Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa
File:                     3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa (raw, json)
Hash identifier:          8xo0Jl7LzjqAxX44IJumhtA9p3VYF5J5mSQKHYl3YIw=
Subject key identifier:   B7:BB:4C:60:90:A3:FC:70:7E:6B:AA:46:B3:72:FF:9A:55:C8:75:DC
Certificate issuer:       /CN=187F162EF573D82408D04DFBF5DDAA285BE8BB65
Certificate serial:       45704955B3F66B802943CC4F3A04EA5706F36C11
Authority key identifier: 18:7F:16:2E:F5:73:D8:24:08:D0:4D:FB:F5:DD:AA:28:5B:E8:BB:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/187F162EF573D82408D04DFBF5DDAA285BE8BB65.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa
Signing time:             Sun 03 May 2026 03:16:20 +0000
ROA not before:           Sun 03 May 2026 03:11:20 +0000
ROA not after:            Sun 02 May 2027 03:16:20 +0000
asID:                     55688
IP address blocks:        103.163.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.crl
                          rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/187F162EF573D82408D04DFBF5DDAA285BE8BB65.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:70:49:55:b3:f6:6b:80:29:43:cc:4f:3a:04:ea:57:06:f3:6c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187F162EF573D82408D04DFBF5DDAA285BE8BB65
        Validity
            Not Before: May  3 03:11:20 2026 GMT
            Not After : May  2 03:16:20 2027 GMT
        Subject: CN=B7BB4C6090A3FC707E6BAA46B372FF9A55C875DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:61:9f:5a:82:6b:76:f8:27:0e:c4:b1:df:
                    1e:55:58:4d:50:2e:7e:87:5e:a8:56:f4:40:82:8a:
                    87:82:0d:96:8f:95:86:f5:8c:5e:d8:57:ef:64:d3:
                    13:45:fb:aa:58:44:28:fe:6c:84:7e:06:66:ca:de:
                    5e:23:e9:93:9e:22:4b:ef:de:2e:9e:f3:88:20:b3:
                    d9:b6:f5:2d:fb:c8:29:3d:41:81:3a:78:94:d2:3c:
                    d9:92:5e:8d:52:ac:9f:af:4b:fc:a8:7c:6f:81:f9:
                    f9:c5:ee:0a:68:d3:44:26:a0:f4:8f:88:0c:9f:56:
                    23:18:9e:2f:64:1b:6a:ae:af:12:aa:63:be:55:26:
                    1a:fe:4c:9b:5f:7f:c2:03:4c:80:be:75:d5:b5:a8:
                    da:4e:ce:92:b9:83:d8:1d:fa:4e:84:46:5c:ca:69:
                    a0:df:20:ee:5a:b9:be:e0:4d:9f:ae:71:1f:54:91:
                    0e:8c:37:44:b6:ed:64:8c:b7:35:90:08:b6:b2:38:
                    d6:19:47:98:c3:2c:5d:cb:6a:33:81:b5:f7:09:93:
                    b9:2c:d1:8e:60:cf:b5:77:a9:49:54:ea:26:88:07:
                    c8:f3:12:0f:71:fe:ab:79:07:48:03:99:d9:47:0c:
                    2d:24:22:8e:78:62:3d:2f:62:64:28:7e:9d:39:ec:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BB:4C:60:90:A3:FC:70:7E:6B:AA:46:B3:72:FF:9A:55:C8:75:DC
            X509v3 Authority Key Identifier:
                keyid:18:7F:16:2E:F5:73:D8:24:08:D0:4D:FB:F5:DD:AA:28:5B:E8:BB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/187F162EF573D82408D04DFBF5DDAA285BE8BB65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:69:8c:c0:ca:a4:53:f2:97:8d:ea:61:41:89:6b:f5:a7:2b:
         33:75:52:91:39:7e:fe:68:b1:4a:2e:2b:1c:79:6a:83:10:79:
         3c:d5:ff:5b:db:ea:83:1a:14:92:0b:10:00:94:f1:cc:c5:1c:
         72:74:ef:de:ef:c7:e0:1d:37:ea:54:da:f8:98:d0:54:6a:1b:
         f1:2b:cf:c7:6e:36:52:38:9e:61:27:6b:99:af:3e:8a:99:38:
         04:94:20:34:91:b6:ef:ab:2c:b4:e0:2c:e5:b1:6a:47:0b:e6:
         9d:c6:75:d2:0b:96:23:05:49:fa:c2:9a:d6:d4:34:ae:3a:e0:
         3b:53:19:d6:44:ce:6c:a4:75:00:21:a1:82:5c:24:94:77:b8:
         8b:47:fc:58:9b:50:f2:80:27:c0:d8:e2:2f:a4:0f:bc:72:37:
         75:0a:a0:e4:b6:6c:85:f9:97:a6:42:2d:50:9d:d7:87:1c:4f:
         02:cb:a8:e4:a6:42:32:75:49:a0:1f:9e:a2:9b:4f:1b:e0:a2:
         9c:c5:b4:79:7c:3e:cf:d5:0b:4f:11:02:e1:57:c1:ad:57:3f:
         40:23:5e:50:bc:20:d4:6a:fb:ab:3d:31:8a:e8:c6:c6:ad:8b:
         bf:6d:19:cd:6a:d6:6c:18:17:d2:76:ba:47:4d:ff:70:f2:1b:
         86:6f:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:56 2026 by rpki-client