Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa
File:                     3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (raw, json)
Hash identifier:          vaJ2Jnx34d5ViQhIOJO1KUl8K4Z1siF9VMxKO/oKGPo=
Subject key identifier:   DB:5C:D6:35:7A:18:7E:98:2C:2C:F9:A6:4D:49:D9:E2:A3:2B:53:2F
Certificate issuer:       /CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
Certificate serial:       19FAF0BB325BDCFB369E3E4D6BB9B604C7069989
Authority key identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa
Signing time:             Sun 03 May 2026 03:17:37 +0000
ROA not before:           Sun 03 May 2026 03:12:37 +0000
ROA not after:            Sun 02 May 2027 03:17:37 +0000
asID:                     141623
IP address blocks:        103.161.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fa:f0:bb:32:5b:dc:fb:36:9e:3e:4d:6b:b9:b6:04:c7:06:99:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
        Validity
            Not Before: May  3 03:12:37 2026 GMT
            Not After : May  2 03:17:37 2027 GMT
        Subject: CN=DB5CD6357A187E982C2CF9A64D49D9E2A32B532F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:37:13:f3:7a:ce:ae:15:e9:79:33:17:4c:
                    8d:1d:ee:b0:39:86:62:5a:b5:7d:5b:b4:cc:db:4c:
                    df:e9:5a:26:73:84:7f:4b:86:fa:d2:b6:08:fa:fd:
                    ca:73:13:7f:3d:8d:0a:c7:c9:b7:a7:37:1f:bb:43:
                    81:d1:2f:a2:c3:23:af:4e:6b:aa:8d:ee:7c:f3:cc:
                    0f:8b:6e:73:33:ae:3c:13:07:d8:b7:1d:08:f5:02:
                    5b:fb:7e:9d:59:a4:c8:6b:53:99:56:41:99:f6:ca:
                    49:94:5c:0d:be:13:57:e8:2e:6b:9f:d4:c9:8d:60:
                    ff:d0:fd:8d:a1:77:63:b4:6b:77:34:fd:59:9f:43:
                    5f:32:4b:2a:9f:39:74:11:05:b3:e0:f2:c6:cb:6e:
                    20:8c:bc:dc:b8:a2:e5:df:5c:19:30:16:d5:4e:75:
                    2f:15:02:b4:17:ea:66:0b:2c:32:91:4d:2f:7e:2c:
                    f5:49:f1:b3:5b:a7:cc:ac:7c:c0:67:7a:6d:a4:78:
                    f0:52:b4:bc:75:13:b0:06:2c:e2:f9:55:57:da:39:
                    ce:7a:5c:5d:1e:bd:08:e7:af:ce:dd:0f:95:c7:ff:
                    9e:15:fd:fc:9e:0e:18:12:d4:50:0d:f7:e8:c3:ca:
                    36:f4:64:ae:65:92:ef:e8:20:c5:82:82:98:e8:c9:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5C:D6:35:7A:18:7E:98:2C:2C:F9:A6:4D:49:D9:E2:A3:2B:53:2F
            X509v3 Authority Key Identifier:
                keyid:54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:0a:4d:16:0e:9f:ee:68:13:ac:3a:51:c1:02:4d:5c:f9:8d:
         29:21:26:4e:19:82:01:7e:34:b1:26:8c:fd:f3:12:a3:ef:90:
         6d:e6:42:32:2f:48:2a:01:61:9f:21:91:59:c0:dd:79:4b:c8:
         0e:18:8b:3c:bb:69:49:b8:bc:f2:e7:5b:d8:63:3a:c7:68:71:
         2a:88:d9:0d:3c:32:1c:ac:3f:f6:aa:3c:14:cd:ea:c3:9f:2c:
         53:86:c8:ee:a1:8a:a1:33:a3:79:74:42:f8:79:81:ae:b4:de:
         18:6e:25:7b:c8:20:c9:7f:78:58:0d:e1:64:31:9f:91:7f:1a:
         a9:33:33:8c:06:63:c6:c4:05:11:2d:87:89:0a:90:d8:52:fc:
         3b:f3:20:7c:6c:10:2c:d5:bb:2a:96:5d:9f:a1:bc:10:33:98:
         34:4d:5d:cd:f5:0b:c0:7d:4c:e8:40:1e:3a:ac:30:72:eb:2d:
         32:ba:92:dd:f2:b9:78:c9:d9:5b:97:d7:78:77:d2:6f:80:4a:
         d7:70:ea:40:52:9e:70:24:0c:a0:dd:48:74:b4:8e:71:e1:49:
         09:b9:13:58:f4:62:23:d1:fb:f1:67:c6:21:6b:50:7e:c3:16:
         c3:dc:be:f0:25:5c:48:4c:7e:46:94:f2:9e:6e:4b:89:38:33:
         f7:f5:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:18 2026 by rpki-client