90:7a:
         cb:a4:d0:a1:f6:f4:68:9e:a1:fd:b3:cd:ac:74:00:c2:63:1e:
         e6:c4:98:3d:35:d4:e8:5e:42:ec:55:df:cf:3e:04:14:7e:a9:
         31:8a:28:79:ed:a4:d7:92:3c:6d:dc:46:15:ea:8b:d1:3b:67:
         52:2f:b5:57:2d:06:38:c7:24:83:cc:a9:c5:37:f8:5c:c3:e6:
         7f:c7:77:1f:ce:fc:26:38:f2:2e:ba:30:28:92:8d:9b:29:e1:
         d8:b1:c3:15:6c:11:7b:f1:16:c4:2e:02:a5:a1:5b:04:61:6f:
         5b:ee:4c:b8:f7:f5:82:ea:a6:9e:71:62:cb:58:e4:66:ec:c0:
         d2:f5:1c:1b:cf:f1:69:88:9f:64:4d:c8:85:24:64:c8:54:7c:
         09:d7:01:6e:58:94:e1:78:45:c7:57:27:40:3e:c4:85:da:0b:
         6c:88:a8:1b:a4:9b:89:cc:c2:21:a6:e9:11:74:19:2f:e9:e1:
         59:f7:a4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:22 2026 by rpki-client