Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa
File:                     3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (raw, json)
Hash identifier:          W7doPEAlt7atW3PujV3jj4JUbhiVhrrULJlIpRgUn64=
Subject key identifier:   79:C6:B7:B9:4A:82:FB:C9:FA:5D:2C:03:EC:58:D1:35:92:77:BA:19
Certificate issuer:       /CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D
Certificate serial:       38844D197F8E86A898DF232E86718076E38E5449
Authority key identifier: A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa
Signing time:             Sun 03 May 2026 02:56:42 +0000
ROA not before:           Sun 03 May 2026 02:51:42 +0000
ROA not after:            Sun 02 May 2027 02:56:42 +0000
asID:                     141579
IP address blocks:        103.160.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl
                          rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:84:4d:19:7f:8e:86:a8:98:df:23:2e:86:71:80:76:e3:8e:54:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D
        Validity
            Not Before: May  3 02:51:42 2026 GMT
            Not After : May  2 02:56:42 2027 GMT
        Subject: CN=79C6B7B94A82FBC9FA5D2C03EC58D1359277BA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:0f:c6:fc:4d:60:d5:b8:ef:72:85:ab:03:
                    1d:3c:85:7f:4a:6f:db:16:4b:99:0e:fd:8d:d1:b7:
                    04:bb:7a:2e:8a:40:04:35:71:c6:03:f8:46:eb:f5:
                    36:3b:13:f9:c3:3b:0d:ae:94:79:41:43:91:8a:0a:
                    8e:e5:bf:c2:40:1d:5f:68:55:d6:2b:a7:13:d8:b7:
                    53:12:57:39:a5:70:c3:c1:43:48:81:52:ce:26:7b:
                    3b:d1:b2:f4:11:43:49:c4:83:55:40:38:7b:82:0b:
                    5c:52:d6:2a:05:a6:dc:74:30:23:92:ee:07:0b:e4:
                    91:ae:6d:bd:b7:87:d4:e7:47:a4:ba:cb:22:c1:5a:
                    84:c8:d0:d0:6d:fa:60:c2:7b:a5:9f:0f:6b:59:7b:
                    ed:52:cc:e9:c4:79:58:18:40:44:8f:e3:12:70:c3:
                    21:3c:a5:c8:83:db:fe:8a:84:bb:60:58:71:d0:0a:
                    8b:5c:12:df:f2:d9:bb:47:cf:c6:59:9f:e5:e8:93:
                    aa:8c:66:90:74:ef:e3:e9:b0:b7:5c:37:1f:0c:b1:
                    f8:95:78:00:b2:ea:79:32:78:4e:90:51:ef:6c:fb:
                    ac:03:77:de:e6:b6:fe:6e:11:a0:ca:12:de:a9:49:
                    4d:c2:85:f8:62:57:4e:55:5a:da:36:1c:e4:4d:57:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C6:B7:B9:4A:82:FB:C9:FA:5D:2C:03:EC:58:D1:35:92:77:BA:19
            X509v3 Authority Key Identifier:
                keyid:A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:df:28:c3:67:c7:b0:b7:25:d9:89:fd:77:75:f4:10:ac:d6:
         87:4c:50:86:04:16:a5:1c:48:ed:5e:62:9b:20:1a:ad:df:91:
         57:35:00:8c:fd:8e:82:0b:d1:a6:97:6c:a6:55:21:c6:48:a5:
         16:0f:00:14:a7:bb:b9:24:00:f8:5d:1b:1b:c5:49:2e:ff:62:
         eb:8e:e4:51:6c:9a:6a:11:6e:ef:57:70:50:ce:e4:ff:f6:21:
         b9:88:43:b0:72:06:39:74:f7:2c:a5:7b:99:19:29:e4:17:fb:
         1b:03:9b:c9:9c:fd:67:62:db:69:6a:75:7c:37:51:09:4e:e9:
         ba:aa:50:d5:85:ea:11:aa:a6:34:07:c4:93:75:e6:2b:2a:94:
         3f:c4:c5:d4:6d:58:13:58:77:54:96:a3:9b:3f:c0:48:a0:6b:
         b7:b3:ce:74:3f:70:e2:6a:00:b4:dd:f3:ca:0b:c1:e7:5c:a9:
         67:d1:67:5a:e5:07:d9:70:80:1e:77:11:21:45:98:a6:9d:ff:
         6f:90:66:f2:4a:5c:44:4f:6b:ef:90:a6:d2:96:17:01:f9:38:
         3b:5b:ef:2b:02:c9:2e:9d:53:8d:7b:34:ac:a1:a7:c4:12:25:
         54:45:ed:03:59:e5:a6:6b:23:63:ac:72:d5:2d:b4:7f:17:bc:
         4f:32:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:43 2026 by rpki-client