Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa
File:                     3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (raw, json)
Hash identifier:          4plAU79kda3Ea5yOILPSDn9wEB9ioJGFSdINnT7EfAQ=
Subject key identifier:   47:EC:9E:51:92:0D:D9:F7:B3:48:4D:14:1F:1D:B8:E9:78:0A:FB:6C
Certificate issuer:       /CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Certificate serial:       69AC70FECBEB93D34CBB1ADB62B06B59DEBE179E
Authority key identifier: 8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa
Signing time:             Sun 03 May 2026 02:58:57 +0000
ROA not before:           Sun 03 May 2026 02:53:57 +0000
ROA not after:            Sun 02 May 2027 02:58:57 +0000
asID:                     141926
IP address blocks:        103.165.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
                          rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ac:70:fe:cb:eb:93:d3:4c:bb:1a:db:62:b0:6b:59:de:be:17:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
        Validity
            Not Before: May  3 02:53:57 2026 GMT
            Not After : May  2 02:58:57 2027 GMT
        Subject: CN=47EC9E51920DD9F7B3484D141F1DB8E9780AFB6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:94:bc:42:03:11:a5:67:c6:d6:a2:3c:9d:51:
                    55:1d:3b:07:83:a3:fb:bc:64:4d:da:4c:62:ec:db:
                    01:e5:dd:da:e2:97:28:a5:e1:93:29:a7:db:08:09:
                    49:bc:0d:c7:bf:5c:f8:a8:4b:32:9b:cb:5b:82:86:
                    b0:34:70:33:d5:0c:9f:d7:2b:d9:1b:91:59:20:f9:
                    4e:e5:e3:15:a1:b1:a7:fc:fa:e1:ed:9f:13:eb:30:
                    ca:e6:8d:d9:7a:5e:de:ea:7f:a1:6d:88:13:44:3e:
                    c7:71:79:08:de:37:ab:4b:6b:d9:2f:0b:04:00:19:
                    a5:ec:b3:39:c1:51:5f:ae:2b:18:4b:f8:8e:e0:f5:
                    bc:83:e8:de:db:0b:fe:75:67:6a:54:03:c5:31:12:
                    00:d0:b7:cf:94:84:6f:a2:50:bd:74:e8:50:7c:85:
                    d9:cc:93:42:26:68:b7:65:d0:30:f2:f1:03:6c:47:
                    41:d9:77:18:be:5c:75:db:6c:a6:c2:08:5d:26:55:
                    70:31:48:2f:d4:9d:94:5e:c8:d2:46:74:fb:79:d0:
                    16:f7:f2:f1:14:53:05:ef:b8:84:1a:72:37:46:a4:
                    6a:e2:33:af:e0:09:8d:f4:5a:43:c5:e2:cc:43:51:
                    72:29:e2:a2:5c:11:cc:e1:b6:bd:ed:9b:c6:3b:99:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EC:9E:51:92:0D:D9:F7:B3:48:4D:14:1F:1D:B8:E9:78:0A:FB:6C
            X509v3 Authority Key Identifier:
                keyid:8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:c4:0d:ed:ff:b2:d9:b5:9c:92:b6:e3:80:b5:69:b3:46:39:
         a7:bf:3c:9c:8c:61:9b:1f:86:0c:fa:a3:b0:4e:69:a9:6c:22:
         d8:41:26:34:85:2a:b0:40:2e:ff:f2:b9:b9:96:2f:17:52:8a:
         3f:e3:06:a4:c1:fc:7d:b7:97:d2:f1:3c:25:ba:4c:33:8f:2a:
         6b:f2:70:0c:d5:78:16:4a:96:14:cf:3c:de:17:37:9c:74:fe:
         e2:a5:e2:06:cc:57:6a:9b:55:1d:bd:cf:ec:7b:d0:27:9b:93:
         24:18:83:49:fe:36:a5:82:44:a3:af:c5:2c:0c:eb:3e:35:87:
         b1:86:39:17:fe:57:13:a0:e5:7d:92:3b:00:88:a7:7a:32:0e:
         14:0e:fb:c0:ad:74:07:c7:97:12:fa:53:5e:c2:46:0a:ad:8f:
         ef:c9:bb:37:5b:c6:36:f6:a8:53:81:f4:e3:c8:4e:b8:3b:9e:
         eb:b1:46:9a:d9:00:7e:ce:21:04:13:56:8f:f7:e9:bf:d5:57:
         95:e1:89:7d:b3:e6:6f:c9:c0:c1:74:d0:ce:d3:1c:35:e1:73:
         ce:09:2b:78:c9:7d:64:be:33:67:e3:53:9b:00:be:f9:ec:40:
         d3:fe:9d:27:1e:4c:ca:c0:5e:e7:cf:51:40:41:64:2f:bd:1d:
         9d:ac:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:25:21 2026 by rpki-client