Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa
File:                     3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (raw, json)
Hash identifier:          QTvSNhE992wCS0VNXGZ4QrTW5fEG/UCs6bm/K+0HXAk=
Subject key identifier:   88:42:22:74:97:14:59:FE:74:95:E3:8E:53:B2:ED:77:22:99:43:14
Certificate issuer:       /CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B
Certificate serial:       6462E637186DBB3FFF1DC17ABA606B959778EF69
Authority key identifier: AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa
Signing time:             Sun 03 May 2026 03:15:16 +0000
ROA not before:           Sun 03 May 2026 03:10:16 +0000
ROA not after:            Sun 02 May 2027 03:15:16 +0000
asID:                     141950
IP address blocks:        103.166.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl
                          rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:62:e6:37:18:6d:bb:3f:ff:1d:c1:7a:ba:60:6b:95:97:78:ef:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B
        Validity
            Not Before: May  3 03:10:16 2026 GMT
            Not After : May  2 03:15:16 2027 GMT
        Subject: CN=88422274971459FE7495E38E53B2ED7722994314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:85:62:c3:8c:cd:dd:22:f4:ab:0e:cf:9f:
                    2f:65:2f:d1:c4:7d:4b:f3:34:b4:e6:53:9b:79:65:
                    f3:04:04:1d:51:96:05:c7:40:16:fc:c2:f9:30:ff:
                    bd:b6:8c:2b:35:56:1a:3e:09:75:76:4e:0e:58:0c:
                    c8:ef:46:55:97:80:de:7c:86:c9:89:be:5b:5b:f1:
                    da:d7:01:59:ed:64:0a:a5:c5:80:9d:af:ad:f6:b8:
                    f8:14:33:c2:a9:b8:72:64:d1:48:05:26:cf:23:b9:
                    f3:18:49:3a:9d:ea:e8:bb:6f:86:c4:43:db:de:de:
                    e3:4f:7d:83:3b:d5:41:c0:a1:a5:70:81:fd:4f:1d:
                    9d:5d:6b:a1:69:15:65:37:ce:af:b0:49:58:1f:a7:
                    45:4e:73:02:a9:6e:a2:20:c1:fd:81:3f:fa:02:14:
                    1b:8a:96:8b:53:8f:21:22:d1:a8:e9:82:d6:89:ff:
                    e4:8d:fe:33:be:1d:df:86:58:93:49:63:62:9f:76:
                    f0:ce:c0:77:6a:86:1c:71:8e:cb:98:0c:a4:0f:c3:
                    9a:01:5b:b5:b8:10:a9:e9:6e:f2:52:5e:31:76:28:
                    16:f3:f5:94:65:5f:b9:f1:e9:bd:97:d9:bf:8e:f8:
                    ae:b1:73:b1:d4:1a:50:8a:9d:62:bb:dd:38:99:1e:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:42:22:74:97:14:59:FE:74:95:E3:8E:53:B2:ED:77:22:99:43:14
            X509v3 Authority Key Identifier:
                keyid:AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:53:5f:6c:27:0e:45:75:1d:8b:3b:75:e1:d8:ec:73:e8:43:
         20:50:11:58:57:23:2c:52:ee:d8:2c:7a:e8:ca:2d:9e:b4:de:
         85:6d:ce:5a:a5:e4:1d:c7:3d:ff:f5:13:b7:45:78:12:85:f7:
         af:4c:39:7e:d8:38:1a:51:9b:bf:ab:88:41:4e:62:cf:93:ca:
         14:d1:ef:61:5f:ec:48:8d:2f:1d:ae:b6:8c:d3:50:58:3a:cb:
         ff:f1:cf:63:d1:ad:a0:ae:72:8d:6a:a5:27:13:96:12:bc:30:
         5a:84:11:b2:c5:f9:b5:77:57:00:70:cd:c1:56:77:83:71:8e:
         29:e8:d5:8a:bd:0c:43:97:3a:b9:e4:db:08:22:ed:0f:28:86:
         de:99:36:2d:3a:d6:f8:b1:45:12:7d:95:df:1a:b7:00:5e:b4:
         c9:46:ef:09:3c:ed:09:d1:1f:c8:b0:d2:e4:4e:6b:48:5b:1b:
         50:0b:2d:a2:4c:e1:5d:c8:cb:4f:d1:f8:30:00:7c:e2:b7:92:
         9e:29:f3:c1:dd:ab:78:22:1f:bb:f4:9e:f3:1b:1b:5f:00:6e:
         cb:18:5d:0c:78:45:29:9e:09:9d:26:81:10:02:aa:81:e2:ca:
         02:41:7f:00:4e:79:69:19:9c:98:78:60:46:85:b6:52:7f:02:
         6a:cf:2b:c6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZGLmNxhtuz//HcF6umBrlZd472kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJFRDcxRTlGNjQ0REMwQjcxQUY3MUEyNTkwMUMwNTUx
QjFGMTM0QjAeFw0yNjA1MDMwMzEwMTZaFw0yNzA1MDIwMzE1MTZaMDMxMTAvBgNV
BAMTKDg4NDIyMjc0OTcxNDU5RkU3NDk1RTM4RTUzQjJFRDc3MjI5OTQzMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xIViw4zN3SL0qw7Pny9lL9HE
fUvzNLTmU5t5ZfMEBB1RlgXHQBb8wvkw/722jCs1Vho+CXV2Tg5YDMjvRlWXgN58
hsmJvltb8drXAVntZAqlxYCdr632uPgUM8KpuHJk0UgFJs8jufMYSTqd6ui7b4bE
Q9ve3uNPfYM71UHAoaVwgf1PHZ1da6FpFWU3zq+wSVgfp0VOcwKpbqIgwf2BP/oC
FBuKlotTjyEi0ajpgtaJ/+SN/jO+Hd+GWJNJY2KfdvDOwHdqhhxxjsuYDKQPw5oB
W7W4EKnpbvJSXjF2KBbz9ZRlX7nx6b2X2b+O+K6xc7HUGlCKnWK73TiZHoITAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUiEIidJcUWf50leOOU7LtdyKZQxQwHwYDVR0j
BBgwFoAUq+1x6fZE3Atxr3GiWQHAVRsfE0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWE5YjgyMmEtOGI5MS00OGQyLTliYzEtYWUwZDkwMGJmOWM3LzAvQUJFRDcxRTlG
NjQ0REMwQjcxQUY3MUEyNTkwMUMwNTUxQjFGMTM0Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQkVENzFFOUY2NDREQzBCNzFBRjcxQTI1OTAxQzA1NTFCMUYx
MzRCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhOWI4MjJhLThiOTEtNDhkMi05
YmMxLWFlMGQ5MDBiZjljNy8wLzMxMzAzMzJlMzEzNjM2MmUzMTM2MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM1MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpqQwDQYJ
KoZIhvcNAQELBQADggEBABVTX2wnDkV1HYs7deHY7HPoQyBQEVhXIyxS7tgseujK
LZ603oVtzlql5B3HPf/1E7dFeBKF969MOX7YOBpRm7+riEFOYs+TyhTR72Ff7EiN
Lx2utozTUFg6y//xz2PRraCuco1qpScTlhK8MFqEEbLF+bV3VwBwzcFWd4Nxjino
1Yq9DEOXOrnk2wgi7Q8oht6ZNi061vixRRJ9ld8atwBetMlG7wk87QnRH8iw0uRO
a0hbG1ALLaJM4V3Iy0/R+DAAfOK3kp4p88Hdq3giH7v0nvMbG18AbssYXQx4RSme
CZ0mgRACqoHiygJBfwBOeWkZnJh4YEaFtlJ/AmrPK8Y=
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:14 2026 by rpki-client