Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa
File:                     3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (raw, json)
Hash identifier:          CF93x0CUSZc9nwaPIf94Rg3qFl8JOdqJteM1vot6/7Q=
Subject key identifier:   A7:DA:9B:57:0B:E3:99:C6:97:2D:9F:FA:08:7A:9C:70:58:93:9F:51
Certificate issuer:       /CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
Certificate serial:       41672236753B48B2832E57BD551AB28CEAD57A4B
Authority key identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa
Signing time:             Sun 03 May 2026 03:17:37 +0000
ROA not before:           Sun 03 May 2026 03:12:37 +0000
ROA not after:            Sun 02 May 2027 03:17:37 +0000
asID:                     141623
IP address blocks:        103.161.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:67:22:36:75:3b:48:b2:83:2e:57:bd:55:1a:b2:8c:ea:d5:7a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
        Validity
            Not Before: May  3 03:12:37 2026 GMT
            Not After : May  2 03:17:37 2027 GMT
        Subject: CN=A7DA9B570BE399C6972D9FFA087A9C7058939F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:a5:62:00:a9:8d:1d:25:7d:31:82:1e:5f:
                    f3:ee:e3:41:96:be:dd:b8:7b:13:6e:05:4d:7d:64:
                    52:eb:2e:7f:8a:b3:33:f8:10:15:fb:b6:e7:70:51:
                    1f:66:d6:30:9b:33:da:9b:2a:00:75:88:f4:b6:87:
                    82:e2:13:64:d8:96:59:9a:4f:97:f9:ca:31:e0:3a:
                    e3:7e:84:a7:14:69:cf:ca:36:3d:75:c6:2c:08:9a:
                    d7:f4:5d:39:40:ca:6a:74:9a:73:94:37:bf:bc:b0:
                    b9:98:9a:2b:19:c5:05:d5:80:dc:bc:2b:b1:89:78:
                    53:3e:54:a8:b3:4d:10:5e:29:4c:be:ae:70:18:ef:
                    29:b4:bd:c1:fd:e8:3a:0b:13:30:76:5c:61:cf:de:
                    0f:0f:95:46:38:aa:da:47:fe:2d:eb:9b:64:3e:55:
                    76:36:62:9e:59:af:89:3d:83:de:fa:ff:af:48:18:
                    cb:65:ab:17:a4:a6:82:47:32:ff:f1:71:f9:47:61:
                    52:90:1a:f5:89:62:50:aa:a6:3c:eb:b5:04:41:4c:
                    0e:8f:05:bf:c0:5a:48:cb:19:dd:e0:77:de:84:05:
                    b9:39:6e:5b:e0:39:9e:b2:a0:67:72:38:70:f8:03:
                    f0:74:68:1b:95:4e:4a:8c:68:63:38:7f:13:e2:08:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DA:9B:57:0B:E3:99:C6:97:2D:9F:FA:08:7A:9C:70:58:93:9F:51
            X509v3 Authority Key Identifier:
                keyid:54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:c8:f3:7f:3d:b4:4c:65:d8:14:47:06:c6:07:a2:48:09:
         b9:2c:a1:1c:44:52:84:22:59:0a:08:e1:7c:ce:6e:07:df:d1:
         81:20:b6:bd:5c:cc:bd:b3:ad:da:17:07:e2:8c:20:b2:d8:ad:
         d4:33:9b:e1:87:f9:83:87:a7:cf:7d:d9:4b:a6:70:25:b8:59:
         f6:b7:a9:2d:a0:ac:3d:a0:3c:2c:df:9d:82:e0:0b:fc:4d:04:
         0e:8d:8a:cc:28:1f:95:5e:1e:7a:fa:0a:63:e7:02:65:ac:97:
         f5:a9:32:af:77:ea:39:42:72:c3:77:5a:15:f3:7a:89:af:66:
         1c:2e:91:8a:3a:61:f1:71:62:dd:f1:5c:4e:34:f3:b3:34:17:
         b0:cd:11:cd:85:4c:7e:b7:c0:3b:3a:54:6a:f9:e2:39:18:a3:
         db:b8:69:2d:78:e8:42:57:14:0f:db:d7:32:7f:04:df:86:15:
         eb:75:1a:f5:d9:4a:c0:65:9b:e4:ee:ae:89:91:90:fe:32:83:
         2e:ce:c3:0a:86:3e:4f:de:bc:d8:d1:72:41:c0:de:b4:2b:1c:
         2d:97:54:39:a4:59:77:a1:bb:ff:fb:dd:dd:e5:05:f8:aa:c8:
         2f:34:64:b8:94:93:b5:6f:b3:0e:8d:2e:61:2b:61:06:54:75:
         02:2c:b0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:07 2026 by rpki-client