Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa
File:                     3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (raw, json)
Hash identifier:          sxS8L7umdKtGUeT2wWhEoM1JoZ/BT1Jv1zxeZbH381g=
Subject key identifier:   3F:5F:86:01:5A:4D:96:5A:6B:62:4D:73:64:AA:E5:74:72:88:77:48
Certificate issuer:       /CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
Certificate serial:       189D326BF44D8A3836B220D8C77E414C88D75234
Authority key identifier: 0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa
Signing time:             Sun 03 May 2026 03:16:15 +0000
ROA not before:           Sun 03 May 2026 03:11:15 +0000
ROA not after:            Sun 02 May 2027 03:16:15 +0000
asID:                     131775
IP address blocks:        103.16.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl
                          rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9d:32:6b:f4:4d:8a:38:36:b2:20:d8:c7:7e:41:4c:88:d7:52:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
        Validity
            Not Before: May  3 03:11:15 2026 GMT
            Not After : May  2 03:16:15 2027 GMT
        Subject: CN=3F5F86015A4D965A6B624D7364AAE57472887748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:d1:e0:5d:fb:a3:1e:39:2d:12:40:25:61:
                    cd:d4:d9:d9:f7:99:85:14:f1:ae:38:7a:e9:89:60:
                    6d:21:75:62:19:49:bd:ec:09:9a:b3:24:3e:22:af:
                    bb:89:51:28:d3:ca:37:35:af:a4:4d:48:a4:20:00:
                    2b:8c:e1:c2:5d:8a:ae:d2:e9:c7:a4:06:a4:ec:f4:
                    9f:3a:00:a4:d4:34:65:56:9f:0f:05:a8:5d:83:73:
                    a7:c5:29:d0:e7:d4:c4:29:63:76:c5:5b:b0:55:20:
                    68:27:20:36:5d:a6:4d:f7:ee:f1:58:08:c2:ae:d1:
                    bf:54:64:49:a3:66:d7:00:36:5c:8f:8b:10:c4:d8:
                    ae:54:e6:0a:a1:4e:ce:a7:9d:7c:da:62:4e:f6:af:
                    87:e3:12:80:e5:28:67:37:6e:ae:ef:0f:58:6c:03:
                    48:9a:79:ee:5d:0c:70:fc:b7:8e:a8:80:95:2b:c4:
                    29:81:e9:2a:53:af:a4:52:d2:b8:a1:42:a3:c7:7b:
                    cb:b0:ec:29:05:52:c5:7b:97:0d:b0:5c:f6:88:a8:
                    09:6c:09:ea:f2:47:d5:80:cb:5a:05:4e:ef:e4:34:
                    7b:c2:15:03:e7:69:d6:a9:35:ce:9a:e2:20:fd:c4:
                    b4:df:b2:5b:9b:0b:8d:b6:8e:2a:4e:e7:08:b2:15:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5F:86:01:5A:4D:96:5A:6B:62:4D:73:64:AA:E5:74:72:88:77:48
            X509v3 Authority Key Identifier:
                keyid:0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:ee:38:b9:37:58:23:b9:79:2d:80:0c:ca:ef:a0:76:36:8a:
         26:c4:bf:9b:a5:76:26:70:7d:f6:2e:e7:6b:cb:94:36:38:e7:
         7f:60:5b:ce:58:4b:57:eb:ac:fb:b5:3b:6c:da:f9:14:50:14:
         28:6a:21:c8:22:6e:4f:c3:db:76:82:8b:98:77:e6:0f:3f:ff:
         5c:d5:ff:3a:50:32:ce:17:e4:54:8f:9b:96:72:9d:c7:b4:5d:
         4a:19:ac:bd:81:1a:de:cf:27:5c:b7:dd:d0:bb:75:6d:ae:b1:
         b0:4c:a1:e8:45:a3:29:91:36:70:15:1f:38:e2:f0:e7:2a:ba:
         c1:16:8b:c5:15:e0:50:ab:8c:53:94:7c:97:ca:77:1b:5f:bd:
         b0:44:f8:3c:89:16:79:b9:c7:86:e0:ba:37:b6:6c:d4:df:41:
         eb:ad:59:a5:9c:af:61:65:99:08:b7:9b:07:9f:3d:c7:b7:0b:
         11:eb:1e:8d:20:cd:e9:c2:76:a5:a1:84:f4:40:37:65:a8:df:
         b7:81:35:65:25:6a:68:65:75:a5:db:19:26:d3:9a:70:71:c1:
         b8:44:98:5e:c0:0c:6c:27:01:cb:0d:97:14:ff:9b:50:b4:e5:
         b1:cb:f9:39:62:5e:fb:f9:17:f0:b5:07:5e:7a:22:79:96:a0:
         e2:01:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:05 2026 by rpki-client