Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
File:                     3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (raw, json)
Hash identifier:          MrbeRL/3NlCVWGAvenapRPN6GCB6X5UzgLlN8P6C5B4=
Subject key identifier:   16:4F:BE:1F:03:F7:27:20:95:12:51:59:78:7B:20:F2:03:3E:E5:03
Certificate issuer:       /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618
Certificate serial:       522573F16768D4984FA4623094D8AD085FE90D6E
Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
Signing time:             Sun 03 May 2026 03:11:44 +0000
ROA not before:           Sun 03 May 2026 03:06:44 +0000
ROA not after:            Sun 02 May 2027 03:11:44 +0000
asID:                     141595
IP address blocks:        103.160.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl
                          rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:25:73:f1:67:68:d4:98:4f:a4:62:30:94:d8:ad:08:5f:e9:0d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618
        Validity
            Not Before: May  3 03:06:44 2026 GMT
            Not After : May  2 03:11:44 2027 GMT
        Subject: CN=164FBE1F03F7272095125159787B20F2033EE503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:67:ed:83:44:fb:af:a6:28:4e:e0:76:25:db:
                    a2:9d:a6:d5:fe:74:bc:01:a3:0c:b6:b3:e8:71:06:
                    17:f5:d1:58:93:db:b5:39:74:2a:b1:ef:5f:96:08:
                    4e:eb:3d:17:0c:d5:01:c2:95:ef:46:a7:62:ab:cb:
                    e6:29:44:c3:e6:2d:db:24:5a:69:ea:de:ff:ac:dc:
                    48:22:14:09:04:43:47:87:82:74:5f:ac:af:68:3b:
                    77:17:bf:12:be:fc:e5:e2:97:16:68:76:72:8c:1d:
                    d8:fe:b7:c3:ee:b8:0d:87:f6:6a:ad:e3:5c:bd:82:
                    e5:7f:7e:ce:06:40:3c:ca:ba:8f:40:1e:79:0e:d6:
                    d6:6f:40:5b:48:af:d7:07:0b:85:60:6c:56:5d:55:
                    4c:c8:eb:9e:e0:16:17:06:a6:91:37:77:a8:85:03:
                    0c:2f:55:ee:e4:ca:c3:76:51:3c:64:5c:0d:ed:d5:
                    70:c0:77:36:b8:c1:81:3e:61:0c:db:34:97:5c:5e:
                    0d:1d:1f:57:51:45:22:ef:42:3e:e0:7c:5a:fc:fe:
                    08:ca:95:71:0d:b8:1e:7a:40:c2:f4:e8:14:72:5a:
                    d0:b8:f5:fb:72:bc:e3:49:d9:37:da:62:30:ea:43:
                    e1:89:99:54:4b:18:6b:1a:b2:d6:eb:d6:92:af:dd:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4F:BE:1F:03:F7:27:20:95:12:51:59:78:7B:20:F2:03:3E:E5:03
            X509v3 Authority Key Identifier:
                keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:09:57:c0:24:85:85:9f:e3:db:0d:b8:67:cc:59:f3:1f:14:
         fd:b5:50:21:d8:5e:2e:fd:c4:1e:eb:a8:f2:6e:8f:9b:2e:fb:
         c8:a7:d5:d1:a2:a9:36:cd:32:64:1e:15:08:81:6c:d7:45:df:
         04:a8:c1:76:94:89:92:c1:73:de:b7:c4:20:6d:56:eb:8a:50:
         1f:d7:36:2e:15:54:05:2d:80:3a:e5:93:33:4a:86:41:02:38:
         4b:b6:29:61:fa:f3:00:ce:1a:04:c4:70:da:86:61:c2:af:01:
         09:d5:70:c1:f0:6f:aa:28:03:e0:3a:2f:43:ad:54:9d:db:a3:
         c4:f7:d1:40:36:7d:86:b4:15:2f:3b:84:c7:e0:ad:9a:09:7a:
         f4:04:c3:51:22:f5:8c:ab:43:99:cd:1e:4f:9c:4e:78:aa:c2:
         bb:76:db:ae:b0:11:31:d2:33:d9:03:ee:db:61:e4:f0:f3:3f:
         c1:07:a2:65:05:79:95:a1:70:18:b5:c9:eb:94:c5:3d:ce:f1:
         f2:13:16:20:0b:37:13:6b:0c:53:27:36:2f:78:fd:7c:68:26:
         fd:85:d6:f7:dc:5d:de:1d:c2:eb:51:ce:df:f8:bc:f6:a6:95:
         ff:07:53:b2:b1:e4:5a:3b:13:9f:dc:d4:d9:32:53:55:80:ec:
         61:1f:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:29 2026 by rpki-client