Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa
File:                     3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa (raw, json)
Hash identifier:          meK6TlvZu6bzMUFEpp7QJ/gB0z11zPwPaWYU3HpMyxc=
Subject key identifier:   DB:36:4C:13:FD:AD:50:B4:57:19:63:13:14:9A:1C:47:8A:10:28:F9
Certificate issuer:       /CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
Certificate serial:       6A2689ED011503AF6D78B2977FEDF1A658B364DB
Authority key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa
Signing time:             Sun 03 May 2026 03:02:06 +0000
ROA not before:           Sun 03 May 2026 02:57:06 +0000
ROA not after:            Sun 02 May 2027 03:02:06 +0000
asID:                     141975
IP address blocks:        103.167.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl
                          rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:26:89:ed:01:15:03:af:6d:78:b2:97:7f:ed:f1:a6:58:b3:64:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
        Validity
            Not Before: May  3 02:57:06 2026 GMT
            Not After : May  2 03:02:06 2027 GMT
        Subject: CN=DB364C13FDAD50B457196313149A1C478A1028F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:c6:1b:ff:2c:9f:bf:52:a9:5e:43:ac:79:
                    92:49:04:b9:4c:4e:1b:30:79:5c:c2:ac:9d:72:48:
                    e2:67:79:c8:f0:d1:fc:32:5b:a5:88:ce:70:51:4b:
                    5a:03:28:bf:6c:4a:c6:ad:30:17:02:6e:b5:99:4d:
                    93:77:6b:35:cc:64:52:fd:d3:e1:b0:a9:72:8f:07:
                    25:ee:96:70:36:d1:96:32:a8:7d:c6:6c:e6:1d:49:
                    1d:a8:01:22:e4:29:fd:f3:3d:a2:1e:5b:b0:0d:0c:
                    ce:e2:79:71:c2:d6:81:45:55:dd:fc:ce:7e:2c:07:
                    32:45:0a:c5:32:0f:b0:d5:20:2b:40:7e:04:39:d2:
                    44:fa:71:cb:71:30:0a:c6:5b:5a:bb:fe:ed:4a:d5:
                    92:a5:f1:cd:ef:61:9a:7d:77:1e:b1:a6:17:7a:05:
                    51:03:e6:9c:2a:3a:c3:d3:78:8a:be:7e:51:e3:ad:
                    41:40:72:82:16:0d:65:48:07:82:a0:d4:3e:70:1b:
                    9e:b9:7a:9b:56:60:64:96:60:08:b2:ae:37:76:3d:
                    50:3a:40:3f:18:16:17:97:13:bc:22:aa:75:80:ab:
                    e6:ad:4c:19:35:05:e0:67:5b:c7:19:b1:fd:c6:06:
                    60:42:c5:4c:cd:c5:ba:54:98:f4:5a:0b:b3:52:d1:
                    4e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:4C:13:FD:AD:50:B4:57:19:63:13:14:9A:1C:47:8A:10:28:F9
            X509v3 Authority Key Identifier:
                keyid:15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ea:56:02:bb:85:58:ed:c7:de:a0:3f:27:77:f3:82:e6:dd:
         21:22:38:f4:fc:e5:2a:8c:1b:6a:08:0d:ab:fc:c1:18:76:a2:
         70:39:72:20:5f:d8:5d:37:e3:b3:2f:4c:ab:03:1c:42:e1:08:
         ef:8a:3f:e3:1f:0f:dc:c0:0d:ad:c0:5a:ed:76:fb:bc:73:16:
         6b:58:3c:35:87:36:bc:b1:3e:a0:eb:70:36:29:81:43:b7:8a:
         23:a2:1c:d3:40:33:f4:e2:56:98:6b:e3:06:99:fd:70:98:f3:
         c8:59:f2:cb:8d:f1:59:e0:91:4f:0f:aa:35:b5:71:0a:07:bd:
         f4:58:8a:fe:68:50:18:3a:b5:1e:8b:1e:65:e5:86:b3:fb:bb:
         d3:02:37:2e:b4:20:27:d8:fe:57:c9:62:3c:fb:67:c3:52:91:
         16:e0:64:00:f8:1d:d1:2e:5a:1a:ab:8b:21:6c:18:3f:70:97:
         35:23:b3:ba:97:d2:a9:b1:84:0a:8a:25:20:0f:38:a1:fc:82:
         1d:a8:df:a6:5f:1e:aa:a3:b1:79:73:70:13:4e:02:e6:10:25:
         6d:aa:bd:8f:83:ca:7d:5b:a3:c1:ef:bf:40:9a:98:6c:00:60:
         69:45:de:09:66:d5:94:58:4b:c8:95:ec:ce:6c:f6:db:ff:b3:
         fa:6b:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:52:51 2026 by rpki-client