Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa
File:                     3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (raw, json)
Hash identifier:          WgEvnA7HrzP4zMt539LVlI9Pa+Gm1+otpgLRC+JlvSQ=
Subject key identifier:   BD:D4:88:24:BB:57:7E:D1:0A:89:5C:3B:BB:15:A3:F3:E9:CE:59:27
Certificate issuer:       /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
Certificate serial:       068DAD5563F66ADF107EDDEED38A0FA705A2FFDC
Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa
Signing time:             Sun 03 May 2026 03:11:32 +0000
ROA not before:           Sun 03 May 2026 03:06:32 +0000
ROA not after:            Sun 02 May 2027 03:11:32 +0000
asID:                     141624
IP address blocks:        103.160.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl
                          rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8d:ad:55:63:f6:6a:df:10:7e:dd:ee:d3:8a:0f:a7:05:a2:ff:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
        Validity
            Not Before: May  3 03:06:32 2026 GMT
            Not After : May  2 03:11:32 2027 GMT
        Subject: CN=BDD48824BB577ED10A895C3BBB15A3F3E9CE5927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:38:69:72:64:2e:b1:20:60:3a:d7:10:62:
                    d4:98:18:e8:e5:61:8d:40:5b:11:80:a1:d2:6f:cb:
                    9c:e1:5d:ef:c1:62:e5:5c:08:5f:d9:1c:d9:57:15:
                    2c:84:63:e6:82:c2:5d:7c:e1:f1:b1:72:83:04:a8:
                    ea:fe:d9:9b:bd:26:dc:4b:cc:df:2b:4c:03:24:c9:
                    5d:74:c4:f1:b9:05:ec:f4:19:4b:2d:00:32:ab:29:
                    b4:27:b4:62:01:08:5c:05:9a:e1:69:65:97:9a:7a:
                    e9:2e:b1:6b:d7:94:74:bf:5b:2c:83:c7:b4:0b:9e:
                    9c:a2:5c:7f:dc:77:9d:44:16:54:6b:77:ea:a1:6c:
                    96:10:36:12:93:ca:dc:54:d4:25:d9:d7:bc:c7:aa:
                    a5:b4:3b:09:f3:88:3b:3b:35:fb:d2:1f:18:48:a8:
                    27:bc:c3:9c:f3:89:66:52:4d:81:1b:0f:c8:f1:ec:
                    13:0c:e4:dc:0e:61:d4:a9:b3:ac:b7:11:16:34:90:
                    8a:4f:a2:9b:c4:5e:ee:e5:3f:8e:b2:a1:63:6f:2e:
                    8e:c4:16:74:7e:08:82:5d:c7:5a:d0:fb:5d:98:71:
                    38:e5:04:dc:79:e9:aa:49:80:a2:d4:30:ce:18:5a:
                    5a:4c:f5:85:1e:27:28:1f:43:2c:0a:ed:ed:2d:7a:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D4:88:24:BB:57:7E:D1:0A:89:5C:3B:BB:15:A3:F3:E9:CE:59:27
            X509v3 Authority Key Identifier:
                keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:17:59:74:04:9d:76:93:b2:92:a4:5c:97:e3:dc:c7:6e:9a:
         84:93:68:13:ef:7e:e0:6b:68:ad:62:e7:da:09:0a:fd:21:ad:
         c9:db:31:c9:f1:00:94:db:1f:99:a3:e5:52:3c:29:ec:33:9f:
         e8:17:04:3a:e9:f8:a4:a1:45:30:dc:7f:64:2a:62:31:78:a1:
         f5:4d:51:f8:1d:55:0a:2c:6b:01:d3:5a:05:6b:a8:21:2d:a5:
         c0:ed:ad:80:13:d2:72:86:ca:0b:a5:56:26:e6:b4:f2:52:f1:
         3f:3c:87:31:2d:c1:ba:4a:f1:a0:e5:ac:55:8c:d6:9c:8e:82:
         ff:b8:e7:95:89:71:84:60:06:2e:b2:81:d6:ee:da:01:d5:b3:
         a4:56:b5:44:3a:c6:ea:f9:03:a1:91:48:24:56:f5:55:6e:ca:
         5b:35:19:10:73:0b:4f:d6:58:c7:e5:d6:e2:49:78:f8:48:45:
         14:a6:70:b2:10:04:23:12:98:b1:82:1c:8a:bc:b2:cb:eb:62:
         91:4e:63:38:b6:38:ad:f7:b0:c6:da:80:c6:e7:42:65:48:24:
         ad:c8:16:a2:3a:a7:dc:63:2e:c8:b5:a2:e5:b3:90:61:14:fd:
         e3:b5:3d:85:e1:60:27:be:3a:04:4a:22:39:1f:87:cc:02:bd:
         c2:29:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:22 2026 by rpki-client