Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa
File:                     3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (raw, json)
Hash identifier:          fnlL5zMOPvGAUBk55QrgutXcZXU5BAm+3sV40oQEUJw=
Subject key identifier:   91:29:4F:E5:E5:AB:9F:8D:59:FF:3A:41:43:37:6D:EE:01:1A:66:8A
Certificate issuer:       /CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
Certificate serial:       598AA8CB13591B95D03868C006C95CE625D9C76E
Authority key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa
Signing time:             Sun 03 May 2026 02:55:59 +0000
ROA not before:           Sun 03 May 2026 02:50:59 +0000
ROA not after:            Sun 02 May 2027 02:55:59 +0000
asID:                     141642
IP address blocks:        103.162.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl
                          rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8a:a8:cb:13:59:1b:95:d0:38:68:c0:06:c9:5c:e6:25:d9:c7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
        Validity
            Not Before: May  3 02:50:59 2026 GMT
            Not After : May  2 02:55:59 2027 GMT
        Subject: CN=91294FE5E5AB9F8D59FF3A4143376DEE011A668A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c7:44:c3:df:e3:95:8d:e4:c7:4f:1a:37:93:
                    16:9e:81:45:89:2e:99:06:d4:be:48:32:1c:65:b4:
                    12:f6:4f:de:30:d1:13:e7:eb:8f:b6:d0:0e:45:45:
                    3c:db:82:1b:65:f8:1b:85:57:71:aa:5b:89:aa:4f:
                    34:d1:cf:11:48:e6:a5:60:f8:51:18:14:31:b8:09:
                    8c:38:a5:42:fe:0f:ff:da:91:34:74:3e:47:5d:3d:
                    09:31:1f:46:2b:b4:7b:db:5d:ab:3c:db:11:4c:0e:
                    ed:1b:cd:f7:a5:69:f6:e8:b9:98:95:5a:d7:5d:a5:
                    a5:6a:1d:50:3c:ff:04:79:a6:5d:b5:fd:95:c1:e1:
                    31:34:ed:91:dd:5f:28:9a:e6:99:a8:d8:7a:fd:21:
                    75:77:05:a7:80:52:87:94:ac:69:e2:ea:2c:0c:77:
                    f7:ef:a5:ae:1e:64:92:88:61:10:86:a7:9f:da:5d:
                    8b:37:d3:5a:7f:b1:6a:87:87:f8:df:e2:1e:42:24:
                    10:7c:03:40:ca:35:13:75:76:90:59:b4:20:c9:16:
                    41:b5:e0:c8:9c:b2:14:57:89:42:ff:72:45:0e:43:
                    c7:5a:ff:28:65:4c:c0:33:38:84:5e:6a:9d:33:8c:
                    ad:33:59:3c:ee:96:e8:3c:27:6a:0c:11:fb:d4:7e:
                    36:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:4F:E5:E5:AB:9F:8D:59:FF:3A:41:43:37:6D:EE:01:1A:66:8A
            X509v3 Authority Key Identifier:
                keyid:83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:6a:3e:31:84:59:2b:4e:43:b1:a7:e5:a8:8e:75:b4:79:21:
         62:93:04:57:a8:85:66:2f:60:3a:e1:21:d5:e2:5f:64:2a:6c:
         b5:93:38:ce:ce:26:92:0e:a9:14:e0:e7:17:a2:93:4b:f9:23:
         63:de:5c:ab:f8:6a:b6:b1:eb:89:33:d9:fc:3b:76:ef:38:c6:
         3c:be:f4:c7:7e:85:aa:23:7f:5b:5a:5a:3e:65:6d:76:b6:2b:
         55:ae:3e:08:c1:99:3c:a5:1f:59:ac:fa:ef:43:57:c2:30:fb:
         0a:0a:41:5a:c7:7c:ce:65:5b:96:3a:78:48:0c:7d:28:be:c8:
         ed:61:3e:8f:7c:33:c0:72:17:e7:79:c9:b1:81:ff:0e:35:b1:
         d9:f2:64:f3:3c:44:d9:cf:e7:14:a6:ed:cd:e7:4a:ad:aa:73:
         9d:9c:e6:ff:5f:97:e9:b2:41:58:85:3d:de:50:ec:a4:24:17:
         ab:13:fa:e9:9f:16:33:ae:8b:bc:a8:9c:8f:7d:49:ce:0a:73:
         96:7e:96:8c:1a:49:a0:7b:b2:7a:d4:0b:74:8f:b9:73:4b:29:
         de:3b:bd:fc:b0:a0:66:eb:c3:ac:f2:22:bd:02:e3:5b:78:13:
         ae:2d:bd:e9:c9:9f:1a:a3:42:f2:3b:dc:0f:52:bd:33:ea:54:
         2e:3d:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:12 2026 by rpki-client