Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa
File:                     3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (raw, json)
Hash identifier:          25pMisvX0/Q8rpjasSNLO/3FyTnfpVPB5JoH3mYAK2Y=
Subject key identifier:   AF:51:A2:19:86:85:2D:75:05:04:C9:49:01:7C:47:8B:FA:13:6C:01
Certificate issuer:       /CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF
Certificate serial:       25B6A4886B95C332BD70B32B8142B1E8631A4EB5
Authority key identifier: F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa
Signing time:             Sun 03 May 2026 02:54:14 +0000
ROA not before:           Sun 03 May 2026 02:49:14 +0000
ROA not after:            Sun 02 May 2027 02:54:14 +0000
asID:                     141652
IP address blocks:        103.162.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl
                          rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b6:a4:88:6b:95:c3:32:bd:70:b3:2b:81:42:b1:e8:63:1a:4e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF
        Validity
            Not Before: May  3 02:49:14 2026 GMT
            Not After : May  2 02:54:14 2027 GMT
        Subject: CN=AF51A21986852D750504C949017C478BFA136C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:40:33:57:1d:87:50:8e:39:7c:1e:3e:41:
                    98:5b:13:00:1b:30:b2:f3:eb:9e:0a:05:cd:a7:84:
                    87:42:15:1a:60:a9:7f:55:bc:ec:6a:f5:47:d7:85:
                    58:22:05:df:95:b0:8f:9f:c9:d9:d2:8c:7d:e2:b1:
                    43:24:ea:97:1b:02:ac:62:33:fe:96:66:03:d8:d5:
                    e6:7e:d3:6d:85:86:ed:f5:b6:22:d4:df:fa:17:c5:
                    75:90:b0:a6:e9:42:7d:7b:b4:05:b0:80:31:bf:87:
                    01:ba:30:2f:9b:f6:fe:39:aa:1d:e6:77:b9:1c:87:
                    04:9c:b0:41:c0:c3:69:36:bd:76:f1:49:f2:7e:17:
                    7e:c8:d9:ee:c5:90:50:a7:f6:2b:b6:54:b2:4c:91:
                    4e:e1:0c:22:4b:a2:be:fa:c9:65:cd:d6:9c:48:0a:
                    d2:fa:ce:5f:03:a2:f6:71:61:21:ee:92:32:4a:89:
                    67:de:61:2d:6b:38:22:ed:4f:fd:af:7e:ba:83:13:
                    84:18:c4:5c:d3:a5:e6:f4:63:db:e4:91:5c:cd:e2:
                    7f:60:4a:3c:1e:75:84:cb:13:c1:3b:7c:b3:0e:b8:
                    35:d0:a3:f6:63:84:a9:3b:aa:95:1f:c5:d1:b3:83:
                    74:a6:5c:95:68:2d:1f:60:1c:ab:f1:f9:51:a9:81:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:51:A2:19:86:85:2D:75:05:04:C9:49:01:7C:47:8B:FA:13:6C:01
            X509v3 Authority Key Identifier:
                keyid:F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:35:b3:2a:ec:7e:d5:31:ef:04:a8:3e:9f:a9:27:6c:0c:
         d1:ea:fd:38:27:f4:5c:ae:5c:29:30:1d:17:b9:4e:2c:65:cf:
         5c:78:24:32:60:05:41:40:5c:f9:44:40:37:82:2d:8e:be:4a:
         ff:d2:23:2b:2a:ab:30:22:8d:84:75:40:78:29:74:44:f6:01:
         e6:77:0f:65:cf:b6:a1:13:9a:25:c4:0c:fa:c0:2c:3a:2d:39:
         c2:e9:95:7b:c6:c4:ee:a4:ef:58:f4:94:7f:24:85:1b:64:17:
         eb:37:8a:69:de:a1:60:52:aa:83:00:8f:40:1f:59:26:4f:28:
         3d:3f:93:99:35:93:dd:1c:36:2c:a6:e3:44:19:da:90:7b:83:
         79:15:0e:51:34:49:5e:54:d4:b3:7d:91:2e:b6:80:bc:d8:3c:
         02:04:e4:ea:0e:c9:f9:2c:db:66:b3:f6:93:c8:c9:c5:92:92:
         cd:e0:4b:d9:c2:73:2f:13:ab:83:c9:d0:3d:27:2b:f3:f0:81:
         db:3a:67:76:a3:0d:42:5a:2a:39:4f:6b:39:99:77:bd:b6:9a:
         db:75:68:79:af:d7:43:bf:7a:7d:1b:3f:b7:97:20:8d:4d:84:
         7f:0e:d8:8c:87:6c:a9:47:bc:6a:ac:2e:14:ac:18:4a:ae:b6:
         ab:ec:ab:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:06 2026 by rpki-client