Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa
File:                     3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (raw, json)
Hash identifier:          GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=
Subject key identifier:   F1:B5:70:97:6E:A2:AD:D1:78:5A:B3:C6:E7:32:C1:67:08:7D:2D:2F
Certificate issuer:       /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Certificate serial:       47D2FD206268F6526A4748E73C6C8EEF6733D93B
Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa
Signing time:             Sun 03 May 2026 02:59:08 +0000
ROA not before:           Sun 03 May 2026 02:54:08 +0000
ROA not after:            Sun 02 May 2027 02:59:08 +0000
asID:                     150493
IP address blocks:        103.59.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
                          rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d2:fd:20:62:68:f6:52:6a:47:48:e7:3c:6c:8e:ef:67:33:d9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
        Validity
            Not Before: May  3 02:54:08 2026 GMT
            Not After : May  2 02:59:08 2027 GMT
        Subject: CN=F1B570976EA2ADD1785AB3C6E732C167087D2D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:f5:fa:04:5e:9f:b5:36:91:09:0c:de:83:
                    33:33:55:dc:a7:6e:d0:ae:b4:78:c1:55:52:3d:9a:
                    ea:a1:dd:bc:44:6a:e7:4c:d7:59:4e:e0:1f:5f:ec:
                    d8:f7:63:7e:80:dc:76:3f:1d:26:f8:5c:56:8d:9a:
                    e9:0d:58:e1:9a:b9:db:c3:7a:a7:57:71:46:1f:8e:
                    e9:08:f5:77:42:47:ae:52:74:65:cb:80:ee:6e:82:
                    1e:97:52:6c:b3:e2:fc:43:69:ff:c5:2f:72:f6:f9:
                    8a:b5:89:6d:37:b8:3d:b0:4c:0e:37:55:5d:47:65:
                    3b:e2:d7:82:08:7a:f3:aa:58:67:40:4a:e7:ab:a7:
                    ce:34:e5:a8:48:fd:52:e9:a6:ff:3e:47:e7:98:64:
                    7f:35:42:81:af:71:d5:6e:04:f8:21:9b:b1:a7:9f:
                    d2:17:92:bf:42:82:eb:b8:3b:9c:a4:d5:f2:ff:75:
                    8d:05:f1:ab:3b:b3:cb:90:1e:5b:3c:60:ea:71:3b:
                    c4:ee:4a:94:64:b4:78:43:4c:ef:9d:39:0a:e4:51:
                    4f:9b:ad:3a:3a:97:90:19:13:51:a6:3f:8d:86:ac:
                    e1:c8:a9:54:9f:be:e2:9a:1f:79:7d:93:0b:e8:d7:
                    34:92:da:37:ac:97:a8:88:17:ff:68:9a:b5:fc:52:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:70:97:6E:A2:AD:D1:78:5A:B3:C6:E7:32:C1:67:08:7D:2D:2F
            X509v3 Authority Key Identifier:
                keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:42:cf:b3:92:94:fc:27:cd:8b:6f:cd:22:45:3b:63:6d:04:
         2d:fb:ca:cb:00:4f:10:8d:d8:2b:39:3e:e9:43:a6:07:cd:9e:
         84:83:0c:8e:aa:a3:5a:d1:c3:c3:3f:49:03:d9:a8:e0:9b:2d:
         5d:b1:e1:1f:3c:5f:c9:34:32:95:83:cd:41:a6:b9:7f:3a:0c:
         32:a5:7e:ec:81:7f:7d:a6:e4:d3:f7:d8:2c:bc:f8:45:bb:e2:
         7a:77:51:b8:fd:c2:c9:45:0b:7b:30:80:8a:e6:79:0c:f6:27:
         4d:ca:d0:a8:92:7d:8a:f2:dd:0b:9c:1e:f3:26:16:bf:71:81:
         da:eb:f9:86:8d:83:bb:67:f6:1a:1d:3e:1e:d6:4c:30:5f:63:
         d7:d1:5b:c7:87:64:f3:df:20:fb:ac:7e:8b:2e:e2:d3:e8:99:
         0c:b6:35:7b:dc:05:e2:7c:9e:aa:a2:25:71:41:c2:5c:bf:67:
         ba:2d:8b:ac:d9:ba:41:3d:60:1a:18:b6:1c:6f:03:fa:89:36:
         da:d4:74:7b:28:86:c3:ca:d9:1b:e4:8a:3a:f3:48:1a:14:0e:
         1a:f5:4a:b4:09:be:c0:ed:64:88:ac:3e:09:2e:30:89:91:ad:
         70:7f:0b:1a:f1:de:23:57:53:48:db:51:aa:e3:b5:e2:72:e4:
         64:ae:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:37 2026 by rpki-client