Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
File:                     3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa (raw, json)
Hash identifier:          Rti07MaZkunppgE02yqy9SwH9qLRnGcjJld/SxZMKag=
Subject key identifier:   09:2C:32:ED:8E:23:01:66:A0:84:E0:02:D0:9F:FC:D6:28:94:E7:47
Certificate issuer:       /CN=7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7
Certificate serial:       1E57DA7086C2EF96DCA749B40A8D62BE141F738B
Authority key identifier: 7A:73:56:E7:74:97:6E:4B:4E:FC:8A:24:49:E6:8E:6D:6C:AC:D8:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
Signing time:             Sun 03 May 2026 02:52:23 +0000
ROA not before:           Sun 03 May 2026 02:47:23 +0000
ROA not after:            Sun 02 May 2027 02:52:23 +0000
asID:                     141657
IP address blocks:        103.161.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.crl
                          rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:57:da:70:86:c2:ef:96:dc:a7:49:b4:0a:8d:62:be:14:1f:73:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7
        Validity
            Not Before: May  3 02:47:23 2026 GMT
            Not After : May  2 02:52:23 2027 GMT
        Subject: CN=092C32ED8E230166A084E002D09FFCD62894E747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:8f:e8:61:be:df:de:93:07:11:f4:f8:43:
                    f7:28:a2:9d:4f:16:0d:6f:1a:8e:ac:a2:d8:76:66:
                    d4:47:ee:db:02:98:3e:42:42:89:1b:3d:2a:9f:e8:
                    b9:42:13:6d:14:e4:1f:8e:68:b3:27:fd:76:22:31:
                    e0:b2:de:7d:5c:7e:29:85:f6:8f:3e:6f:9c:9d:18:
                    a5:21:ac:79:f6:ca:f6:02:6d:13:28:e0:fa:0c:68:
                    6e:ba:1f:94:aa:f1:4c:c9:fb:3d:b4:f8:af:b4:a2:
                    a4:69:1a:a5:0d:2c:88:f5:48:5d:96:05:7d:69:8d:
                    bd:c7:d4:62:0d:93:ba:82:3a:22:12:fb:7b:c2:d1:
                    4c:06:57:e1:cc:fb:89:58:4a:c4:d6:43:cd:32:e8:
                    c4:00:94:0f:1d:e2:d7:2b:c6:4c:a1:87:8f:bd:49:
                    c4:8f:3b:0d:82:8e:d0:7d:8f:5a:0a:fd:b3:a4:b1:
                    ee:25:35:25:3d:a5:18:a5:77:6e:51:09:5b:d3:8a:
                    76:5d:08:d4:ca:ef:92:a7:76:b0:23:90:a7:38:37:
                    e9:e0:32:56:7d:23:7c:2a:c5:05:b1:f6:f9:01:98:
                    90:36:d5:0e:79:0f:db:62:52:24:91:b8:e2:79:14:
                    c6:ea:1a:b2:c1:53:75:c9:df:95:15:54:5e:55:93:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2C:32:ED:8E:23:01:66:A0:84:E0:02:D0:9F:FC:D6:28:94:E7:47
            X509v3 Authority Key Identifier:
                keyid:7A:73:56:E7:74:97:6E:4B:4E:FC:8A:24:49:E6:8E:6D:6C:AC:D8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:8a:5b:59:79:2c:ae:d9:a8:5d:7d:19:61:18:fb:a4:c2:
         88:39:8a:cb:5f:7e:c5:28:fb:28:a8:a2:c9:45:19:7b:0f:b3:
         e5:4c:15:7f:7d:21:98:7d:1e:b4:d0:9d:d8:68:5c:7e:b2:d2:
         23:d8:97:4b:72:a5:e1:54:28:04:d0:81:71:76:77:cd:c1:f6:
         cd:e6:4f:9d:b9:e6:b3:76:e1:6c:62:3e:ab:75:9c:44:bd:cc:
         91:e4:a3:16:25:e1:3f:c8:e4:ad:3a:e9:71:2f:91:c7:71:91:
         f1:0b:bb:c4:3d:74:2e:6b:99:d6:76:56:2a:0f:a9:00:56:d3:
         2f:51:b0:89:4b:d5:7a:9b:27:fe:fd:b2:62:d7:62:3d:c9:dd:
         0f:6f:2a:e2:9f:e4:2c:fd:eb:32:27:d2:3e:a2:7e:c6:74:aa:
         d4:77:d2:32:d5:d3:ff:a1:e3:6e:a1:17:25:fd:e7:d0:50:93:
         11:fd:71:d9:b1:af:8a:7a:92:cd:fd:a3:ca:1f:61:7c:11:da:
         3c:d7:c2:9e:d5:9f:7e:ee:e5:fd:a6:d3:00:15:39:5e:e4:25:
         fe:75:25:6e:49:a7:cb:75:8c:d3:b1:b9:6c:1e:f4:c8:d8:98:
         d1:9f:9e:d7:62:02:ac:62:7b:f2:f4:2a:6d:5a:3f:da:47:30:
         ef:9c:78:65
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUHlfacIbC75bcp0m0Co1ivhQfc4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E3MzU2RTc3NDk3NkU0QjRFRkM4QTI0NDlFNjhFNkQ2
Q0FDRDhFNzAeFw0yNjA1MDMwMjQ3MjNaFw0yNzA1MDIwMjUyMjNaMDMxMTAvBgNV
BAMTKDA5MkMzMkVEOEUyMzAxNjZBMDg0RTAwMkQwOUZGQ0Q2Mjg5NEU3NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjI/oYb7f3pMHEfT4Q/coop1P
Fg1vGo6soth2ZtRH7tsCmD5CQokbPSqf6LlCE20U5B+OaLMn/XYiMeCy3n1cfimF
9o8+b5ydGKUhrHn2yvYCbRMo4PoMaG66H5Sq8UzJ+z20+K+0oqRpGqUNLIj1SF2W
BX1pjb3H1GINk7qCOiIS+3vC0UwGV+HM+4lYSsTWQ80y6MQAlA8d4tcrxkyhh4+9
ScSPOw2CjtB9j1oK/bOkse4lNSU9pRild25RCVvTinZdCNTK75KndrAjkKc4N+ng
MlZ9I3wqxQWx9vkBmJA21Q55D9tiUiSRuOJ5FMbqGrLBU3XJ35UVVF5Vk/MpAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUCSwy7Y4jAWaghOAC0J/81iiU50cwHwYDVR0j
BBgwFoAUenNW53SXbktO/IokSeaObWys2OcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTJlOTU0OTMtYWU3Ni00Y2VmLWEwOGMtYTIwZGZjOWQyNjE5LzAvN0E3MzU2RTc3
NDk3NkU0QjRFRkM4QTI0NDlFNjhFNkQ2Q0FDRDhFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QTczNTZFNzc0OTc2RTRCNEVGQzhBMjQ0OUU2OEU2RDZDQUNE
OEU3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkyZTk1NDkzLWFlNzYtNGNlZi1h
MDhjLWEyMGRmYzlkMjYxOS8wLzMxMzAzMzJlMzEzNjMxMmUzMjMyMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM1Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoeQwDQYJ
KoZIhvcNAQELBQADggEBAAfmiltZeSyu2ahdfRlhGPukwog5istffsUo+yiooslF
GXsPs+VMFX99IZh9HrTQndhoXH6y0iPYl0typeFUKATQgXF2d83B9s3mT5255rN2
4WxiPqt1nES9zJHkoxYl4T/I5K066XEvkcdxkfELu8Q9dC5rmdZ2VioPqQBW0y9R
sIlL1XqbJ/79smLXYj3J3Q9vKuKf5Cz96zIn0j6ifsZ0qtR30jLV0/+h426hFyX9
59BQkxH9cdmxr4p6ks39o8ofYXwR2jzXwp7Vn37u5f2m0wAVOV7kJf51JW5Jp8t1
jNOxuWwe9MjYmNGfntdiAqxie/L0Km1aP9pHMO+ceGU=
-----END CERTIFICATE-----
Generated at Wed May 13 05:36:16 2026 by rpki-client