Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa
File:                     3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (raw, json)
Hash identifier:          tNCHVLpKWfY3fZ8ZfZRRYmaRD6tD5GGqANd/n3olcLk=
Subject key identifier:   A7:27:93:F1:67:2C:F4:45:C7:DF:62:64:4C:B5:5C:B0:AF:2A:EA:C4
Certificate issuer:       /CN=FBA3638DA562505698B924E173281E46359B1617
Certificate serial:       73866D1963226D49315157E18AEA2A9A1C949BEB
Authority key identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa
Signing time:             Sun 03 May 2026 03:09:42 +0000
ROA not before:           Sun 03 May 2026 03:04:42 +0000
ROA not after:            Sun 02 May 2027 03:09:42 +0000
asID:                     141910
IP address blocks:        103.164.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl
                          rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:86:6d:19:63:22:6d:49:31:51:57:e1:8a:ea:2a:9a:1c:94:9b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBA3638DA562505698B924E173281E46359B1617
        Validity
            Not Before: May  3 03:04:42 2026 GMT
            Not After : May  2 03:09:42 2027 GMT
        Subject: CN=A72793F1672CF445C7DF62644CB55CB0AF2AEAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:b5:1e:c0:d7:ed:42:3c:2b:0c:cb:8f:44:
                    19:9b:ab:e7:f5:3d:29:37:61:86:f6:80:13:f9:b4:
                    30:d7:44:73:71:c9:65:9d:24:4f:8f:88:4d:8e:0c:
                    49:88:07:94:11:47:6a:57:15:20:01:65:95:b4:01:
                    1c:38:22:3b:12:7b:81:89:74:4b:8c:76:e7:12:aa:
                    1b:fb:02:33:16:b8:d7:b6:30:44:0b:ae:03:00:28:
                    f5:13:84:6d:92:a1:d2:c3:91:1a:e2:16:11:43:49:
                    12:36:fd:97:38:55:7c:6a:57:81:1c:42:5c:c3:07:
                    a3:7e:36:c9:3b:3f:2f:91:69:c5:52:c4:bf:14:e9:
                    06:6c:8c:b9:f1:80:b7:5a:f0:65:3b:bc:73:a4:6d:
                    04:a6:4a:92:62:9a:e1:6e:45:ae:d4:ae:70:ea:c0:
                    77:a8:99:84:ad:bb:b5:8a:7f:1e:ee:d2:0f:5a:57:
                    5e:9e:e7:81:aa:46:4e:b1:55:b0:ff:6a:ca:94:d8:
                    92:83:ae:b8:e3:31:a7:f1:bc:01:84:fe:68:e5:55:
                    a5:f6:5b:02:cd:60:a5:1f:34:5a:49:e4:40:ec:28:
                    dd:81:f1:c1:4d:8f:f7:7d:c3:fb:6a:70:87:9b:00:
                    81:34:98:21:cc:eb:dd:87:fa:7f:20:69:47:1f:c2:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:27:93:F1:67:2C:F4:45:C7:DF:62:64:4C:B5:5C:B0:AF:2A:EA:C4
            X509v3 Authority Key Identifier:
                keyid:FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:39:98:16:ac:2f:db:93:43:84:d6:ae:b3:2d:4a:94:e5:e3:
         10:3c:59:ea:47:33:64:a9:90:4d:0e:44:b3:df:a2:9e:b9:13:
         d9:25:e0:00:60:7a:82:14:98:e5:c3:76:f2:ec:cd:9b:76:c6:
         01:f3:b1:25:20:d7:d8:02:8d:2b:3a:00:45:51:d4:75:7f:46:
         35:2f:18:33:76:bf:ec:c5:a7:32:75:ee:48:f9:fd:ea:d8:e3:
         5e:e9:be:82:71:26:01:3f:27:57:07:cc:3b:39:b7:3d:2b:8b:
         8d:05:7f:21:42:9e:f9:5e:80:2d:68:19:d6:16:2f:d3:36:87:
         67:1d:a6:8f:3a:78:12:5e:31:59:15:05:38:9a:4f:cb:35:82:
         d1:a1:0d:44:ad:52:10:5a:3c:1a:d0:28:ae:95:7f:02:7a:4e:
         e3:a8:ec:b4:75:ea:69:ee:13:75:9f:8a:97:46:65:e1:e1:ec:
         4c:5b:c4:98:02:1e:60:54:66:76:84:f3:54:26:5a:0a:45:78:
         42:3e:3f:97:40:e5:50:a1:64:d1:3a:56:d8:2e:cf:cc:b5:2d:
         5e:87:57:04:30:00:b0:0d:cc:98:97:e9:cf:e7:0c:92:d4:a8:
         dc:7c:57:2d:06:20:29:4b:a5:44:e9:b0:f5:32:99:a1:cb:f8:
         59:69:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:29 2026 by rpki-client