Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa
File:                     3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          naJE/Bidj2O+YOMcboAw9DP7KPCUYJEXAx9uQDGJprM=
Subject key identifier:   FF:07:3B:0D:A6:62:09:6F:93:AA:55:82:E1:8C:55:D1:63:F2:88:29
Certificate issuer:       /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
Certificate serial:       695C6028A455FE1AD716C55B391465A5559DE3E7
Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 03:11:32 +0000
ROA not before:           Sun 03 May 2026 03:06:32 +0000
ROA not after:            Sun 02 May 2027 03:11:32 +0000
asID:                     154410
IP address blocks:        103.160.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl
                          rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5c:60:28:a4:55:fe:1a:d7:16:c5:5b:39:14:65:a5:55:9d:e3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
        Validity
            Not Before: May  3 03:06:32 2026 GMT
            Not After : May  2 03:11:32 2027 GMT
        Subject: CN=FF073B0DA662096F93AA5582E18C55D163F28829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:e9:d1:c9:7c:11:93:4c:0b:81:ab:94:05:
                    e6:cc:b2:2d:b4:4d:e4:5e:78:98:2e:fb:b5:98:50:
                    c4:c3:40:6c:c2:77:0e:c1:bf:43:2e:bb:08:8e:bc:
                    ac:3c:52:bf:96:64:ac:df:e0:24:7f:41:90:ba:55:
                    60:8a:51:e9:46:41:c9:a5:9a:eb:39:98:f4:b3:e0:
                    95:7f:47:56:d0:f5:be:4e:fb:07:bf:c9:68:c0:02:
                    21:be:57:61:aa:e5:00:4e:26:30:47:0f:92:5e:19:
                    45:12:ac:12:40:f1:85:29:22:f3:04:84:70:8d:e9:
                    c4:de:78:3f:b7:75:a6:fc:02:08:30:72:0e:aa:01:
                    95:f8:22:02:e9:01:13:1e:ac:59:72:df:c5:7d:d7:
                    a6:dc:aa:25:c3:af:81:8f:dc:f9:15:c3:60:f6:2b:
                    7d:47:51:a9:41:f9:b2:26:ad:23:06:65:71:5e:04:
                    c6:29:34:8d:0c:b4:dd:3e:ec:7a:35:a7:31:ef:e6:
                    dc:19:94:8a:6a:d6:16:94:e7:df:2c:ac:85:07:c6:
                    23:ad:32:84:7f:c2:5a:86:4b:5a:26:c6:87:98:68:
                    ce:a0:c7:43:2c:f7:88:eb:eb:cd:00:1b:b3:c3:6e:
                    e3:6f:ad:83:0e:30:53:29:6c:6f:47:ad:ff:17:2d:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:07:3B:0D:A6:62:09:6F:93:AA:55:82:E1:8C:55:D1:63:F2:88:29
            X509v3 Authority Key Identifier:
                keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:b2:e9:ab:b8:22:ff:24:7c:af:18:ba:60:46:82:f5:5c:80:
         fa:db:fd:9d:94:fc:db:63:76:3b:cd:dd:f0:68:46:d7:6d:d4:
         b3:d3:8a:df:2e:08:fd:95:b6:75:36:06:c1:dc:10:75:91:be:
         9e:66:3a:d0:2a:ae:8d:86:16:23:a1:dd:01:88:a2:09:03:18:
         8a:f5:8d:88:4b:00:23:74:34:1f:56:99:85:c7:20:ce:cb:3d:
         33:73:d5:af:fb:40:44:14:57:34:e3:76:da:57:43:e5:b2:16:
         d9:e7:bc:8c:9e:a6:8f:5f:cc:88:01:58:4a:71:a4:3f:5d:0b:
         71:b8:80:5f:b2:2e:a7:26:bc:16:3a:dc:3c:b9:11:0c:4d:15:
         5c:98:0e:ba:be:26:1b:e3:be:a6:30:59:5d:46:a5:fd:a8:a6:
         79:23:17:f4:d4:50:cd:33:72:3b:b9:a7:4d:80:4f:17:43:f9:
         07:ae:16:d1:18:17:82:55:dc:85:46:84:17:bf:19:ef:a2:47:
         77:fb:a4:9c:c2:b3:fb:53:68:ee:e2:6b:25:7e:e0:d9:87:07:
         60:5d:a0:c0:7b:fb:40:e5:b2:b1:40:f2:93:25:b8:03:89:e2:
         63:2a:35:a9:b1:b0:91:cd:c6:54:b4:57:87:08:b0:90:3c:80:
         ca:94:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:08 2026 by rpki-client