Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=
Subject key identifier:   3F:2D:52:52:91:CE:D6:3D:2D:16:D9:DC:71:7F:95:CE:92:2F:5D:AF
Certificate issuer:       /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3
Certificate serial:       1433AB7944D12ABE0B8CA8F08028688A07C68E3F
Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 03 May 2026 02:57:07 +0000
ROA not before:           Sun 03 May 2026 02:52:07 +0000
ROA not after:            Sun 02 May 2027 02:57:07 +0000
asID:                     139952
IP address blocks:        103.160.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl
                          rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:33:ab:79:44:d1:2a:be:0b:8c:a8:f0:80:28:68:8a:07:c6:8e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3
        Validity
            Not Before: May  3 02:52:07 2026 GMT
            Not After : May  2 02:57:07 2027 GMT
        Subject: CN=3F2D525291CED63D2D16D9DC717F95CE922F5DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:76:a0:f0:a8:31:8d:96:15:dc:b2:b8:c7:
                    7b:b8:0a:21:dc:64:68:73:af:82:3b:ce:52:97:6d:
                    a2:90:a1:4e:19:75:42:68:96:15:d5:2d:ef:a2:a3:
                    58:c2:ae:0c:4f:32:8f:8e:79:51:39:ed:58:d0:b9:
                    18:ae:12:47:00:27:e8:72:45:be:fb:4c:7b:01:68:
                    b2:bc:90:6a:c3:65:fc:ef:f9:b2:02:6a:4c:29:1f:
                    f8:f1:c6:04:19:91:75:d8:c4:29:c5:cb:60:cf:71:
                    2b:19:8b:a3:26:e3:a7:7d:55:28:ef:14:c0:53:31:
                    c6:a5:29:af:85:12:c1:65:72:40:ae:17:6b:ce:d9:
                    5d:2f:c3:f3:e0:84:7e:f9:a8:90:d2:9f:cb:bf:4a:
                    9c:83:7a:b0:04:f0:91:58:97:3d:19:fb:ce:94:97:
                    3d:58:3d:2e:be:17:9c:04:e4:9f:01:e1:df:29:60:
                    77:d7:3b:4d:da:a5:d6:a7:77:ba:af:72:1d:bf:46:
                    0c:6d:29:3a:2e:d1:16:8f:d2:41:aa:1e:c2:b3:38:
                    82:04:a6:b3:37:bf:58:f8:06:33:01:ed:cc:2a:43:
                    3a:cb:cd:10:e2:79:1d:bd:1a:b7:1b:c6:09:e6:a5:
                    3e:be:25:52:64:8b:bf:0b:af:98:16:31:55:95:52:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2D:52:52:91:CE:D6:3D:2D:16:D9:DC:71:7F:95:CE:92:2F:5D:AF
            X509v3 Authority Key Identifier:
                keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:da:a4:82:57:82:7f:aa:57:03:df:e4:5d:8c:45:cb:7e:9d:
         3f:8a:2d:ea:33:b7:9f:d3:9a:6f:2c:59:71:ff:b5:33:fb:32:
         0e:7c:62:86:a3:e3:a3:00:b8:6a:77:fe:8e:78:f2:4f:6d:60:
         e4:39:c9:13:4d:df:ee:c2:58:d6:80:11:e8:9b:49:d3:ed:f7:
         16:74:50:e4:d6:5e:e6:dd:44:8b:15:b3:f7:28:d7:24:0a:53:
         4e:dd:ba:3c:56:79:2d:3b:d3:db:df:34:b0:bd:9e:b2:85:75:
         66:c6:f3:40:69:ad:61:90:a8:6d:0b:cd:bf:2f:fd:65:00:b2:
         d8:d5:0b:9a:6d:54:8d:88:db:a2:bd:5f:e4:0e:d1:83:7b:e9:
         a3:a9:38:f2:2c:b6:de:20:aa:9a:9e:0c:e0:a6:9c:fc:8b:18:
         03:0c:67:8b:6b:60:03:8a:e8:67:aa:a8:8e:aa:97:dd:6b:3e:
         57:d0:96:16:af:33:15:46:87:ca:39:c6:23:e4:47:86:b6:4a:
         80:d9:99:02:66:03:89:11:f6:80:b5:ee:c4:0a:f5:d4:d0:f5:
         2b:b8:71:d2:a4:f4:64:a8:e3:c5:94:ce:ae:a2:74:3e:dc:60:
         fe:2f:64:3a:0a:73:cc:b4:b9:a9:89:c2:04:95:f5:9e:ad:b0:
         14:2b:ab:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:26 2026 by rpki-client