Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa
File:                     3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier:          gco5c7WXqpAUv26il0bYrypILflhue4cLfp0jrvC588=
Subject key identifier:   B7:06:D5:83:18:F0:60:92:BD:81:80:77:76:46:EE:DB:FE:B6:B3:1E
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       26B364867D3345E68AFD15DA025C95134D71DA6B
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa
Signing time:             Sun 03 May 2026 03:02:36 +0000
ROA not before:           Sun 03 May 2026 02:57:36 +0000
ROA not after:            Sun 02 May 2027 03:02:36 +0000
asID:                     138077
IP address blocks:        103.16.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b3:64:86:7d:33:45:e6:8a:fd:15:da:02:5c:95:13:4d:71:da:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: May  3 02:57:36 2026 GMT
            Not After : May  2 03:02:36 2027 GMT
        Subject: CN=B706D58318F06092BD8180777646EEDBFEB6B31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:80:bb:11:34:79:dc:9d:78:19:0d:94:45:
                    54:aa:a2:74:d1:1a:49:d8:6f:05:b1:a9:1c:aa:64:
                    f2:00:aa:ff:e3:ed:c3:85:25:5e:87:18:ed:e0:00:
                    2b:9a:61:42:d8:b3:9a:ec:42:49:70:02:e6:b5:97:
                    08:25:d3:63:b2:b6:e0:b5:39:8a:92:37:ac:7e:31:
                    5c:3f:35:d5:5c:54:8b:01:5a:95:8a:e5:4f:77:34:
                    43:dd:f0:b6:e3:e5:4f:fb:54:56:e4:3a:45:18:97:
                    b2:a3:5d:6e:52:5d:15:fd:ea:a9:04:c7:6f:64:5b:
                    5f:6d:c6:0a:ed:c6:ca:83:46:37:c4:2f:13:7e:7c:
                    f3:63:7e:07:8b:4a:54:5d:b9:45:f2:0b:73:5f:8e:
                    3e:b9:ae:08:e8:2c:d2:8b:c4:4e:1b:13:49:d7:3e:
                    11:e4:29:c9:e6:5c:f5:82:3c:b6:43:6e:60:22:ba:
                    3f:21:37:e1:4e:39:d3:c1:b8:02:e8:83:5b:88:89:
                    8f:fe:0e:02:6c:4b:94:50:48:e0:4b:d0:cc:e8:f1:
                    12:22:97:4a:43:7e:e5:bb:1d:ca:9c:1f:b0:ee:92:
                    b3:74:06:31:71:12:ca:94:b2:eb:d8:cb:79:65:df:
                    13:0f:43:fd:d7:d6:e1:b7:d2:d7:70:8e:d0:6f:72:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:06:D5:83:18:F0:60:92:BD:81:80:77:76:46:EE:DB:FE:B6:B3:1E
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:70:f1:41:41:0c:b2:0e:9f:ae:99:45:6c:a8:5e:07:2c:be:
         cc:ff:37:24:5f:46:c2:f4:22:1b:89:27:c2:cc:4b:2e:d3:e2:
         47:98:75:72:ee:1a:b4:17:b7:76:7c:8f:26:cc:1f:6c:73:99:
         30:7e:a1:48:ff:c0:e6:bd:57:d0:0d:53:47:02:4e:5c:58:ba:
         3c:31:41:bc:ce:8b:ba:9c:4c:28:41:32:ad:82:c6:14:2a:60:
         51:f1:85:73:80:75:6f:65:f8:61:a3:de:83:ca:b4:bd:45:e2:
         bd:9a:61:44:b2:d8:cc:43:10:0d:ed:a7:58:f7:c0:d8:1b:fc:
         60:c6:ed:7a:07:99:00:a2:19:d4:eb:d1:7c:03:78:fd:c6:57:
         26:2d:6c:be:86:f9:1d:c1:0b:64:44:32:92:47:c5:08:95:f1:
         2b:ac:01:5d:9c:4f:d6:5a:d3:ba:a1:ab:bd:7f:86:c4:a6:20:
         5c:a4:f3:f9:7c:aa:37:d1:7b:4a:53:0f:0d:29:19:3a:0a:ed:
         73:b7:a6:cf:12:f7:83:df:12:26:f3:d8:21:76:e0:6c:a4:30:
         b1:2b:c1:61:2c:9e:8f:94:22:92:7a:ba:05:04:9e:40:00:de:
         73:c2:b8:1f:43:1d:ea:76:d2:81:50:78:33:50:81:8f:8f:d6:
         f2:73:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:16 2026 by rpki-client