Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa
File:                     3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          U9buHNsi2jDfo5KH+0Kih4bcNzBuDuVWdR/10Uc4Q3A=
Subject key identifier:   AA:C9:9E:61:31:7A:C6:4B:72:7F:1A:45:F7:0F:16:9F:D8:D4:C9:FE
Certificate issuer:       /CN=1859662B11A1F7335B5E5F6093D493B45F785BCF
Certificate serial:       3945E545F931D86AEC028B2725AE0C09A1787394
Authority key identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 03:10:41 +0000
ROA not before:           Sun 03 May 2026 03:05:41 +0000
ROA not after:            Sun 02 May 2027 03:10:41 +0000
asID:                     154410
IP address blocks:        103.166.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl
                          rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:45:e5:45:f9:31:d8:6a:ec:02:8b:27:25:ae:0c:09:a1:78:73:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1859662B11A1F7335B5E5F6093D493B45F785BCF
        Validity
            Not Before: May  3 03:05:41 2026 GMT
            Not After : May  2 03:10:41 2027 GMT
        Subject: CN=AAC99E61317AC64B727F1A45F70F169FD8D4C9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:52:e3:fd:3b:f3:85:8f:10:91:ec:8d:69:
                    61:81:f3:b4:21:53:cf:75:e3:be:6e:7b:28:28:8b:
                    2c:78:3f:0c:04:50:ff:d4:22:d6:18:f9:ba:2f:90:
                    92:6f:fc:72:01:54:f2:0c:d6:bc:8c:12:1f:f0:28:
                    33:11:57:fc:54:a5:51:97:8c:c5:c5:7d:c8:2d:77:
                    af:3c:2b:71:fa:a1:96:27:b7:71:0b:77:df:49:51:
                    44:48:fa:ee:1e:e5:16:2d:19:5b:ae:d5:4b:2d:54:
                    57:28:9a:04:d2:56:82:0d:56:39:74:32:d1:02:21:
                    2a:c2:7d:38:20:69:13:1e:b3:63:46:e7:00:e0:95:
                    76:73:75:44:39:ae:85:5d:64:80:01:dc:51:a7:d8:
                    7e:a0:9e:38:30:84:cf:59:c4:35:64:bb:d2:d6:2e:
                    ae:88:da:aa:97:4b:bf:ce:81:9c:ff:a9:06:66:e9:
                    11:d2:d5:a4:b1:4e:ed:eb:41:eb:bd:03:af:7e:6a:
                    ce:21:17:2f:11:9a:60:b6:67:b1:59:ae:8c:30:40:
                    cd:47:4f:a8:22:2c:50:1c:69:a4:d2:dc:3f:b6:d7:
                    8c:54:11:c2:d6:c5:c6:4d:9f:3d:64:df:4e:4e:f0:
                    5a:db:be:77:10:5e:af:10:47:b9:ba:35:bd:cc:4c:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C9:9E:61:31:7A:C6:4B:72:7F:1A:45:F7:0F:16:9F:D8:D4:C9:FE
            X509v3 Authority Key Identifier:
                keyid:18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:74:e0:d1:e7:99:bb:37:34:05:b3:5b:75:c6:0d:68:c2:68:
         46:dc:34:92:63:39:49:a6:34:46:85:1e:c7:14:11:7b:81:dc:
         6e:77:15:48:45:3e:24:e1:0d:b6:b2:80:59:ac:d5:30:d4:9d:
         d3:85:e2:22:15:48:63:4d:c5:56:a4:37:d8:6a:eb:ae:fc:89:
         43:de:5d:2c:2c:03:53:e8:6c:08:97:9f:ee:9c:12:7c:69:56:
         04:f6:f4:a2:b1:d4:ee:6c:73:40:12:85:50:33:8c:6f:28:df:
         a5:a3:62:dc:30:b6:21:31:f0:a8:19:32:4f:74:f4:b1:50:ec:
         75:01:7b:98:1e:bd:b2:b6:76:a2:09:27:3b:5d:5b:6c:d4:d4:
         e2:ba:24:94:08:60:ca:21:02:f3:74:6b:6f:09:a8:b7:f4:5c:
         b1:03:dc:20:af:bf:68:0e:48:8a:24:32:18:36:26:6e:18:53:
         a8:7c:ce:53:41:96:32:d8:d8:c4:8c:1e:db:21:1b:5a:f2:4c:
         31:f1:51:02:79:69:62:c1:19:2f:4e:ca:a0:59:34:d9:91:b7:
         ca:aa:8e:72:96:fb:61:58:96:54:86:e5:15:8d:aa:fe:7c:0f:
         dc:52:d6:6c:66:0f:01:9c:e6:4a:ef:e4:c9:10:64:92:02:02:
         fb:e7:8b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:32 2026 by rpki-client