Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
File:                     3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (raw, json)
Hash identifier:          5+QjDX8KG0DdCRMLkCdouqkAivuUBYGCvdZURD0Juiw=
Subject key identifier:   50:6F:31:81:D4:4A:69:D5:D8:24:6D:B5:3C:97:81:EC:9B:3B:14:1D
Certificate issuer:       /CN=B07262415656C2D65AF1FB6B516A57353FEA8D40
Certificate serial:       7ABA59E702209DCE63A60109A9709AF25E28A971
Authority key identifier: B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
Signing time:             Sun 03 May 2026 03:13:45 +0000
ROA not before:           Sun 03 May 2026 03:08:45 +0000
ROA not after:            Sun 02 May 2027 03:13:45 +0000
asID:                     141957
IP address blocks:        103.166.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl
                          rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ba:59:e7:02:20:9d:ce:63:a6:01:09:a9:70:9a:f2:5e:28:a9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B07262415656C2D65AF1FB6B516A57353FEA8D40
        Validity
            Not Before: May  3 03:08:45 2026 GMT
            Not After : May  2 03:13:45 2027 GMT
        Subject: CN=506F3181D44A69D5D8246DB53C9781EC9B3B141D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:ff:fe:cb:7d:1a:04:69:39:c8:bf:5b:fc:
                    53:0f:58:c3:a1:cd:3e:3f:58:77:c9:e5:ac:ae:a9:
                    6c:a0:23:3d:65:d1:d4:ae:6c:3c:f1:f3:1c:74:31:
                    15:78:13:fe:94:91:61:6b:16:ef:10:7d:74:5c:9f:
                    6d:22:b4:d8:b4:52:7d:3d:4c:5f:4e:88:9d:e6:f7:
                    12:11:db:f7:79:64:a3:83:ac:8f:17:a2:34:d9:b7:
                    37:15:1c:50:9f:a0:46:0d:21:df:ad:11:f8:2a:7e:
                    fc:63:fa:0c:48:0c:9e:98:2e:c9:57:f6:ae:c5:e0:
                    10:a9:26:63:d8:d4:5c:68:b6:d0:9c:68:50:99:e6:
                    81:67:50:23:24:83:aa:ab:7d:ed:80:1f:a7:4a:93:
                    c1:2e:17:b6:f6:04:a5:0a:12:e3:68:3e:fc:c6:ac:
                    ce:bc:0a:9c:00:59:66:72:6a:56:ad:3b:23:c1:e2:
                    42:fe:ac:e4:4f:c3:2e:bf:99:27:95:5f:4f:c3:cf:
                    95:6c:4e:bb:19:f4:79:d3:d0:e6:be:86:34:3e:ad:
                    83:03:6e:d6:c0:8d:96:49:5f:13:ac:ec:3f:15:3d:
                    9a:00:7b:15:94:0c:5f:44:cf:17:0c:80:6e:a6:40:
                    98:77:37:b3:85:f9:16:e3:6b:90:17:9a:e0:b6:af:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6F:31:81:D4:4A:69:D5:D8:24:6D:B5:3C:97:81:EC:9B:3B:14:1D
            X509v3 Authority Key Identifier:
                keyid:B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:3b:01:b4:b0:7c:d7:93:c7:e2:c0:55:c3:62:b9:ba:73:c6:
         5c:60:e7:02:46:27:cb:02:f8:ec:af:13:30:88:b5:84:98:24:
         17:14:42:ce:54:12:77:c9:02:7b:5f:0e:73:92:97:1a:91:f8:
         0e:56:7b:78:7d:5b:69:4b:ef:aa:8a:a2:da:de:10:3f:ce:d9:
         e6:96:26:73:7d:02:65:db:64:7a:69:3e:28:84:65:f5:b7:17:
         6b:d7:6f:ec:b8:eb:cf:f3:ef:d4:0f:8f:83:2e:cb:86:84:80:
         c0:bc:52:a9:7c:fe:b0:77:e2:55:99:15:4f:cb:11:a6:b1:ef:
         4d:7f:ed:38:ab:0f:c4:52:4d:07:41:a6:be:bc:0c:9b:e4:23:
         a1:54:29:d5:46:18:d5:6b:9a:91:8e:06:bb:10:f9:01:bf:09:
         b0:2f:5f:27:e4:10:0e:0c:5c:44:92:56:fe:df:03:61:b2:d5:
         56:d6:d9:a0:a2:6e:08:15:38:b2:76:72:aa:4b:e2:0d:cf:04:
         21:6c:5f:59:2c:c7:98:49:3b:de:bd:6e:67:b4:fa:05:64:6b:
         25:bd:0b:e1:a0:64:e2:02:e9:3e:55:32:b0:16:ca:a0:af:ba:
         6a:02:0b:30:5a:3c:c4:f1:dc:a1:61:c1:d8:1e:f7:a8:a7:81:
         d8:0f:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:46 2026 by rpki-client