Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa
File:                     3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (raw, json)
Hash identifier:          VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=
Subject key identifier:   F6:24:91:F6:7E:95:8E:9D:AD:84:9C:A5:99:06:F2:A5:B7:5A:C3:21
Certificate issuer:       /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Certificate serial:       4C3B3DE395F79047A7B503020AC09CC1D9326B89
Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa
Signing time:             Sun 03 May 2026 02:59:07 +0000
ROA not before:           Sun 03 May 2026 02:54:07 +0000
ROA not after:            Sun 02 May 2027 02:59:07 +0000
asID:                     150493
IP address blocks:        103.59.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
                          rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3b:3d:e3:95:f7:90:47:a7:b5:03:02:0a:c0:9c:c1:d9:32:6b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
        Validity
            Not Before: May  3 02:54:07 2026 GMT
            Not After : May  2 02:59:07 2027 GMT
        Subject: CN=F62491F67E958E9DAD849CA59906F2A5B75AC321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:0c:68:5d:f1:4a:62:23:29:d5:65:99:8b:
                    c7:3d:70:0d:99:86:e9:3f:9e:76:5e:31:f4:6c:3b:
                    da:b4:68:c5:85:a1:04:30:11:8f:fa:e2:fa:aa:ef:
                    15:46:9e:46:79:d7:91:c9:ae:98:3b:74:55:91:30:
                    f5:b0:d7:5a:0e:fe:73:ad:e7:8c:0b:a4:f6:69:bf:
                    9b:30:4b:41:bf:55:b5:8b:62:ed:e3:aa:96:5f:55:
                    fd:0b:83:b5:31:99:5c:6f:05:b1:ff:e5:fc:70:c5:
                    ba:95:6f:d4:c3:ce:58:9b:98:80:91:41:75:66:cf:
                    1d:e9:49:53:08:88:2a:a1:1e:87:ee:e6:3b:4d:1f:
                    33:f7:de:78:a9:c6:34:66:0d:4e:f8:c3:3f:6f:17:
                    f8:bc:5f:52:94:53:d8:80:c8:8d:31:9e:09:b2:1a:
                    79:ac:4d:c9:c7:6b:7e:1d:b5:a0:26:62:65:d6:ab:
                    3c:aa:c8:ef:b1:91:1c:e0:1f:03:42:01:2b:cc:a9:
                    1d:d4:67:89:3b:dc:11:3e:ea:55:0a:39:8c:9b:76:
                    21:11:0c:d6:a6:a8:7c:ef:7e:96:4d:eb:a0:4f:15:
                    3e:63:ba:b5:d0:d8:89:19:c7:c9:ff:86:28:a7:3d:
                    4b:d0:dd:6d:b7:9a:80:b1:02:ec:38:55:cd:dd:b2:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:24:91:F6:7E:95:8E:9D:AD:84:9C:A5:99:06:F2:A5:B7:5A:C3:21
            X509v3 Authority Key Identifier:
                keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:35:5a:69:31:95:ba:4c:76:be:72:20:d3:f3:1a:71:79:
         62:e3:e9:24:79:a0:c0:13:8a:07:5a:20:56:e3:ca:0e:46:58:
         61:0c:16:20:1e:94:20:4f:e7:08:63:fe:86:17:b7:93:07:e9:
         63:cd:0a:46:fb:25:a4:0a:6a:d2:36:c9:f5:98:47:f8:71:2d:
         1b:0c:35:16:eb:69:ed:d1:4d:60:a0:ce:40:a6:d1:13:a6:6c:
         06:5b:f7:0e:8e:87:95:5d:c3:34:c8:f3:0b:ad:77:57:85:2b:
         9e:1c:32:e5:c6:57:63:d4:df:63:4f:3e:1d:b1:0a:94:23:95:
         0e:de:8d:6c:12:cf:d8:86:57:1c:04:7d:88:9a:18:8e:83:7e:
         d0:04:15:fb:b0:9b:ed:58:85:02:72:9f:20:4a:53:50:49:d3:
         3e:8e:8b:4c:aa:32:01:e4:8d:91:42:64:65:53:39:10:ea:64:
         d2:ee:84:2a:63:a6:b6:62:ba:72:c4:24:ed:52:17:07:98:75:
         82:46:7c:ba:2a:8d:ea:2e:36:8b:93:3a:6b:03:c0:74:bf:4f:
         7a:27:58:f9:2f:6a:85:52:e9:c6:b9:3a:57:5b:ee:5f:f8:1c:
         8a:06:4b:0f:7e:88:72:a9:65:d2:bb:0f:e2:6f:46:cf:0b:07:
         78:fb:86:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:04 2026 by rpki-client