Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa
File:                     3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (raw, json)
Hash identifier:          2Og4FIysb2wd35eqOCjNVfXf+ZPGg3kEvtQOXJnk+xE=
Subject key identifier:   E8:8E:EB:44:6C:5F:27:93:48:C9:19:DF:E2:CF:3D:05:9E:4B:6A:16
Certificate issuer:       /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
Certificate serial:       18C9364E09516FD7730B1137570B9D8CC69AEBCF
Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa
Signing time:             Sun 03 May 2026 02:58:22 +0000
ROA not before:           Sun 03 May 2026 02:53:22 +0000
ROA not after:            Sun 02 May 2027 02:58:22 +0000
asID:                     141669
IP address blocks:        103.162.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl
                          rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c9:36:4e:09:51:6f:d7:73:0b:11:37:57:0b:9d:8c:c6:9a:eb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
        Validity
            Not Before: May  3 02:53:22 2026 GMT
            Not After : May  2 02:58:22 2027 GMT
        Subject: CN=E88EEB446C5F279348C919DFE2CF3D059E4B6A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:e0:c3:c0:b3:06:d8:f6:8f:ce:c3:b4:f7:
                    1a:43:d2:07:49:1b:55:92:0a:31:d4:be:1e:84:72:
                    f3:d3:a3:98:9d:cf:5e:7c:18:f0:f6:36:9c:cf:b0:
                    f0:53:a3:80:da:df:ab:db:d7:0a:2c:ed:8f:9a:ca:
                    a8:d5:33:5a:3f:bc:5e:e9:a5:0e:eb:c4:81:15:95:
                    3f:86:b6:45:ef:71:1d:e9:a0:dd:79:48:84:71:bd:
                    ac:34:4f:25:3c:94:54:b5:66:29:3f:73:7c:03:db:
                    84:91:bb:5b:26:08:c5:89:fa:8d:3b:f3:46:f1:9b:
                    96:fe:9b:f8:f7:b2:43:22:ca:c2:14:ab:cb:fd:2d:
                    ca:ce:a3:ed:29:27:04:69:fe:3b:19:4a:bc:ba:3d:
                    5c:2c:b6:97:3b:19:43:92:88:fe:08:23:84:df:8b:
                    34:4a:85:c2:82:20:81:26:7f:ba:08:13:0b:af:d3:
                    04:78:f1:c5:69:78:4d:ee:a6:2f:f2:cb:51:fc:60:
                    35:59:fd:22:cd:2f:bd:4f:f8:40:a5:c6:d1:d6:f3:
                    d1:be:5e:1c:c4:5c:56:cf:3b:0c:43:6f:ae:82:b3:
                    02:bd:6c:e2:0d:8a:80:6c:35:05:0f:62:97:ec:d0:
                    47:42:14:5c:b6:9d:a0:9d:43:83:bd:34:91:9a:bf:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8E:EB:44:6C:5F:27:93:48:C9:19:DF:E2:CF:3D:05:9E:4B:6A:16
            X509v3 Authority Key Identifier:
                keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:e3:7e:6d:1a:39:17:39:07:a4:82:ae:a2:a0:ad:73:84:
         ce:59:5c:db:8a:59:0a:9b:3e:61:58:e3:88:95:99:d7:f5:d0:
         fb:00:61:96:71:e2:c9:ae:ac:7f:91:e5:8b:fa:9b:9d:a6:77:
         36:c8:33:b8:b3:c3:76:e8:99:dd:b6:7b:6e:fd:56:23:e2:41:
         ff:31:01:f5:00:6a:0b:71:a9:48:6e:e6:87:08:3a:24:15:65:
         0c:02:b2:22:b1:20:3d:c4:a5:92:0f:b3:ef:57:55:22:c8:93:
         04:e3:ca:8e:66:0b:9e:08:14:c9:d8:9f:a2:4d:00:89:83:bb:
         0a:83:6e:dd:86:72:57:7e:72:5d:3d:d9:e5:2f:89:af:37:02:
         be:d4:fc:66:66:f8:46:ab:74:e3:29:4b:a4:ae:cc:c8:26:cc:
         1d:1a:0e:b5:e5:e7:87:2a:5d:f4:26:23:52:d6:72:7a:9d:c8:
         22:6c:84:ce:a8:80:6d:f5:0d:7c:38:d7:00:d7:5e:24:63:ab:
         1f:a1:b7:11:89:4f:af:1e:f6:32:68:c4:66:69:9b:02:58:50:
         22:2b:d6:ae:6b:c0:1a:20:ea:f3:04:d5:1b:5b:5c:01:90:d4:
         b8:60:4c:40:7a:fa:6c:61:99:0c:fb:a8:2f:d9:b0:c8:d9:48:
         8a:24:a8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:04 2026 by rpki-client