Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
File:                     3130332e3136322e312e302f32342d3234203d3e2036393339.roa (raw, json)
Hash identifier:          OGTDZ4C85+sk0i3Bo0o5Tb8rraHPH4OeiZ0vyZPql84=
Subject key identifier:   B5:BD:86:B8:5D:D4:28:48:27:7B:86:A5:74:3D:1B:DF:55:AC:7B:F1
Certificate issuer:       /CN=49F46115365EBDF5886E7F2CF139E606717666E0
Certificate serial:       43075BA76197B65B096B18C5C3360765324A5A4F
Authority key identifier: 49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
Signing time:             Sun 03 May 2026 03:08:28 +0000
ROA not before:           Sun 03 May 2026 03:03:28 +0000
ROA not after:            Sun 02 May 2027 03:08:28 +0000
asID:                     6939
IP address blocks:        103.162.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl
                          rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:07:5b:a7:61:97:b6:5b:09:6b:18:c5:c3:36:07:65:32:4a:5a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F46115365EBDF5886E7F2CF139E606717666E0
        Validity
            Not Before: May  3 03:03:28 2026 GMT
            Not After : May  2 03:08:28 2027 GMT
        Subject: CN=B5BD86B85DD42848277B86A5743D1BDF55AC7BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:d9:37:16:36:91:4c:42:1a:61:99:db:6d:
                    44:69:fa:3f:16:c8:21:f2:42:42:6d:6a:de:62:92:
                    34:8c:83:1e:85:41:29:8e:e4:a7:6a:5b:f8:41:01:
                    f2:0d:10:96:a4:e8:da:5c:3c:ef:71:5e:e7:c0:0c:
                    43:8d:43:cf:9a:9a:4f:40:61:1a:74:0f:e8:9d:a8:
                    fc:c4:fe:24:36:6f:75:56:20:25:bc:9d:8d:77:e8:
                    61:5e:d6:ad:e8:ab:d3:83:66:6a:e9:c6:1f:42:ae:
                    03:f6:69:cf:cc:e7:1c:04:a6:99:96:d3:a0:0e:49:
                    d2:d5:4d:ae:c0:9a:85:9f:7d:99:bd:81:e4:12:b3:
                    fa:ae:8a:27:ac:37:89:c9:e5:c8:c1:48:65:18:7c:
                    e6:c4:6c:f5:58:ef:b9:1b:81:5f:53:97:09:ed:ef:
                    d9:e0:37:df:7b:44:93:5c:8d:ab:9a:14:01:f1:f3:
                    72:4d:0d:b7:05:f3:8f:18:1e:09:ed:fc:31:53:54:
                    7e:8f:32:27:39:ab:50:0e:cf:4d:20:01:8a:5f:f4:
                    16:ce:92:18:08:52:7d:2f:c3:82:36:9d:5b:c2:67:
                    26:d4:21:8a:7a:be:88:b4:ce:45:45:f5:41:8a:d9:
                    37:a1:24:14:e7:50:74:bb:e2:f4:37:bf:97:c3:13:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BD:86:B8:5D:D4:28:48:27:7B:86:A5:74:3D:1B:DF:55:AC:7B:F1
            X509v3 Authority Key Identifier:
                keyid:49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:98:55:5e:97:17:9b:68:3e:9d:70:cf:e0:9d:fa:d9:2f:fd:
         78:9f:3c:d4:6f:bd:37:58:64:c6:c7:e5:a2:05:63:13:71:86:
         0b:4b:10:9e:35:b5:26:a5:5a:6b:a3:5c:89:66:23:32:84:57:
         0b:71:0b:f1:44:3e:94:75:5b:ea:5a:aa:12:0d:2b:21:f5:f9:
         62:46:9a:a1:3a:0f:54:85:3a:ee:07:63:31:90:04:ec:dc:c7:
         f6:45:5b:53:a2:a5:6b:b2:49:0f:a1:e1:7d:a7:de:2c:b3:1e:
         58:f9:a0:1c:69:74:79:ef:a2:8c:01:84:cc:d7:78:df:bd:1d:
         8f:f8:59:22:9a:c6:6d:51:fb:94:2b:d8:54:1c:47:0e:8f:4a:
         33:2d:3c:29:44:6f:46:2f:ea:64:4c:b3:a8:00:d2:fb:3e:80:
         ae:a8:12:66:24:bf:98:94:82:ba:34:c2:4b:6a:93:97:d5:e4:
         71:52:ff:83:2f:e7:e7:6b:76:af:44:4f:7a:76:3f:c8:34:1f:
         58:05:1c:88:01:74:03:f3:60:22:0b:e5:89:c9:b7:ae:0d:52:
         84:5d:e3:7c:f1:e0:3f:70:a3:84:68:06:4c:c3:2d:c1:98:48:
         39:ef:6b:b2:80:3e:bb:b0:94:05:45:4d:7d:55:8c:40:bd:23:
         62:e2:4e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:19 2026 by rpki-client