Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa
File:                     3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (raw, json)
Hash identifier:          00GZwg/Y9T0ZdKSWulyuB3JLDZ01RudXgy9Ju+lMmEg=
Subject key identifier:   0E:24:E6:DE:8A:B0:ED:DC:95:43:6D:40:CE:9F:0F:84:2C:40:30:88
Certificate issuer:       /CN=A0255156E104D661F25134DFEF8EF05BD73E8C04
Certificate serial:       7B54485EEBDD5AAABB34D897EE69FCBDF79E41BD
Authority key identifier: A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa
Signing time:             Sun 03 May 2026 03:07:20 +0000
ROA not before:           Sun 03 May 2026 03:02:20 +0000
ROA not after:            Sun 02 May 2027 03:07:20 +0000
asID:                     141622
IP address blocks:        103.161.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl
                          rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:54:48:5e:eb:dd:5a:aa:bb:34:d8:97:ee:69:fc:bd:f7:9e:41:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0255156E104D661F25134DFEF8EF05BD73E8C04
        Validity
            Not Before: May  3 03:02:20 2026 GMT
            Not After : May  2 03:07:20 2027 GMT
        Subject: CN=0E24E6DE8AB0EDDC95436D40CE9F0F842C403088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c4:e7:7e:96:80:2f:21:62:08:8e:40:b0:c8:
                    2e:05:dd:36:80:e0:29:7e:a0:9f:2e:0a:60:0a:d4:
                    03:d3:53:e6:1a:29:32:df:2e:79:a0:58:e1:e8:fa:
                    a7:c1:62:48:76:36:98:55:65:40:b0:ed:46:45:88:
                    70:54:ea:1d:c2:ed:cc:e9:53:72:5a:b9:53:93:fc:
                    a6:a8:85:90:89:ec:96:f7:ef:97:3e:36:6d:90:d1:
                    85:a3:85:ad:61:9f:0b:3e:3b:79:96:76:60:1d:02:
                    13:94:04:b9:51:a1:81:41:1e:14:7e:6c:7a:67:52:
                    a2:45:f9:84:d7:e7:55:aa:1a:f6:7c:d1:b4:7d:83:
                    f0:09:1c:b0:2d:ae:fa:73:27:b7:f7:4b:37:44:1b:
                    1b:70:ef:31:cc:28:62:10:75:4d:a4:fc:50:04:39:
                    16:cd:45:e7:4a:41:b9:da:f5:6f:13:30:c2:0c:51:
                    ad:d3:09:88:04:6e:a8:bd:b2:4e:9d:d6:75:d2:e4:
                    6f:dd:97:f0:a3:76:10:f2:f2:ac:e0:23:7b:f2:f0:
                    a2:25:a9:8b:07:b1:59:bb:bf:73:ac:4b:aa:ee:b5:
                    ed:e7:32:51:6c:6b:44:65:79:f9:21:21:b9:09:e2:
                    01:b0:c2:f4:21:d6:d0:4d:0c:5b:7d:51:9a:d2:d4:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:24:E6:DE:8A:B0:ED:DC:95:43:6D:40:CE:9F:0F:84:2C:40:30:88
            X509v3 Authority Key Identifier:
                keyid:A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:b2:94:5e:38:ed:25:ee:9b:d6:6d:a9:eb:e7:bf:30:da:6d:
         65:1b:8f:e5:8d:03:b2:67:17:5b:ca:e1:c7:fa:21:bd:68:b2:
         36:73:9b:90:1b:e8:ca:0a:48:45:59:44:4e:b9:59:4d:f1:58:
         c5:e5:b1:12:9d:10:3a:c6:93:65:c0:20:c5:4d:8a:17:71:d8:
         cb:b6:25:29:11:b3:ac:ce:7d:fd:87:cf:53:35:27:52:2d:5f:
         0f:d0:45:0e:a6:d2:54:a3:84:12:2d:4e:dc:f8:9a:22:e9:8d:
         aa:55:08:de:1a:e0:7f:12:e0:8b:ca:db:76:3e:26:e3:ad:58:
         ac:32:f3:a6:8b:3a:6b:c3:bc:5b:cb:be:df:df:0e:2d:a0:b7:
         35:d3:af:35:05:1c:25:ec:d7:33:4d:6e:e1:53:bf:dd:79:8f:
         a7:70:fe:02:9d:3a:ac:54:54:3b:c7:ba:64:ea:88:b6:6d:03:
         c5:0b:74:13:31:1c:2e:07:ab:39:28:80:49:ec:b7:61:39:d2:
         bc:4d:e7:97:30:b5:d7:37:fb:ea:93:f0:18:57:7b:17:12:62:
         77:68:ca:c4:25:51:24:4c:3d:63:95:28:03:dc:ae:73:95:fd:
         c2:79:4d:b7:50:f1:22:5f:16:88:5a:66:c7:7f:8c:fb:a7:cf:
         fe:79:7a:03
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUe1RIXuvdWqq7NNiX7mn8vfeeQb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYwNUJE
NzNFOEMwNDAeFw0yNjA1MDMwMzAyMjBaFw0yNzA1MDIwMzA3MjBaMDMxMTAvBgNV
BAMTKDBFMjRFNkRFOEFCMEVEREM5NTQzNkQ0MENFOUYwRjg0MkM0MDMwODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhxOd+loAvIWIIjkCwyC4F3TaA
4Cl+oJ8uCmAK1APTU+YaKTLfLnmgWOHo+qfBYkh2NphVZUCw7UZFiHBU6h3C7czp
U3JauVOT/KaohZCJ7Jb375c+Nm2Q0YWjha1hnws+O3mWdmAdAhOUBLlRoYFBHhR+
bHpnUqJF+YTX51WqGvZ80bR9g/AJHLAtrvpzJ7f3SzdEGxtw7zHMKGIQdU2k/FAE
ORbNRedKQbna9W8TMMIMUa3TCYgEbqi9sk6d1nXS5G/dl/CjdhDy8qzgI3vy8KIl
qYsHsVm7v3OsS6rute3nMlFsa0RlefkhIbkJ4gGwwvQh1tBNDFt9UZrS1C6/AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUDiTm3oqw7dyVQ21Azp8PhCxAMIgwHwYDVR0j
BBgwFoAUoCVRVuEE1mHyUTTf747wW9c+jAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2NiZmIyMjgtZmQwNS00YWZkLTg3YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZF
MTA0RDY2MUYyNTEzNERGRUY4RUYwNUJENzNFOEMwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMDI1NTE1NkUxMDRENjYxRjI1MTM0REZFRjhFRjA1QkQ3M0U4
QzA0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NjYmZiMjI4LWZkMDUtNGFmZC04
N2JkLWVkNTgwYjU1MDM2Zi8wLzMxMzAzMzJlMzEzNjMxMmUzMTM5MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnocMwDQYJ
KoZIhvcNAQELBQADggEBACOylF447SXum9ZtqevnvzDabWUbj+WNA7JnF1vK4cf6
Ib1osjZzm5Ab6MoKSEVZRE65WU3xWMXlsRKdEDrGk2XAIMVNihdx2Mu2JSkRs6zO
ff2Hz1M1J1ItXw/QRQ6m0lSjhBItTtz4miLpjapVCN4a4H8S4IvK23Y+JuOtWKwy
86aLOmvDvFvLvt/fDi2gtzXTrzUFHCXs1zNNbuFTv915j6dw/gKdOqxUVDvHumTq
iLZtA8ULdBMxHC4HqzkogEnst2E50rxN55cwtdc3++qT8BhXexcSYndoysQlUSRM
PWOVKAPcrnOV/cJ5TbdQ8SJfFohaZsd/jPunz/55egM=
-----END CERTIFICATE-----
Generated at Wed May 13 05:44:04 2026 by rpki-client