Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
File:                     3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (raw, json)
Hash identifier:          EarQVvbcyhKmaxD6rqFZgUQY/Ww5omgDD2NzWO0knDY=
Subject key identifier:   81:72:26:FD:25:BD:01:5A:CC:04:18:17:64:E6:C6:D1:D3:E6:81:70
Certificate issuer:       /CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
Certificate serial:       5CE471525071B58AFE119DB0A5BCC1E30F81EA0A
Authority key identifier: A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
Signing time:             Sun 03 May 2026 03:13:29 +0000
ROA not before:           Sun 03 May 2026 03:08:29 +0000
ROA not after:            Sun 02 May 2027 03:13:29 +0000
asID:                     141621
IP address blocks:        103.161.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl
                          rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e4:71:52:50:71:b5:8a:fe:11:9d:b0:a5:bc:c1:e3:0f:81:ea:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
        Validity
            Not Before: May  3 03:08:29 2026 GMT
            Not After : May  2 03:13:29 2027 GMT
        Subject: CN=817226FD25BD015ACC04181764E6C6D1D3E68170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:69:cc:1e:7f:07:80:c5:0c:1b:61:77:11:
                    71:0c:44:a7:d6:e0:e4:5a:4d:27:26:5e:0d:ba:0d:
                    17:d6:80:5f:cb:06:19:c8:e8:95:0b:7e:6d:3f:5b:
                    b0:72:3a:1a:97:12:50:a0:3a:d0:85:0e:5a:d2:5b:
                    a3:1a:11:7c:ed:c7:4d:af:2a:bb:93:4b:5b:e0:d9:
                    c1:9f:28:61:09:da:a3:99:85:64:a9:0c:0d:be:05:
                    c1:10:46:60:f4:c2:44:5a:64:a5:a4:ec:21:27:be:
                    34:39:fa:6d:59:51:22:0d:42:8f:c8:73:24:dd:ad:
                    f4:82:5b:bc:34:f2:6d:0c:79:27:6c:37:e1:f9:70:
                    a6:49:44:d6:18:40:ba:79:ee:11:eb:81:47:56:53:
                    cd:5a:39:4a:5e:1a:2a:12:9c:01:13:9a:ce:82:7e:
                    0b:f0:4a:a0:34:b1:53:c6:4c:8a:c7:58:ce:1b:57:
                    e0:81:a0:27:88:4e:26:b4:99:9e:db:d1:c2:2c:c7:
                    25:2f:c3:d7:e1:0d:43:58:7d:ca:c0:45:37:84:ae:
                    5f:9e:68:a0:6d:f5:58:c0:f8:3a:24:fe:dc:c9:4a:
                    6d:b7:c7:11:f5:b9:0a:b3:6b:68:6c:e3:a9:96:f0:
                    ab:63:97:bd:32:20:1b:26:1a:d6:81:32:ac:d8:52:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:72:26:FD:25:BD:01:5A:CC:04:18:17:64:E6:C6:D1:D3:E6:81:70
            X509v3 Authority Key Identifier:
                keyid:A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:4b:1e:8f:6d:d6:4f:4c:29:a5:57:b3:22:c3:55:42:cc:97:
         2b:d1:63:4a:92:09:29:92:b1:28:73:f9:fe:95:07:a5:c7:d1:
         d5:69:e1:d3:ff:fa:a7:5d:f8:a6:fe:df:ea:e3:81:34:ae:68:
         a0:7b:b1:34:6e:5a:76:21:ed:09:80:86:d0:54:42:8a:bc:a6:
         0f:2e:13:27:10:d9:e0:83:3d:55:d6:05:1e:44:7b:09:d0:b4:
         f9:12:7d:6f:72:ea:6b:51:77:40:e9:8e:dd:73:32:a0:cc:d0:
         e5:2f:2c:f7:f2:e0:50:67:e3:42:47:a3:62:27:4b:11:c2:4a:
         6f:82:1b:c0:a2:31:95:9b:08:bb:96:e0:34:4f:a7:c6:2f:22:
         10:24:5d:b9:3f:72:f4:0d:0c:92:e0:6b:20:1b:49:f2:84:93:
         c0:e3:51:26:af:92:21:86:75:8d:6f:01:f8:90:a6:36:d6:8c:
         9d:29:e0:54:1d:18:96:cb:9a:e4:68:11:cb:09:24:7f:b2:35:
         5e:2d:16:66:ed:85:8e:99:49:6b:f1:8c:ee:d3:a8:f2:f5:31:
         ec:9c:d1:c9:76:0d:9d:6e:30:7c:32:0a:e5:5f:9a:b7:77:be:
         68:15:50:f5:a4:ff:df:42:f8:c4:12:db:c4:38:f1:e4:14:ae:
         90:20:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:59 2026 by rpki-client