Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          Ga2+EVu47dnfQahsKF64XntgkRzRqvyvpZlCrIJX5DE=
Subject key identifier:   C8:60:18:EE:68:5F:DE:A7:38:16:D2:8C:65:86:2F:50:98:3E:D1:30
Certificate issuer:       /CN=181AE15A381C4B158527A37B5B320F08B7BB589F
Certificate serial:       6B491098F511ABF65E3C38724227FD532195B787
Authority key identifier: 18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa
Signing time:             Sun 03 May 2026 02:59:25 +0000
ROA not before:           Sun 03 May 2026 02:54:25 +0000
ROA not after:            Sun 02 May 2027 02:59:25 +0000
asID:                     138131
IP address blocks:        103.164.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl
                          rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:49:10:98:f5:11:ab:f6:5e:3c:38:72:42:27:fd:53:21:95:b7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181AE15A381C4B158527A37B5B320F08B7BB589F
        Validity
            Not Before: May  3 02:54:25 2026 GMT
            Not After : May  2 02:59:25 2027 GMT
        Subject: CN=C86018EE685FDEA73816D28C65862F50983ED130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:11:d8:f9:f2:7c:1b:05:b5:de:ad:64:21:6d:
                    86:8c:7b:16:71:0f:c2:74:4d:e8:2c:01:29:51:43:
                    7f:0f:cd:17:be:76:8e:5f:b6:62:e8:f0:20:98:7a:
                    4a:4e:4e:70:61:73:db:80:ec:45:15:3d:a9:1b:fe:
                    76:b2:e2:aa:d7:30:72:e0:8a:45:5b:f5:ca:94:93:
                    28:44:04:f3:e0:1b:07:eb:9c:b4:6e:62:3a:d0:57:
                    86:4b:73:83:51:f3:72:f1:ba:b9:05:8e:24:42:04:
                    28:2e:c3:52:73:4a:4a:49:cc:ef:9c:08:ab:c5:b5:
                    56:2f:27:be:77:db:61:b5:76:d5:97:bc:6e:18:28:
                    a4:17:b7:a7:64:5f:c1:e9:34:dc:c8:ff:19:ca:b8:
                    65:2b:1b:c3:46:2c:a7:23:28:50:cb:52:77:a8:fc:
                    bc:39:b8:2d:7a:6c:21:28:09:fb:57:9d:12:54:7b:
                    80:df:56:8a:28:bc:b5:69:9f:85:41:ac:81:b1:a3:
                    a7:26:0f:4f:33:a1:5d:14:88:26:0d:3d:f1:4c:91:
                    e3:59:15:be:be:c2:40:4d:e7:03:3f:fc:a1:f4:92:
                    2d:2b:3e:f1:9c:77:02:97:25:1e:b0:f7:f7:22:b6:
                    16:b0:47:df:fe:e4:76:33:96:e3:70:d3:0c:25:95:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:60:18:EE:68:5F:DE:A7:38:16:D2:8C:65:86:2F:50:98:3E:D1:30
            X509v3 Authority Key Identifier:
                keyid:18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:47:e7:d4:ce:1e:46:48:85:e1:fc:47:1e:57:b6:e5:5b:88:
         c2:b2:9c:c0:1e:d9:b1:fc:6b:91:fd:ed:0e:34:87:b4:96:0b:
         0c:3f:d5:1f:f5:4e:9c:b9:c5:bb:77:a1:7f:0a:51:2f:96:a7:
         a6:40:5b:bf:6b:33:35:bf:8d:b3:bb:ef:cd:90:1c:5f:f3:11:
         51:d1:df:dd:04:76:94:28:9e:0b:a6:a4:c9:c1:bd:58:2f:0d:
         2d:37:20:d3:ef:8d:fa:d1:19:dc:19:19:69:00:f5:5d:ac:57:
         0b:6c:ea:67:0b:21:8d:16:48:20:bb:56:c9:ec:f4:ba:dc:27:
         77:a4:95:63:84:db:a7:40:a8:cd:8a:1b:71:0a:3b:a5:cf:bd:
         db:ed:b2:45:4c:27:b2:7a:73:f1:fc:7c:b5:48:8a:61:2d:4e:
         c6:99:9e:4e:b1:3f:cd:cc:cb:7d:41:95:55:99:33:51:6c:4a:
         e4:10:92:f7:43:03:82:32:24:58:c9:73:54:02:9d:36:7d:e5:
         54:24:7d:26:ba:f1:64:23:07:89:79:9e:25:30:84:07:5e:94:
         b0:af:69:31:6e:29:61:a4:6c:17:43:a5:e5:da:5d:68:8e:c9:
         f6:d6:76:1c:1b:90:e3:73:a2:78:40:29:11:45:2f:2f:85:fd:
         4f:ca:2f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:09 2026 by rpki-client