Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa
File:                     3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (raw, json)
Hash identifier:          U7/0nIu+Bj5x9bRwZDPcfh3tl44rRdCnsM5J63akTiA=
Subject key identifier:   F4:EA:FD:30:E8:56:55:28:63:10:58:F4:EF:38:ED:97:1F:2A:7B:7D
Certificate issuer:       /CN=C3CDEFC1D42DBC526894B49382D693AB81922151
Certificate serial:       183E6EF53C5B48D140D09CF11EAB2AE85B2C118B
Authority key identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa
Signing time:             Sun 03 May 2026 02:53:03 +0000
ROA not before:           Sun 03 May 2026 02:48:03 +0000
ROA not after:            Sun 02 May 2027 02:53:03 +0000
asID:                     141889
IP address blocks:        103.163.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl
                          rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3e:6e:f5:3c:5b:48:d1:40:d0:9c:f1:1e:ab:2a:e8:5b:2c:11:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CDEFC1D42DBC526894B49382D693AB81922151
        Validity
            Not Before: May  3 02:48:03 2026 GMT
            Not After : May  2 02:53:03 2027 GMT
        Subject: CN=F4EAFD30E8565528631058F4EF38ED971F2A7B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:b4:d8:d9:97:a5:b9:95:4f:ca:fd:ee:b8:
                    f9:e5:24:46:40:71:aa:1f:68:89:cc:9b:e3:dc:c6:
                    e2:dc:5b:bd:81:96:0b:82:42:2e:6c:89:91:d8:71:
                    8c:a0:6b:61:c3:16:85:ed:c2:1e:b8:5e:00:78:7b:
                    a4:3d:eb:96:b8:e5:75:ac:d5:12:bf:87:fe:81:83:
                    6e:43:6f:e2:b3:49:13:3c:0f:b9:f3:31:86:83:b0:
                    49:db:5d:e0:65:ed:24:5c:2a:d5:f4:d3:8d:06:02:
                    63:6a:1a:c9:55:68:db:f1:2d:7a:d5:ff:1c:4e:76:
                    27:00:a5:3d:57:a8:66:b2:02:4c:3e:2c:55:96:e7:
                    42:c7:ca:bd:f2:6d:3c:5f:8d:25:4b:e3:d6:9e:e7:
                    34:02:8e:69:52:28:10:04:a3:3a:56:bc:d3:a2:9b:
                    91:c1:85:00:ac:85:98:45:ce:cd:25:0f:b4:eb:bf:
                    a6:a4:fc:43:95:0d:8c:cd:10:58:dd:6a:d0:f5:f0:
                    f6:f0:b1:4d:7d:7f:d2:b2:83:be:6b:fe:3f:0c:7d:
                    f1:f1:2a:cc:eb:fb:19:73:01:4e:dc:d3:78:a8:bb:
                    a3:85:6c:b0:48:74:75:d9:46:8e:82:95:09:50:e1:
                    53:9e:73:63:eb:02:6f:43:0b:9a:d8:8c:92:7e:ae:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EA:FD:30:E8:56:55:28:63:10:58:F4:EF:38:ED:97:1F:2A:7B:7D
            X509v3 Authority Key Identifier:
                keyid:C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:e6:1a:77:12:6f:ea:d5:c9:84:93:9b:af:96:35:e0:0c:
         3a:f1:16:c2:8d:8d:df:1a:5b:a3:85:9b:cf:c3:72:f4:fe:9c:
         5e:be:94:c0:1b:63:3a:f1:33:86:24:6a:92:82:41:02:96:80:
         38:62:5b:4f:52:de:ba:0d:29:1d:aa:16:01:23:e4:6d:56:04:
         3c:bc:41:cf:01:df:d5:7e:2f:fa:4d:85:0e:f5:7c:e5:22:d2:
         fe:be:c7:6a:ca:48:50:21:68:6c:b9:fd:f3:8c:53:83:38:06:
         d0:c6:4b:58:60:6e:a5:86:ea:a6:14:c1:85:2a:8a:3e:2e:26:
         3f:e6:e1:f6:a7:af:8f:13:d0:5f:b6:62:4c:3b:77:51:76:4e:
         9d:c6:f1:21:bd:97:51:20:da:83:5f:21:25:55:54:e7:52:c0:
         d2:6e:86:7b:fb:64:31:da:c1:c9:4a:97:38:8a:a1:34:8b:83:
         b0:a6:5d:17:ac:18:ec:d8:99:45:11:1c:bb:e6:c9:4a:e9:c1:
         fa:64:d5:af:8d:62:41:b5:c2:ad:c0:71:99:19:92:8a:41:07:
         98:63:88:5e:7b:84:0d:59:4c:70:11:ed:93:f1:fa:44:fd:68:
         2b:3f:ef:c1:d6:d5:95:3a:8d:20:c7:5e:13:f9:22:65:7d:8a:
         93:53:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:04 2026 by rpki-client