Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa
File:                     3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (raw, json)
Hash identifier:          HMulnii/HDUOgXgEUkM8p+8sNcb96i7rF2Rlq6FbVIs=
Subject key identifier:   01:4B:83:57:0E:E7:61:60:9E:E0:E8:FE:47:82:59:4C:4A:D7:5E:CB
Certificate issuer:       /CN=B07262415656C2D65AF1FB6B516A57353FEA8D40
Certificate serial:       6928D2A70001BF0F44EC4F8E8962EC2BDB96A660
Authority key identifier: B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa
Signing time:             Sun 03 May 2026 03:13:45 +0000
ROA not before:           Sun 03 May 2026 03:08:45 +0000
ROA not after:            Sun 02 May 2027 03:13:45 +0000
asID:                     141957
IP address blocks:        103.166.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl
                          rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:28:d2:a7:00:01:bf:0f:44:ec:4f:8e:89:62:ec:2b:db:96:a6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B07262415656C2D65AF1FB6B516A57353FEA8D40
        Validity
            Not Before: May  3 03:08:45 2026 GMT
            Not After : May  2 03:13:45 2027 GMT
        Subject: CN=014B83570EE761609EE0E8FE4782594C4AD75ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:98:a4:52:0e:c9:db:4d:6d:1b:cb:6d:4b:
                    c7:2d:0f:77:d1:e4:6b:0f:20:0a:f6:99:d1:63:45:
                    c2:1f:5c:7a:e7:3a:24:b4:35:b7:6f:ab:bc:bc:3d:
                    4a:14:f7:ba:3d:88:fc:87:0d:4b:f2:a1:cb:c2:57:
                    c6:d3:b5:33:64:59:69:18:06:40:76:7a:db:27:bf:
                    4c:e6:35:48:03:d8:33:e0:a8:25:08:c6:e0:a8:36:
                    cc:2e:de:f1:07:ef:a2:e4:97:ff:9e:e3:50:75:46:
                    0a:d4:69:da:69:87:88:89:0f:27:13:4c:bd:33:87:
                    0f:c2:84:49:4d:4a:d2:70:10:3a:a4:0b:90:6b:e0:
                    09:cf:c1:68:bd:fd:c2:81:51:a7:63:98:cc:c7:29:
                    c5:8e:4a:fc:da:c6:ad:02:c0:26:b8:1f:29:34:78:
                    0a:0b:a5:85:48:06:f9:6f:76:c9:f5:b7:52:af:36:
                    4d:ba:d3:e1:0b:a4:cc:cb:a1:e3:07:72:cd:6a:eb:
                    12:34:8e:a2:76:fa:73:d9:10:dc:5b:43:2e:89:b2:
                    06:8a:0e:96:e6:a1:14:de:be:4f:30:9f:cf:7f:4d:
                    1d:8f:8e:10:b3:47:f1:cf:ea:43:51:c5:7a:75:63:
                    9e:8b:a6:57:a4:61:c8:ee:c3:10:ac:ff:2d:1e:09:
                    a3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:83:57:0E:E7:61:60:9E:E0:E8:FE:47:82:59:4C:4A:D7:5E:CB
            X509v3 Authority Key Identifier:
                keyid:B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:1a:5b:f5:dd:5e:23:0d:73:62:b9:cd:53:c3:11:1b:32:02:
         05:47:a0:ec:dc:c5:6a:3c:68:c7:f0:3c:15:22:2a:fb:c3:b2:
         2f:83:52:15:d5:4e:21:00:71:d7:b2:78:c6:47:a9:8d:b0:5e:
         94:ce:3b:be:c2:ce:e9:20:b3:ec:8e:2a:39:a3:ac:9b:fa:af:
         1a:eb:db:4a:52:cf:57:88:ed:b4:a2:6a:bd:48:1a:59:72:f0:
         f4:ce:b0:c2:11:19:7f:5b:71:18:b6:07:dc:2f:cb:1d:da:b3:
         57:4e:ba:98:86:6a:5e:34:ae:78:a0:6a:be:c9:3f:5b:8d:1b:
         9f:35:26:c0:cf:17:f7:63:e6:ad:3e:f4:62:eb:dc:aa:63:3e:
         ae:8e:77:16:36:4e:3b:20:ea:f7:cf:29:2e:aa:99:50:de:d7:
         a3:b5:bf:2d:c5:3b:09:95:8d:52:78:b5:b4:f5:bf:aa:d5:a0:
         ff:be:ad:aa:e8:4f:ff:bd:14:69:04:ec:0f:27:05:ff:c2:4b:
         58:c3:d9:43:e7:ab:d0:61:ee:20:d8:93:07:c2:a4:c1:68:c2:
         98:84:c4:bb:9b:77:d9:4e:3c:8b:41:2f:eb:1e:9d:79:fd:cb:
         a0:79:75:c9:1e:1a:0f:16:f3:88:ba:05:16:15:f4:c0:61:b2:
         01:0e:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:26 2026 by rpki-client