Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa
File:                     3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa (raw, json)
Hash identifier:          mceGSTa1KkilNVeVE/R8JALesPG1r2/fVL6j+DUnje0=
Subject key identifier:   AF:7A:35:89:FC:11:5D:AB:96:CA:60:2A:CD:30:26:BB:80:E6:6B:57
Certificate issuer:       /CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
Certificate serial:       441CE5C41554F2D94FEB1E80CC18617C1392C55D
Authority key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa
Signing time:             Sun 03 May 2026 03:02:06 +0000
ROA not before:           Sun 03 May 2026 02:57:06 +0000
ROA not after:            Sun 02 May 2027 03:02:06 +0000
asID:                     149175
IP address blocks:        103.167.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl
                          rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1c:e5:c4:15:54:f2:d9:4f:eb:1e:80:cc:18:61:7c:13:92:c5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
        Validity
            Not Before: May  3 02:57:06 2026 GMT
            Not After : May  2 03:02:06 2027 GMT
        Subject: CN=AF7A3589FC115DAB96CA602ACD3026BB80E66B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:05:d6:34:20:6a:b2:36:dc:e6:df:cf:a1:
                    f1:74:74:59:63:7d:32:d1:9b:d5:e3:7d:f4:44:55:
                    88:c3:64:04:c8:4d:32:29:d2:90:f0:fa:36:30:1e:
                    0d:3f:0e:b3:db:59:d0:b1:e6:6c:2a:11:58:fe:c8:
                    aa:3b:91:27:7e:1a:1b:83:fb:72:10:1e:07:bf:28:
                    42:28:c9:e1:91:42:11:27:4f:99:b3:15:73:6b:5b:
                    68:05:6e:7d:23:86:8d:8f:45:5f:7b:ad:40:16:b8:
                    bc:f2:04:ff:e8:d7:77:98:e8:ff:f0:e3:24:86:a9:
                    c2:ee:d1:04:41:90:58:93:7a:26:7d:1c:59:0b:53:
                    41:71:e2:bd:72:2c:2a:d9:3d:27:40:38:71:0f:ff:
                    25:e8:e3:4c:49:02:f4:13:6a:05:4d:28:fc:7e:a2:
                    92:87:96:ba:74:72:49:a8:d8:5c:d2:7b:4a:7a:ac:
                    61:24:1c:f3:ca:3f:62:b1:11:c7:31:e6:f6:a9:e4:
                    49:8e:9b:ed:a5:e0:5a:0e:23:ef:6e:ba:c9:5d:7b:
                    ac:8d:bf:5e:b3:d2:00:00:c7:df:27:1e:bb:7e:4a:
                    12:26:c1:ae:f0:fb:43:f4:75:a7:7c:61:1e:af:02:
                    03:6c:cc:fc:24:bc:2c:5d:7a:55:46:8c:47:07:76:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7A:35:89:FC:11:5D:AB:96:CA:60:2A:CD:30:26:BB:80:E6:6B:57
            X509v3 Authority Key Identifier:
                keyid:15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:49:dc:c0:ce:38:2d:5a:43:ff:6e:f6:71:39:d6:18:c0:02:
         c8:e6:02:71:34:f2:9e:d6:f7:4e:a0:67:60:bd:6f:06:49:a3:
         76:ba:3f:51:60:0b:52:cb:f2:3d:d2:b0:54:83:62:4d:0b:b5:
         31:54:5b:e5:fc:5d:25:89:32:92:4e:65:97:ae:17:57:30:98:
         e7:7a:b2:b3:b2:e2:a4:35:31:26:78:45:b0:ed:14:5a:b0:97:
         62:52:59:22:85:a4:ed:fb:20:8a:b6:3d:2a:17:5a:f1:e1:ff:
         16:ce:4a:03:7f:5e:ce:68:84:d7:d7:bd:d4:75:cb:bf:0f:eb:
         b9:de:dd:16:a1:df:de:83:9d:b2:6d:e7:95:8b:09:83:a2:a2:
         14:7c:7c:02:91:d6:78:b9:36:47:92:76:0d:71:49:96:b4:6a:
         15:5c:78:e8:ef:3a:65:6c:f1:85:3d:83:5a:d1:66:1b:f6:9d:
         a7:0b:49:04:c2:54:01:0b:3f:9c:a7:33:5c:da:28:52:2e:a6:
         37:9c:a8:24:ea:95:ea:b4:ca:7b:50:22:17:4a:bc:51:c0:34:
         93:36:2d:50:68:d5:73:da:7f:14:74:63:58:28:9e:e7:1f:c3:
         7e:45:22:f1:c3:08:6b:c6:54:a9:fd:82:3d:41:13:7a:8b:e2:
         1c:70:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:19 2026 by rpki-client