Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa
File:                     3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (raw, json)
Hash identifier:          fD7AXzzRekNw/K0iCKi41nGKBP7FKJCCqtJkswohhe4=
Subject key identifier:   9A:5B:26:11:B9:E0:C7:EC:CA:42:1A:C8:83:F0:12:8F:28:B7:82:DE
Certificate issuer:       /CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
Certificate serial:       046D55CED1991009041CFFBBF065486D101E2050
Authority key identifier: A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa
Signing time:             Sun 03 May 2026 03:13:28 +0000
ROA not before:           Sun 03 May 2026 03:08:28 +0000
ROA not after:            Sun 02 May 2027 03:13:28 +0000
asID:                     141621
IP address blocks:        103.161.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl
                          rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6d:55:ce:d1:99:10:09:04:1c:ff:bb:f0:65:48:6d:10:1e:20:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
        Validity
            Not Before: May  3 03:08:28 2026 GMT
            Not After : May  2 03:13:28 2027 GMT
        Subject: CN=9A5B2611B9E0C7ECCA421AC883F0128F28B782DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:48:0c:6a:f3:4a:2c:4c:15:68:19:3b:be:de:
                    91:44:05:19:a4:7a:29:2c:f1:13:43:25:3b:f5:ab:
                    6c:26:0c:cf:d4:b2:39:fc:c8:6e:a4:0a:b6:dd:44:
                    d8:bc:0f:d0:34:db:75:7f:38:bf:3f:6a:ab:0e:2c:
                    83:18:75:5d:d2:e3:ae:85:bd:fd:71:d5:66:f3:84:
                    01:31:3a:24:3a:35:2c:fe:fe:3d:e7:91:63:6e:f2:
                    29:89:7e:0f:1f:79:30:99:b3:11:3c:1f:3e:40:62:
                    e4:7e:54:2f:05:54:07:43:59:4c:6a:9e:9a:23:9b:
                    28:aa:e4:4a:7d:ba:93:fa:3d:f9:b3:63:67:79:ae:
                    21:85:ac:51:6f:6b:32:71:7c:81:dd:3f:b5:cc:c7:
                    d1:50:b5:5e:25:1f:5a:74:13:f7:70:6d:9a:34:ad:
                    34:7c:c0:ec:2c:6b:78:f9:32:f4:b9:5f:86:a0:f4:
                    73:b8:73:17:2e:9d:ff:4e:6d:92:6a:36:43:1b:f6:
                    77:d3:4a:6e:fc:26:3b:20:a9:d1:6f:1a:47:36:e6:
                    95:a4:24:84:8c:20:a7:19:cf:50:a7:f0:c1:40:ac:
                    1f:ed:16:ff:a8:fb:fd:8b:94:57:25:6f:1f:77:fe:
                    52:65:f1:a3:7a:d7:d7:ea:20:36:2d:41:33:92:17:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5B:26:11:B9:E0:C7:EC:CA:42:1A:C8:83:F0:12:8F:28:B7:82:DE
            X509v3 Authority Key Identifier:
                keyid:A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:dc:fa:5b:c5:b2:a5:f5:5e:eb:cc:41:ed:cc:f3:a9:08:3d:
         07:5d:3a:73:a6:72:64:21:a9:d6:e1:96:19:10:33:11:7f:81:
         33:aa:ee:d2:af:36:68:e6:75:01:82:c7:12:3b:23:77:a1:2e:
         4b:96:1f:10:b2:48:26:c0:fa:66:22:73:2f:6b:6d:3d:66:34:
         42:0d:30:83:3d:6a:c8:3c:cd:8e:7d:88:8f:fc:29:0c:6a:55:
         29:d7:23:69:2c:e5:5b:07:36:93:05:aa:20:27:58:5c:fd:01:
         48:98:0d:c7:97:85:35:29:11:04:69:ab:d9:c4:ce:62:ea:1a:
         ff:64:c5:8d:08:4d:b4:ae:2f:a4:04:0c:f3:66:37:40:06:9f:
         b3:6c:99:c5:9f:ba:d9:ad:98:99:a9:ec:54:20:32:13:ec:68:
         d7:09:3b:a5:40:0b:5d:01:ef:1b:40:f9:95:61:ce:6c:c8:b7:
         39:1c:16:10:7e:24:94:e0:62:b5:34:a0:0e:37:5c:4d:ca:9d:
         a6:ca:b7:2f:bc:f0:c5:3e:d0:86:dd:78:65:16:43:0e:ea:47:
         76:cf:04:97:0e:fc:ae:5b:e4:c8:23:aa:e4:8a:d1:c5:94:e6:
         16:e6:dc:a9:a8:e5:c8:30:06:4f:8b:67:d9:c7:5d:6f:36:3f:
         30:02:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:18 2026 by rpki-client