Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa
File:                     3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (raw, json)
Hash identifier:          fXBAdM3eV/OnDDNzfHAaJqAymYnadEFB3GVcvsNkVi0=
Subject key identifier:   5C:09:8F:CE:D9:4E:4F:F5:8B:F8:11:35:2E:78:E7:8F:32:61:5C:45
Certificate issuer:       /CN=FD056BEADF6EF85F618897BD17A5F27B6A18B7B7
Certificate serial:       70F01AF65C3B26D5E536310913A877DDEF709B99
Authority key identifier: FD:05:6B:EA:DF:6E:F8:5F:61:88:97:BD:17:A5:F2:7B:6A:18:B7:B7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa
Signing time:             Sun 03 May 2026 03:02:18 +0000
ROA not before:           Sun 03 May 2026 02:57:18 +0000
ROA not after:            Sun 02 May 2027 03:02:18 +0000
asID:                     141962
IP address blocks:        103.164.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl
                          rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f0:1a:f6:5c:3b:26:d5:e5:36:31:09:13:a8:77:dd:ef:70:9b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD056BEADF6EF85F618897BD17A5F27B6A18B7B7
        Validity
            Not Before: May  3 02:57:18 2026 GMT
            Not After : May  2 03:02:18 2027 GMT
        Subject: CN=5C098FCED94E4FF58BF811352E78E78F32615C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:ad:4a:94:c9:98:69:5e:73:dc:24:7a:48:
                    11:d4:dd:0c:e0:b6:22:85:75:fe:40:44:42:5d:4d:
                    07:d0:91:67:31:29:6d:bc:1a:aa:a8:06:bb:de:32:
                    f3:14:4c:d8:78:f9:ab:b8:b1:52:2d:4f:c3:42:b8:
                    05:11:01:61:74:93:01:88:e6:0a:33:b3:e4:7f:95:
                    15:9e:70:d7:5f:84:c7:9e:b5:0e:5c:e5:36:81:cd:
                    dc:05:a6:c2:ee:2d:3b:fc:58:ca:f3:38:e2:41:d4:
                    33:95:aa:57:51:e5:90:da:8f:36:fb:b7:02:21:81:
                    d6:7a:22:a8:0d:1a:b0:ed:91:3d:be:c3:09:65:c1:
                    8f:c9:3e:27:fc:85:40:5d:4c:0d:4f:43:f3:ad:94:
                    60:67:04:c9:ec:f7:1f:55:7e:5a:10:fc:c7:1f:d9:
                    f7:19:e2:be:01:75:14:34:39:cd:0f:64:89:c8:ad:
                    bc:53:91:4d:fe:c0:cd:1d:d8:07:8b:e7:05:75:70:
                    04:1c:78:ca:57:98:65:29:32:6f:d8:f3:07:61:95:
                    df:ed:79:61:1a:1d:bf:27:ca:80:26:1d:a6:19:04:
                    7c:ae:12:93:6e:d3:22:0e:a3:e6:93:48:c1:b5:66:
                    d1:0f:98:23:61:48:81:dd:c2:f7:f5:c6:44:f8:85:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:09:8F:CE:D9:4E:4F:F5:8B:F8:11:35:2E:78:E7:8F:32:61:5C:45
            X509v3 Authority Key Identifier:
                keyid:FD:05:6B:EA:DF:6E:F8:5F:61:88:97:BD:17:A5:F2:7B:6A:18:B7:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:6d:c7:08:0e:67:8e:00:49:57:60:f8:fb:a5:40:a7:12:45:
         51:c7:44:f2:02:c8:20:08:3d:e5:75:1f:5b:60:42:db:e3:1d:
         a5:d0:fb:c8:c1:d1:9b:ea:cf:97:0b:30:00:3f:78:af:52:32:
         2a:49:e4:0f:4b:dc:28:2d:3e:27:91:d9:be:dc:a9:21:01:0b:
         4a:52:c2:bc:dc:25:71:15:a5:72:c6:01:c0:02:4e:8f:2f:e8:
         a9:1d:40:20:1f:e8:38:0e:3f:9f:4b:ed:99:bf:14:31:97:d1:
         34:cd:c3:ff:f7:ff:3a:a3:b3:63:b9:c0:b1:46:93:e4:6f:1a:
         63:b7:ee:d5:ca:08:f9:7b:f0:6e:87:c7:a7:82:6a:c9:d0:53:
         62:f3:7c:44:e6:55:68:45:3d:35:d9:d5:e7:ff:08:90:59:33:
         fe:a9:90:a0:6b:5b:73:0b:16:57:49:34:6e:f1:62:35:0f:db:
         c3:d0:e8:77:ea:93:15:7c:8e:03:af:35:f7:94:33:15:26:c8:
         9a:9b:56:f6:5a:bc:d1:72:f1:b9:b8:9c:13:bb:8b:84:93:b1:
         e8:2f:43:5d:57:b3:3c:04:60:72:2b:bb:8a:54:bc:eb:4e:a5:
         0b:5a:9d:cd:68:6a:93:0a:de:57:55:c9:32:71:78:f5:93:bf:
         08:34:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:22:51 2026 by rpki-client