Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa
File:                     3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (raw, json)
Hash identifier:          Ko0biNHo/OilJd2E0SwGMCh23IyoKfHyT2KDez8VfH4=
Subject key identifier:   67:09:33:6C:C4:18:CE:8F:F8:2C:3E:98:A9:57:55:1E:6D:3B:F3:D7
Certificate issuer:       /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
Certificate serial:       4FE5690562325455D5E1156937FD8C5939B4B18A
Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa
Signing time:             Sun 03 May 2026 02:58:22 +0000
ROA not before:           Sun 03 May 2026 02:53:22 +0000
ROA not after:            Sun 02 May 2027 02:58:22 +0000
asID:                     141669
IP address blocks:        103.162.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl
                          rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e5:69:05:62:32:54:55:d5:e1:15:69:37:fd:8c:59:39:b4:b1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
        Validity
            Not Before: May  3 02:53:22 2026 GMT
            Not After : May  2 02:58:22 2027 GMT
        Subject: CN=6709336CC418CE8FF82C3E98A957551E6D3BF3D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:e7:95:9c:6f:b4:a1:5b:e2:5e:81:ab:c1:
                    fc:6d:09:cb:e8:eb:e7:23:f2:52:05:63:9d:66:8f:
                    11:da:8f:6e:97:70:b9:87:d4:51:8c:7d:a4:94:ff:
                    3c:c3:56:2c:1b:01:c2:77:7d:aa:c5:2e:86:c0:99:
                    19:a7:4a:71:f7:24:35:96:0a:66:c8:0f:d1:a7:df:
                    fd:83:bb:fc:0e:bf:f8:ed:da:92:55:fd:57:f4:6e:
                    1d:34:b8:0a:db:87:dc:2d:19:cc:c9:ff:eb:4e:16:
                    e5:26:5a:1b:5f:0a:1e:66:b8:96:2c:98:be:7d:02:
                    a0:9a:9c:ae:07:4d:b5:5f:0c:ba:74:c9:5b:b3:9b:
                    53:c8:78:46:0c:32:22:ad:94:60:4a:c1:43:8b:78:
                    5c:64:05:6b:96:ee:58:12:94:df:a5:79:2e:00:9f:
                    70:f4:ef:c8:3b:e8:70:d5:c2:a8:5a:6b:06:f4:fc:
                    70:04:f0:64:fa:06:01:e4:12:44:d1:96:ec:5a:ee:
                    24:7f:26:b7:16:3b:56:1e:f5:39:e0:9f:d1:e7:af:
                    1a:b1:c9:68:8c:bd:9b:4e:72:4d:a8:cb:e5:4a:f0:
                    08:d0:e4:25:47:79:39:94:dc:11:ba:88:94:9e:ca:
                    8f:6d:85:e5:4a:eb:a3:f1:40:5b:2d:11:34:45:f5:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:33:6C:C4:18:CE:8F:F8:2C:3E:98:A9:57:55:1E:6D:3B:F3:D7
            X509v3 Authority Key Identifier:
                keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:d9:8f:15:d0:3d:59:bb:aa:b3:f0:b3:a1:05:e0:d2:f3:2d:
         b2:14:78:80:6d:38:ee:0e:13:7e:26:d7:75:95:1a:af:38:d0:
         83:75:2f:ee:cd:b7:37:b7:c5:3d:64:61:61:1e:97:1a:41:56:
         ce:1c:e3:06:ba:69:95:2b:3b:9a:0a:76:bf:fb:1c:bf:45:8c:
         0d:18:d8:5c:72:18:d7:51:62:ad:6d:2a:27:ef:9b:b3:86:85:
         45:e0:74:bc:98:17:37:80:2e:65:ce:10:ae:3e:72:60:01:d4:
         67:18:50:8f:77:70:f6:73:50:94:9b:bc:e1:f3:c1:9d:04:b5:
         58:e5:78:53:6e:36:27:54:99:a8:c5:18:6e:0d:b6:fe:8e:aa:
         d1:50:71:b7:f8:f3:14:06:8f:73:36:5d:81:ea:15:cc:42:7b:
         06:b2:d7:ac:35:05:bd:e4:bf:5e:0b:8e:2a:7c:a2:79:ac:02:
         61:2d:06:c3:b3:b1:2d:d0:3e:ec:93:36:d5:3b:12:5d:27:20:
         a0:b5:ee:43:90:3b:2d:9d:b4:f0:be:ac:af:9c:5d:46:cc:5f:
         e5:d3:a9:36:cf:bd:32:f8:6a:c7:80:14:77:82:12:fb:6d:a0:
         41:ab:7c:fa:8c:ff:f6:9a:96:72:ac:53:6d:15:27:04:82:5a:
         be:a3:e1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:01 2026 by rpki-client