Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa
File:                     3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (raw, json)
Hash identifier:          iTeV8kWltCgG9BRtF/fXrU7ElxilAoEcwTni/bbcKq0=
Subject key identifier:   67:13:DD:9C:09:42:8F:33:E2:C2:D9:EF:99:EA:69:A2:0F:55:BE:6F
Certificate issuer:       /CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004
Certificate serial:       0A7AA3C889C6C79CB67B71C642F0096C631DD4C5
Authority key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa
Signing time:             Sun 03 May 2026 02:54:04 +0000
ROA not before:           Sun 03 May 2026 02:49:04 +0000
ROA not after:            Sun 02 May 2027 02:54:04 +0000
asID:                     141913
IP address blocks:        103.164.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl
                          rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7a:a3:c8:89:c6:c7:9c:b6:7b:71:c6:42:f0:09:6c:63:1d:d4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004
        Validity
            Not Before: May  3 02:49:04 2026 GMT
            Not After : May  2 02:54:04 2027 GMT
        Subject: CN=6713DD9C09428F33E2C2D9EF99EA69A20F55BE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:d6:87:bc:67:4b:94:6c:21:85:cf:db:fe:
                    63:f1:18:c4:88:a1:e0:99:10:20:59:96:15:35:d5:
                    2e:02:81:61:16:27:e7:47:f8:4f:09:c2:27:a7:da:
                    45:32:6c:4b:48:e2:04:5d:24:33:6b:28:d2:4d:1e:
                    12:6f:ef:91:05:6c:ca:fe:3d:23:a0:4d:33:31:74:
                    10:61:79:36:6c:7f:41:39:09:12:04:35:0a:c3:ec:
                    5d:69:f1:1e:10:7a:59:51:7f:1a:ed:19:b3:e8:9c:
                    c0:01:c6:1f:9d:a0:c6:0f:47:a5:ec:e4:f4:73:85:
                    61:8a:c8:07:e6:bc:88:5f:fa:61:df:fe:a9:2a:a5:
                    3d:62:56:19:ef:14:cf:fa:67:9b:cd:15:f0:ca:47:
                    a0:58:c4:5d:e1:5b:a2:5d:fc:88:bc:05:b3:d6:81:
                    eb:02:d8:a4:05:ee:37:92:9f:fe:97:53:3b:a7:fe:
                    2c:33:90:b7:3f:e0:ed:aa:2e:47:b6:67:d2:3b:ef:
                    1f:2d:89:c8:bc:39:39:3e:d7:20:bb:f7:db:0f:af:
                    d5:5d:b5:7a:44:a6:28:92:3c:85:f8:8d:b7:53:bc:
                    9c:f2:38:3e:22:ba:db:f8:3c:fe:0d:7d:0d:94:d4:
                    5f:c1:61:94:2d:88:ad:eb:be:77:53:72:14:46:b5:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:13:DD:9C:09:42:8F:33:E2:C2:D9:EF:99:EA:69:A2:0F:55:BE:6F
            X509v3 Authority Key Identifier:
                keyid:8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:de:cd:db:3e:25:72:a5:a2:98:c2:90:2c:b5:7c:59:9c:34:
         de:a4:a7:92:bf:a5:c7:6c:5b:c3:48:d1:4c:33:01:eb:05:16:
         8e:22:9b:d1:a6:aa:10:29:03:d3:57:52:a7:2a:73:72:ec:cb:
         cf:e9:9b:ed:d9:26:d8:22:df:b4:5d:dd:fa:db:34:28:50:41:
         ea:7c:c4:b4:b6:5d:43:4a:a5:2e:2b:f1:f0:27:1b:96:16:e1:
         15:b7:43:54:39:29:4e:1e:73:b0:6a:12:ff:55:77:3b:4e:6d:
         bb:94:d7:c0:d6:17:f0:f1:55:9d:85:93:50:1a:6e:82:75:32:
         91:08:3a:40:ba:f8:a8:45:41:d6:b3:75:3f:84:16:2a:89:d8:
         28:ff:aa:ec:31:89:1d:fb:08:1b:4f:65:19:6d:0a:3d:d5:7c:
         26:e8:1a:68:4d:15:b6:be:8e:6f:f5:cd:17:46:31:8d:77:56:
         3b:87:d9:75:3b:ef:97:89:04:53:27:53:0e:97:94:d1:2a:8d:
         1f:a5:c9:de:ff:0d:ac:f0:6c:37:dc:25:2e:49:ba:9a:55:8a:
         32:87:fc:17:a3:78:03:1c:1d:26:aa:24:1f:05:96:b9:39:9e:
         a4:84:24:3d:be:58:2e:70:75:f5:c5:51:d1:f4:18:66:4e:6c:
         55:74:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:19 2026 by rpki-client