Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa
File:                     3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (raw, json)
Hash identifier:          bsqoNa9oZNQr7YY9Akgl8NDoT3SrStLPgc9ZgPaAgIs=
Subject key identifier:   44:F0:F1:00:3F:95:6D:13:4A:AB:2A:B9:55:DC:76:BE:87:3E:A4:84
Certificate issuer:       /CN=E11351518FB1FA718E1626B5B8B0E9E0BA6C7778
Certificate serial:       354C562348A25719E602A331BE82F5E2DEE1BCC2
Authority key identifier: E1:13:51:51:8F:B1:FA:71:8E:16:26:B5:B8:B0:E9:E0:BA:6C:77:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E11351518FB1FA718E1626B5B8B0E9E0BA6C7778.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa
Signing time:             Sun 03 May 2026 02:57:58 +0000
ROA not before:           Sun 03 May 2026 02:52:58 +0000
ROA not after:            Sun 02 May 2027 02:57:58 +0000
asID:                     141611
IP address blocks:        103.161.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/E11351518FB1FA718E1626B5B8B0E9E0BA6C7778.crl
                          rsync://rpki-rsync.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/E11351518FB1FA718E1626B5B8B0E9E0BA6C7778.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E11351518FB1FA718E1626B5B8B0E9E0BA6C7778.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4c:56:23:48:a2:57:19:e6:02:a3:31:be:82:f5:e2:de:e1:bc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11351518FB1FA718E1626B5B8B0E9E0BA6C7778
        Validity
            Not Before: May  3 02:52:58 2026 GMT
            Not After : May  2 02:57:58 2027 GMT
        Subject: CN=44F0F1003F956D134AAB2AB955DC76BE873EA484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:6e:3f:68:96:4a:8b:67:5b:32:32:df:ce:
                    2c:ff:ab:e6:fd:2b:94:1f:ec:91:16:fb:f0:f2:ba:
                    5e:7b:05:c1:d6:92:39:63:c3:42:b6:dd:41:63:ea:
                    3a:ad:40:56:42:4f:e2:88:c3:f7:ce:b0:83:31:8e:
                    ac:ae:69:b1:91:4a:66:ed:a7:dd:04:be:74:3d:d4:
                    1a:4a:4f:ba:1c:74:47:42:85:f1:c7:6e:ee:ca:41:
                    0f:7d:70:41:ac:c9:39:b2:ea:cd:d2:e3:51:5a:10:
                    4a:6e:ef:ed:4d:60:be:57:3f:a9:0d:b7:cf:b5:97:
                    04:f0:37:2c:f0:65:53:46:ff:b9:33:e9:ea:3c:26:
                    ae:a8:5e:c0:76:f6:98:c6:66:5a:e7:ea:92:cb:3a:
                    72:a3:c8:c9:85:3d:03:52:ec:6f:fc:a8:25:65:db:
                    66:70:17:9c:23:3a:34:4f:a8:6a:38:0b:ef:71:18:
                    34:9b:d8:c8:04:31:7a:1b:26:9f:4e:9f:a6:92:6a:
                    bc:d1:a2:68:ae:8b:8e:e8:ba:11:2a:31:dd:6c:5a:
                    7e:35:15:36:16:2f:bd:9d:91:df:eb:2f:53:8c:a1:
                    80:9d:98:f7:dc:19:63:1a:2b:20:8f:4c:5d:ab:6d:
                    2d:b4:c5:7c:39:01:91:db:88:c1:f5:41:d3:5e:8f:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F0:F1:00:3F:95:6D:13:4A:AB:2A:B9:55:DC:76:BE:87:3E:A4:84
            X509v3 Authority Key Identifier:
                keyid:E1:13:51:51:8F:B1:FA:71:8E:16:26:B5:B8:B0:E9:E0:BA:6C:77:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/E11351518FB1FA718E1626B5B8B0E9E0BA6C7778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E11351518FB1FA718E1626B5B8B0E9E0BA6C7778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:cd:7b:04:8d:a3:e5:39:24:76:57:90:40:19:a4:45:54:9d:
         e3:80:0c:1a:6d:ad:0e:c9:45:9e:71:53:3f:c8:61:59:a8:ec:
         27:bd:8f:e8:c8:93:49:ba:b3:1a:f7:89:f4:27:ea:c3:03:6c:
         5e:b3:84:e7:4a:f6:8e:cc:5a:57:47:81:ed:9a:29:03:2d:77:
         dd:5e:ad:60:15:1f:5b:97:cc:d0:c4:0f:77:34:cb:66:c2:3d:
         e7:c2:4b:6c:ba:75:58:d7:45:97:55:96:6a:7c:20:ef:7c:2e:
         64:59:ab:9c:19:f6:f5:93:7a:7e:79:57:53:a7:54:84:2e:c1:
         18:ee:ca:d7:a7:98:ae:c9:af:42:b0:b8:4a:c3:81:71:86:17:
         10:fa:a1:49:2b:38:f8:d4:18:f4:54:bf:45:cb:63:43:11:94:
         98:d6:b8:88:57:79:e1:b9:04:50:e4:8b:c3:45:dd:c7:85:7a:
         8e:e1:5e:0d:6a:29:86:c9:e8:bf:98:2c:d0:a8:cf:e0:3c:74:
         6e:41:1c:46:e7:be:b6:45:b9:d6:5f:75:ba:ff:e0:d3:4f:15:
         74:10:79:a6:34:25:18:06:3d:1c:51:c3:c2:2e:79:23:62:6a:
         90:94:53:e0:d4:05:a7:6c:23:96:8a:51:31:f1:a9:4f:c9:83:
         bc:ef:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:23 2026 by rpki-client