Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa
File:                     3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (raw, json)
Hash identifier:          Hhcr9VVOfd5FtvKI4zutV/Yegy8flj3mD3AHSU+kLcM=
Subject key identifier:   B9:C7:8B:43:58:FF:19:F6:B6:9F:D2:9A:3F:86:B4:B6:E8:68:77:0F
Certificate issuer:       /CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
Certificate serial:       5D7A2E4D2A046B93C886EE787EB14326863E466C
Authority key identifier: A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa
Signing time:             Sun 03 May 2026 03:13:29 +0000
ROA not before:           Sun 03 May 2026 03:08:29 +0000
ROA not after:            Sun 02 May 2027 03:13:29 +0000
asID:                     141621
IP address blocks:        103.161.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl
                          rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7a:2e:4d:2a:04:6b:93:c8:86:ee:78:7e:b1:43:26:86:3e:46:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
        Validity
            Not Before: May  3 03:08:29 2026 GMT
            Not After : May  2 03:13:29 2027 GMT
        Subject: CN=B9C78B4358FF19F6B69FD29A3F86B4B6E868770F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:96:a6:71:62:1c:85:36:e4:5a:2b:47:25:
                    94:45:1c:0c:9e:41:c9:0d:02:af:a8:f3:b3:44:77:
                    7e:1f:66:ea:34:0d:4f:3d:80:19:29:de:16:3f:62:
                    31:91:76:1e:d5:fe:34:a3:11:40:f8:09:c8:2e:e9:
                    9d:2e:67:4e:3b:c6:25:4f:07:87:f4:b7:ec:9f:d7:
                    2f:78:1d:fe:5f:3b:f6:62:d1:2b:dd:0b:cf:c4:eb:
                    99:4b:0e:c6:8a:dd:a4:69:52:07:ca:09:33:18:dd:
                    51:b0:d0:75:24:ef:f0:17:e0:22:07:a2:c4:92:58:
                    89:db:3a:9e:c3:a4:a3:a3:4e:6a:a7:b3:d0:12:87:
                    df:6c:2f:0b:3e:50:7b:64:d0:51:e6:52:cd:d5:94:
                    10:c9:a5:44:e9:5e:86:2b:4b:5c:dd:aa:07:fc:0e:
                    cc:a4:27:52:b1:21:b6:16:b6:1d:a7:2b:1d:26:4b:
                    bb:98:71:a9:e4:a5:4b:0c:fa:48:23:ae:bc:16:c5:
                    e6:f4:63:e0:0b:49:1a:53:3b:0b:f2:16:80:cd:ec:
                    f4:d0:5f:b6:50:c6:84:d8:02:b4:01:79:f2:4b:4a:
                    4b:1f:09:72:58:b5:53:f8:55:9f:2a:9f:90:90:27:
                    c2:f7:ff:20:47:a5:f2:46:89:c0:d7:67:b9:7c:29:
                    6c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C7:8B:43:58:FF:19:F6:B6:9F:D2:9A:3F:86:B4:B6:E8:68:77:0F
            X509v3 Authority Key Identifier:
                keyid:A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:50:93:a7:67:d2:9a:1a:34:14:98:90:2d:b4:29:79:fc:
         c0:1f:e3:45:86:af:64:09:5b:ea:c7:b7:f4:99:31:7e:06:27:
         61:0e:53:e8:6c:fb:1d:c8:e1:32:c9:6a:bd:67:26:fe:62:5f:
         e7:00:12:9a:ab:5c:50:13:93:f0:d8:5f:55:30:fb:cb:9c:6d:
         11:ac:c1:95:56:a9:86:4b:44:36:ff:81:90:0e:41:ee:db:7c:
         c6:fd:9b:3c:43:3e:a3:e4:82:3a:05:50:9f:cf:e0:44:59:50:
         62:fc:e9:30:ec:88:15:47:d8:f2:3b:82:46:dd:3a:b0:ad:a5:
         13:18:83:d4:43:2c:dc:17:2f:0e:c1:18:7f:1c:ff:24:fc:a0:
         27:97:b0:45:b9:5f:2a:69:65:a0:c0:b5:8b:00:c8:c1:8a:45:
         b3:a8:22:2c:b4:f8:7e:91:68:cd:8d:52:6f:53:66:50:77:00:
         e8:23:41:fd:26:72:c5:2b:94:a8:a8:26:49:af:c2:75:26:34:
         9e:c9:9d:08:0c:33:20:b9:9f:5a:6d:4a:f7:97:53:ea:7b:3f:
         9d:61:c8:d1:b9:a4:a6:62:21:98:e0:60:ef:b7:2c:6d:24:51:
         1e:58:54:6c:b6:8f:dd:91:5f:d3:78:d1:cb:13:73:38:1a:7e:
         e4:25:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:26 2026 by rpki-client