Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa
File:                     3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (raw, json)
Hash identifier:          L3cIXraAYD+X61M80u3EN1YnS4lFY60of97apaWfA78=
Subject key identifier:   8A:E4:BC:F1:FA:83:20:9B:59:CF:EE:1A:60:9A:98:FC:63:46:D8:49
Certificate issuer:       /CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA
Certificate serial:       02DB4E9BBDDB78286E6D4AD2B788DA9EDF5EE3CB
Authority key identifier: F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa
Signing time:             Sun 03 May 2026 03:14:43 +0000
ROA not before:           Sun 03 May 2026 03:09:43 +0000
ROA not after:            Sun 02 May 2027 03:14:43 +0000
asID:                     141083
IP address blocks:        103.162.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl
                          rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:db:4e:9b:bd:db:78:28:6e:6d:4a:d2:b7:88:da:9e:df:5e:e3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA
        Validity
            Not Before: May  3 03:09:43 2026 GMT
            Not After : May  2 03:14:43 2027 GMT
        Subject: CN=8AE4BCF1FA83209B59CFEE1A609A98FC6346D849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:a9:b5:9a:d9:57:6d:ab:74:73:c8:11:2b:
                    b1:4f:95:b6:2b:c8:dd:16:02:41:87:5a:3f:d9:57:
                    3d:01:65:2b:3f:82:f1:75:39:89:6c:a3:bc:65:11:
                    3c:16:d2:8f:01:ba:40:ac:82:8c:1d:63:9a:e3:71:
                    9b:0e:0d:a6:ea:c2:50:7a:d1:49:2a:a0:1d:5a:95:
                    d5:7e:4e:d6:06:24:84:f2:9c:9b:02:36:67:bc:b5:
                    46:5f:d3:bb:aa:5a:56:5c:35:81:36:4c:26:a6:ae:
                    d8:5d:0c:18:b3:97:2a:8f:8e:34:6f:d7:30:9e:97:
                    15:bb:f0:59:3b:9b:5e:ba:da:a3:f5:8f:b0:9e:42:
                    1f:1d:96:3b:80:26:48:f9:3a:23:a0:c6:96:a0:88:
                    c5:a4:8c:d0:f3:f8:f2:0f:3f:aa:78:dc:e5:1a:6b:
                    c9:9d:32:c1:ae:57:ca:b0:80:15:b7:32:1a:51:56:
                    9e:1b:e1:be:8f:41:c8:30:6e:a9:11:f2:98:c2:92:
                    df:bf:91:7b:55:8d:cc:3e:8f:6a:f3:9e:18:ee:ab:
                    76:01:20:57:a5:f2:64:fd:23:6b:fb:4e:d3:e5:5d:
                    ce:78:0c:6b:93:d7:f8:d4:76:ac:92:dc:2b:c0:8b:
                    46:29:4c:be:38:2e:6c:48:61:4e:7d:08:e9:32:13:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E4:BC:F1:FA:83:20:9B:59:CF:EE:1A:60:9A:98:FC:63:46:D8:49
            X509v3 Authority Key Identifier:
                keyid:F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:09:2c:1a:e1:4c:2d:eb:22:3c:33:8e:cc:23:ac:01:ef:85:
         a6:1b:2b:41:2b:fb:78:02:36:3d:0c:8c:7a:0e:d6:be:9a:ce:
         8d:93:79:65:da:01:93:68:56:02:a8:54:da:e8:10:74:30:12:
         1e:12:10:4f:3f:84:6c:8d:78:23:1e:6b:98:1a:d7:66:9f:41:
         5f:b7:38:8f:5e:a0:fb:92:d1:22:28:61:0a:d2:e8:66:03:78:
         eb:0a:af:e2:61:86:18:af:3d:9b:b2:90:73:9c:66:0c:b8:de:
         e7:87:27:12:34:a8:c5:ba:11:27:6f:34:af:81:6b:98:a1:bd:
         e7:6e:52:10:ed:d0:27:0f:92:16:17:3f:94:96:c1:f3:fc:b1:
         b3:a7:fc:34:d2:49:f1:da:2e:4f:69:80:59:ca:6c:40:7e:ad:
         c6:15:85:8b:ea:9e:04:7d:26:24:09:ca:b1:d5:22:c2:48:8e:
         64:48:28:e5:cd:73:98:a0:a9:ed:25:00:fc:11:61:aa:c5:11:
         94:a8:d9:bd:d0:5d:b2:ea:c0:84:6f:ce:9f:8c:38:45:4e:33:
         8d:1d:cb:0a:26:d3:7d:e0:05:7d:22:c7:84:e8:17:6d:4e:9c:
         0a:33:92:48:8c:8a:39:c6:60:ac:cc:df:96:f9:69:4b:0d:00:
         27:dd:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:20:46 2026 by rpki-client