Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa
File:                     3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (raw, json)
Hash identifier:          c92Ozjnq7svCLrrjEbFGyASoSulZ/x0HLm65BX9w5Mw=
Subject key identifier:   7E:9C:54:00:A7:CD:0C:A6:66:0C:B1:44:E8:11:CE:FE:93:D2:2E:7C
Certificate issuer:       /CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Certificate serial:       020852D79852F0337B36C1C4129453CE14BE4B22
Authority key identifier: 8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa
Signing time:             Sun 03 May 2026 02:58:56 +0000
ROA not before:           Sun 03 May 2026 02:53:56 +0000
ROA not after:            Sun 02 May 2027 02:58:56 +0000
asID:                     141926
IP address blocks:        103.165.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
                          rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:08:52:d7:98:52:f0:33:7b:36:c1:c4:12:94:53:ce:14:be:4b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
        Validity
            Not Before: May  3 02:53:56 2026 GMT
            Not After : May  2 02:58:56 2027 GMT
        Subject: CN=7E9C5400A7CD0CA6660CB144E811CEFE93D22E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:ec:a1:b3:01:dc:5c:f6:d6:75:7c:bf:68:
                    f5:62:20:d0:4a:75:61:11:b4:92:19:b6:fd:61:d7:
                    f6:e2:ee:50:81:c2:08:06:a6:82:4a:4d:4e:a3:d7:
                    a2:ba:a9:bd:aa:94:ea:d1:24:44:3c:f2:17:74:8a:
                    16:98:9b:19:f9:e8:ca:f6:56:9d:99:81:2e:ad:dd:
                    04:fb:a2:aa:d6:54:c5:9b:ef:ac:59:47:5f:2b:bf:
                    b1:07:89:b3:9d:aa:30:8a:6d:79:e7:4b:ac:6a:f9:
                    cf:5b:da:8d:d7:f7:56:ee:0c:ac:be:de:3f:18:2a:
                    e8:ff:94:6c:38:e1:33:c5:63:76:64:32:2c:55:45:
                    4c:ff:2f:12:fc:10:b7:c4:a1:45:f4:e8:61:45:de:
                    c0:2f:0d:44:67:63:20:cd:4a:ca:45:de:04:a2:3c:
                    b1:d9:b4:23:78:3e:c6:55:ad:ea:43:f4:7f:b6:72:
                    2c:bb:7b:60:52:9e:f3:74:6b:70:6e:85:5d:e3:9d:
                    ca:7f:56:8c:b6:6f:3b:2b:0c:f8:7d:43:39:8d:9c:
                    30:d0:de:12:76:22:9e:ce:df:ba:be:41:64:2f:28:
                    70:c3:57:78:4d:54:92:4b:54:70:10:96:36:01:44:
                    23:b6:ff:84:d9:7c:50:f9:27:ab:b7:09:14:17:25:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:54:00:A7:CD:0C:A6:66:0C:B1:44:E8:11:CE:FE:93:D2:2E:7C
            X509v3 Authority Key Identifier:
                keyid:8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:55:4d:33:97:f0:14:26:b6:29:75:bd:ec:c4:13:14:3f:86:
         16:4d:fd:04:0a:ba:5e:6c:3d:8d:8f:a7:f1:eb:e6:94:1d:9e:
         ad:7b:7f:9f:70:02:42:1f:17:e1:c3:80:be:95:c5:00:3f:92:
         2a:f0:ff:54:7e:8c:9e:ed:3d:08:0d:2e:d9:c5:a1:3e:fb:0c:
         4d:c2:a8:45:eb:f3:86:26:97:c3:67:1a:ff:75:ff:31:71:ef:
         0c:e5:cf:37:9c:e3:09:f0:59:90:d4:30:23:0b:40:19:aa:81:
         c6:6e:02:2d:66:61:8b:51:2f:d2:8e:53:8c:77:1d:8d:5c:90:
         1f:13:5e:de:ed:56:b6:6b:34:32:ed:5e:91:f5:18:17:33:cf:
         16:d6:cc:75:01:09:77:65:ff:89:2b:df:1e:8d:f6:d0:00:58:
         a1:37:03:18:59:85:8b:ba:db:5d:d5:ae:d0:7d:db:47:ac:7b:
         36:e2:45:b9:56:28:22:d8:e6:6f:76:ee:99:9b:25:02:46:f5:
         6d:ab:34:a5:c5:12:74:64:84:66:ee:47:4d:cc:dd:16:41:9f:
         87:a8:8d:ac:b4:31:bb:93:ff:85:9b:dd:46:39:d8:f9:c7:f4:
         2d:4e:08:3e:f0:35:b0:74:c4:b1:98:2b:c0:51:60:ad:d7:21:
         5d:81:35:41
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUAghS15hS8DN7NsHEEpRTzhS+SyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJBMjIxRUNDRDkyQzhDQjhERDU5NTAzQjI3MjJDNTdD
MzM2N0JGNjAeFw0yNjA1MDMwMjUzNTZaFw0yNzA1MDIwMjU4NTZaMDMxMTAvBgNV
BAMTKDdFOUM1NDAwQTdDRDBDQTY2NjBDQjE0NEU4MTFDRUZFOTNEMjJFN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCst+yhswHcXPbWdXy/aPViINBK
dWERtJIZtv1h1/bi7lCBwggGpoJKTU6j16K6qb2qlOrRJEQ88hd0ihaYmxn56Mr2
Vp2ZgS6t3QT7oqrWVMWb76xZR18rv7EHibOdqjCKbXnnS6xq+c9b2o3X91buDKy+
3j8YKuj/lGw44TPFY3ZkMixVRUz/LxL8ELfEoUX06GFF3sAvDURnYyDNSspF3gSi
PLHZtCN4PsZVrepD9H+2ciy7e2BSnvN0a3BuhV3jncp/Voy2bzsrDPh9QzmNnDDQ
3hJ2Ip7O37q+QWQvKHDDV3hNVJJLVHAQljYBRCO2/4TZfFD5J6u3CRQXJQLlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUfpxUAKfNDKZmDLFE6BHO/pPSLnwwHwYDVR0j
BBgwFoAUi6Ih7M2SyMuN1ZUDsnIsV8M2e/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWQ0NDBjODUtMzQ3MS00NDYxLWI1OTAtMTYwMWUxOWY1MzE4LzAvOEJBMjIxRUND
RDkyQzhDQjhERDU5NTAzQjI3MjJDNTdDMzM2N0JGNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84QkEyMjFFQ0NEOTJDOENCOERENTk1MDNCMjcyMkM1N0MzMzY3
QkY2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FkNDQwYzg1LTM0NzEtNDQ2MS1i
NTkwLTE2MDFlMTlmNTMxOC8wLzMxMzAzMzJlMzEzNjM1MmUzMTM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMyMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpZIwDQYJ
KoZIhvcNAQELBQADggEBAJZVTTOX8BQmtil1vezEExQ/hhZN/QQKul5sPY2Pp/Hr
5pQdnq17f59wAkIfF+HDgL6VxQA/kirw/1R+jJ7tPQgNLtnFoT77DE3CqEXr84Ym
l8NnGv91/zFx7wzlzzec4wnwWZDUMCMLQBmqgcZuAi1mYYtRL9KOU4x3HY1ckB8T
Xt7tVrZrNDLtXpH1GBczzxbWzHUBCXdl/4kr3x6N9tAAWKE3AxhZhYu6213VrtB9
20esezbiRblWKCLY5m927pmbJQJG9W2rNKXFEnRkhGbuR03M3RZBn4eojay0MbuT
/4Wb3UY52PnH9C1OCD7wNbB0xLGYK8BRYK3XIV2BNUE=
-----END CERTIFICATE-----
Generated at Wed May 13 15:35:37 2026 by rpki-client