Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa
File:                     3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier:          pBvBGLopvQdoZtJVsgZWZ9wA+Pu9rrcY8EO/1TZFlpo=
Subject key identifier:   B6:DD:41:5F:EA:C5:45:EF:BF:77:FD:B3:BC:35:50:93:F9:16:A3:A9
Certificate issuer:       /CN=637A957BABD264BD486DB1ED9AD344531E09DAA9
Certificate serial:       31C0048AF2E25377177F9D8D6090ED73884CA8AD
Authority key identifier: 63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa
Signing time:             Sun 03 May 2026 03:03:09 +0000
ROA not before:           Sun 03 May 2026 02:58:09 +0000
ROA not after:            Sun 02 May 2027 03:03:09 +0000
asID:                     38320
IP address blocks:        103.160.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl
                          rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c0:04:8a:f2:e2:53:77:17:7f:9d:8d:60:90:ed:73:88:4c:a8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637A957BABD264BD486DB1ED9AD344531E09DAA9
        Validity
            Not Before: May  3 02:58:09 2026 GMT
            Not After : May  2 03:03:09 2027 GMT
        Subject: CN=B6DD415FEAC545EFBF77FDB3BC355093F916A3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:0c:cf:37:9b:6e:c5:c2:df:ea:29:20:7b:
                    fb:56:4d:ee:e6:da:84:45:da:75:96:7f:7e:48:6a:
                    0c:4b:1c:8d:f9:0d:57:66:20:fc:a3:30:ed:89:52:
                    77:e1:29:9f:3c:27:a2:bf:0c:9e:39:0d:82:cc:75:
                    20:a4:a0:f1:0b:6b:2e:48:88:f8:49:93:ac:9e:ba:
                    3c:20:ab:e7:89:2b:8d:97:90:75:ff:bb:bb:68:36:
                    e2:b9:bb:7f:75:ac:f8:42:dc:07:f8:25:4b:8e:45:
                    93:f9:37:69:96:0f:bd:ff:c1:c4:c5:20:f3:0b:3a:
                    ac:3f:a1:b8:7b:42:09:0a:8b:12:15:c1:0f:a0:0b:
                    f4:f8:47:38:6b:dd:a9:28:a7:8f:bc:74:dc:42:c5:
                    c1:77:ae:c8:08:df:9e:8e:a3:3b:95:47:91:fa:7e:
                    82:ac:a1:b9:1a:2e:b6:84:51:b1:2f:11:a1:a4:46:
                    e5:9e:e0:0f:37:c2:21:3d:35:e8:79:67:92:8d:fd:
                    cf:84:49:0c:b0:c0:34:95:36:d7:30:9b:7c:f4:5a:
                    ed:53:21:79:9a:56:51:3e:1c:ac:5f:c5:93:58:6d:
                    63:53:f3:b0:34:e7:06:14:40:93:f4:17:c8:f6:fe:
                    ac:bb:2e:62:16:6f:d1:44:5e:df:9c:38:0d:e3:af:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DD:41:5F:EA:C5:45:EF:BF:77:FD:B3:BC:35:50:93:F9:16:A3:A9
            X509v3 Authority Key Identifier:
                keyid:63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:cb:f7:a3:65:46:64:90:96:17:1d:8f:bb:08:a3:dc:ba:b9:
         3f:a3:31:99:af:7f:cc:92:a4:e3:da:80:cf:e2:dc:e9:3b:b5:
         22:30:a8:e7:fe:5e:c5:6b:1f:a0:9f:ea:b1:96:aa:bb:1f:e2:
         53:35:e1:9b:d1:30:48:c5:95:44:2c:b2:ed:59:bb:f1:75:c7:
         15:33:61:60:8f:09:f8:ef:9c:f3:ec:bc:9f:09:1d:d0:64:a8:
         5d:00:f6:4b:11:55:6f:2f:5b:40:31:33:22:9c:6e:4c:01:a7:
         66:40:4f:4c:be:79:b2:a8:39:eb:ae:85:e0:65:95:45:fd:57:
         cc:2a:e7:26:0d:01:ab:1e:df:02:9b:4b:23:4b:8e:20:59:34:
         60:a3:87:bc:a4:e4:d3:19:ee:e4:01:b0:90:2a:5b:26:85:c8:
         72:57:e1:49:b7:f5:0d:10:2f:8c:c0:e5:ca:4f:cc:59:a8:25:
         97:20:21:93:cb:62:6e:10:b6:e3:e5:25:81:7d:45:61:56:da:
         de:b2:15:ae:89:0f:0b:95:3e:7e:37:46:cd:81:64:28:5b:56:
         5a:23:86:9d:8a:ae:18:f6:c3:06:b2:68:e0:02:98:ad:2a:16:
         5a:34:7d:d9:c2:fe:06:a7:76:3c:92:d5:60:c3:ec:20:7f:d3:
         41:30:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:19 2026 by rpki-client