Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa
File:                     3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (raw, json)
Hash identifier:          TU34W0uej+lBgrEZ9f3pjCsz5qnJOOeLATUQpCTCETg=
Subject key identifier:   0E:B6:67:C1:61:16:4E:DC:F1:CF:31:37:CA:2D:B0:65:E9:25:4F:6D
Certificate issuer:       /CN=B07262415656C2D65AF1FB6B516A57353FEA8D40
Certificate serial:       5C83929A98BF0D75F22CA76C18099F9C189088DE
Authority key identifier: B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa
Signing time:             Sun 03 May 2026 03:13:45 +0000
ROA not before:           Sun 03 May 2026 03:08:45 +0000
ROA not after:            Sun 02 May 2027 03:13:45 +0000
asID:                     141957
IP address blocks:        103.166.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl
                          rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:83:92:9a:98:bf:0d:75:f2:2c:a7:6c:18:09:9f:9c:18:90:88:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B07262415656C2D65AF1FB6B516A57353FEA8D40
        Validity
            Not Before: May  3 03:08:45 2026 GMT
            Not After : May  2 03:13:45 2027 GMT
        Subject: CN=0EB667C161164EDCF1CF3137CA2DB065E9254F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:69:13:2d:b9:8b:b6:c1:21:91:b8:5b:38:
                    a5:d5:a7:80:f0:21:f7:c3:67:da:e1:88:22:53:a6:
                    d2:9d:5d:d5:87:2c:80:9c:5f:1e:c3:b0:4b:99:e3:
                    c9:f0:47:c2:70:93:8f:93:3d:8f:06:90:ba:42:a7:
                    0f:04:74:08:1c:a2:18:00:51:5b:81:04:94:5d:b6:
                    27:fd:e5:16:4f:a4:67:f4:23:03:a0:5a:49:49:df:
                    04:a9:15:db:40:e1:16:cc:41:a1:46:0f:b9:a8:c0:
                    dc:62:26:af:16:39:d8:86:43:e8:92:04:a7:9c:58:
                    82:08:df:9b:11:f2:9e:29:38:54:fc:30:80:8a:c2:
                    2c:fe:74:77:11:45:5f:a1:6d:85:9a:04:da:a9:c8:
                    b1:4a:aa:f7:4d:d0:a3:09:e6:82:af:f4:b4:ef:7a:
                    fc:f9:38:31:73:50:64:86:45:b2:e3:dd:cc:20:4b:
                    54:8f:21:7f:3b:0e:ff:3d:4b:71:c3:4e:dc:0f:98:
                    47:a1:f7:30:d5:a3:4d:ef:94:5c:5e:db:cb:ad:60:
                    27:03:18:03:06:c5:7f:e8:b6:07:e0:14:63:94:1f:
                    d3:95:03:4d:03:dd:ad:3e:33:fc:2f:f9:d8:6f:a3:
                    ca:81:87:87:de:cb:35:18:8b:c1:32:05:d0:f0:68:
                    6a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B6:67:C1:61:16:4E:DC:F1:CF:31:37:CA:2D:B0:65:E9:25:4F:6D
            X509v3 Authority Key Identifier:
                keyid:B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:b5:61:1c:63:2d:3c:2c:b8:21:7e:b7:c9:2a:90:40:2d:fa:
         57:5a:2e:06:f2:cb:83:bb:e8:68:26:a6:90:59:ee:f1:52:29:
         f0:4d:82:7e:71:31:ed:8d:b4:cc:ac:63:47:a6:33:42:93:a5:
         b0:68:5b:de:6b:26:0c:33:cb:aa:00:15:34:55:84:51:75:83:
         a2:3c:7b:47:99:10:fb:a8:c2:fb:6d:d2:d9:8e:2c:ae:21:af:
         49:c8:40:05:98:61:cd:0a:dd:c8:a2:5d:36:15:f1:a5:e9:0d:
         2d:c4:b8:87:1e:28:35:fa:b9:3d:b6:e1:23:a9:4a:6e:11:ce:
         35:63:34:3c:32:4b:57:15:f4:7f:e5:ab:6a:04:a2:17:41:e7:
         05:ca:1b:ea:ce:c7:3c:9c:56:07:41:8f:d5:e9:d5:f7:1e:89:
         59:a6:f4:91:63:60:46:f7:76:f0:a3:ec:ab:c1:c1:02:85:1b:
         ef:7a:a5:89:09:0e:da:15:ff:50:ef:25:07:be:e5:c8:44:1f:
         a9:eb:c7:e6:6e:da:6a:ed:b6:36:48:0d:7f:10:90:5c:09:10:
         1a:8c:d7:9e:dc:a7:5d:a4:8d:57:70:21:bb:cb:9f:03:e9:e6:
         74:67:b7:41:39:09:a8:c7:38:1f:42:5c:b1:00:c0:65:2a:f8:
         d0:a0:ad:c1
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUXIOSmpi/DXXyLKdsGAmfnBiQiN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA3MjYyNDE1NjU2QzJENjVBRjFGQjZCNTE2QTU3MzUz
RkVBOEQ0MDAeFw0yNjA1MDMwMzA4NDVaFw0yNzA1MDIwMzEzNDVaMDMxMTAvBgNV
BAMTKDBFQjY2N0MxNjExNjRFRENGMUNGMzEzN0NBMkRCMDY1RTkyNTRGNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MGkTLbmLtsEhkbhbOKXVp4Dw
IffDZ9rhiCJTptKdXdWHLICcXx7DsEuZ48nwR8Jwk4+TPY8GkLpCpw8EdAgcohgA
UVuBBJRdtif95RZPpGf0IwOgWklJ3wSpFdtA4RbMQaFGD7mowNxiJq8WOdiGQ+iS
BKecWIII35sR8p4pOFT8MICKwiz+dHcRRV+hbYWaBNqpyLFKqvdN0KMJ5oKv9LTv
evz5ODFzUGSGRbLj3cwgS1SPIX87Dv89S3HDTtwPmEeh9zDVo03vlFxe28utYCcD
GAMGxX/otgfgFGOUH9OVA00D3a0+M/wv+dhvo8qBh4feyzUYi8EyBdDwaGrDAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUDrZnwWEWTtzxzzE3yi2wZeklT20wHwYDVR0j
BBgwFoAUsHJiQVZWwtZa8ftrUWpXNT/qjUAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTU5NWI3ZDQtM2FhYi00YjgzLTk0YjItYzQyNjdiMmFlMGEwLzAvQjA3MjYyNDE1
NjU2QzJENjVBRjFGQjZCNTE2QTU3MzUzRkVBOEQ0MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMDcyNjI0MTU2NTZDMkQ2NUFGMUZCNkI1MTZBNTczNTNGRUE4
RDQwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1OTViN2Q0LTNhYWItNGI4My05
NGIyLWM0MjY3YjJhZTBhMC8wLzMxMzAzMzJlMzEzNjM2MmUzMjMxMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM1Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnptQwDQYJ
KoZIhvcNAQELBQADggEBAMO1YRxjLTwsuCF+t8kqkEAt+ldaLgbyy4O76GgmppBZ
7vFSKfBNgn5xMe2NtMysY0emM0KTpbBoW95rJgwzy6oAFTRVhFF1g6I8e0eZEPuo
wvtt0tmOLK4hr0nIQAWYYc0K3ciiXTYV8aXpDS3EuIceKDX6uT224SOpSm4RzjVj
NDwyS1cV9H/lq2oEohdB5wXKG+rOxzycVgdBj9Xp1fceiVmm9JFjYEb3dvCj7KvB
wQKFG+96pYkJDtoV/1DvJQe+5chEH6nrx+Zu2mrttjZIDX8QkFwJEBqM157cp12k
jVdwIbvLnwPp5nRnt0E5CajHOB9CXLEAwGUq+NCgrcE=
-----END CERTIFICATE-----
Generated at Wed May 13 05:48:25 2026 by rpki-client