Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa
File:                     3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (raw, json)
Hash identifier:          mCuIl3B+Pq3Irur4J3MaaMeyRxcQ7JCNDx31iNrLDkc=
Subject key identifier:   4E:AA:00:6C:7A:01:82:59:FF:6B:8C:F1:2A:BF:61:78:36:D9:E2:39
Certificate issuer:       /CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2
Certificate serial:       1CCE5E737D5C2E218EFCF04FD4B852265CD2FAFA
Authority key identifier: C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa
Signing time:             Sun 03 May 2026 02:15:36 +0000
ROA not before:           Sun 03 May 2026 02:10:36 +0000
ROA not after:            Sun 02 May 2027 02:15:36 +0000
asID:                     17995
IP address blocks:        103.158.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl
                          rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 16:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ce:5e:73:7d:5c:2e:21:8e:fc:f0:4f:d4:b8:52:26:5c:d2:fa:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2
        Validity
            Not Before: May  3 02:10:36 2026 GMT
            Not After : May  2 02:15:36 2027 GMT
        Subject: CN=4EAA006C7A018259FF6B8CF12ABF617836D9E239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:92:7a:c9:28:8e:91:41:6f:86:a6:21:cb:
                    99:d6:b9:83:b0:63:d7:6f:db:06:bb:a2:d2:06:9c:
                    7c:d2:08:eb:6e:3f:6d:d9:20:0d:1f:ab:64:07:f1:
                    aa:bf:70:b3:d6:8a:10:f0:6f:50:8a:77:4e:0b:a1:
                    6e:d8:0a:1d:b8:48:48:67:ba:b7:84:31:5e:79:5d:
                    be:10:a0:88:16:43:04:b7:df:d0:53:02:51:5b:23:
                    4c:75:60:26:98:d6:62:10:bc:3d:e7:0c:a0:53:9c:
                    b0:7b:a4:1c:0c:79:9d:70:be:ed:b7:33:23:97:8f:
                    35:8e:8c:57:66:ac:38:78:c5:71:f5:1a:51:b7:b2:
                    be:de:80:b2:7f:bd:f1:61:f7:26:50:04:61:56:61:
                    a7:0f:8c:b4:82:ff:0c:d1:0f:1d:0d:e8:dd:84:03:
                    23:91:af:ad:a6:51:8c:0e:3b:4a:d6:f0:1c:7b:10:
                    4c:cf:a0:14:4d:ff:68:65:52:32:94:4f:0a:21:7b:
                    83:96:47:b1:8f:0b:3c:c9:24:68:3b:3c:a0:8e:b2:
                    7b:da:6a:cc:3f:35:57:50:59:2a:ea:cc:67:56:81:
                    54:d7:ef:43:61:1c:10:3e:dd:69:16:79:0d:12:80:
                    9a:69:d6:c6:7e:70:de:0a:c4:f3:17:1b:37:e1:b0:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AA:00:6C:7A:01:82:59:FF:6B:8C:F1:2A:BF:61:78:36:D9:E2:39
            X509v3 Authority Key Identifier:
                keyid:C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:27:c6:79:0c:b5:70:2d:2e:d8:7f:d9:4e:cb:9f:e9:dd:ef:
         6d:97:f8:80:b6:05:54:4d:cf:df:fc:eb:15:96:c2:bc:a2:a9:
         b2:b1:18:f6:c6:31:cd:c6:35:34:d5:29:59:1e:54:87:7f:62:
         25:66:a0:e0:be:e5:a7:b6:fd:6a:a0:c7:e9:09:5b:7e:bd:b4:
         91:dc:63:4a:55:77:2f:8e:8a:6f:2a:f6:24:e7:c4:3d:89:4c:
         ac:db:29:f0:aa:3b:ea:ce:9f:50:04:08:fe:51:e9:e1:a0:b8:
         bb:bd:2a:ae:c2:e7:22:8b:39:a3:01:4a:6e:c0:82:17:c9:74:
         cd:9d:06:74:8f:41:03:ae:03:95:da:68:d4:64:7a:81:c1:f2:
         4c:e6:07:4c:0c:19:5d:d6:4d:a2:af:e6:01:af:8a:54:9f:e2:
         31:6a:e9:1f:16:24:d9:b5:26:62:b3:d2:08:ce:ef:5a:0e:7e:
         74:57:03:08:1b:68:e0:e0:be:50:7a:da:2d:5d:f4:3d:50:2c:
         22:1f:82:2e:1f:b7:10:8d:0a:51:07:1a:ed:05:59:d1:a9:a9:
         e5:e5:1b:1b:fb:19:d5:0d:57:8e:f6:3e:23:4f:5d:7a:40:69:
         5c:e1:d0:e8:0d:e3:1f:0e:39:e3:42:6f:ab:04:d9:2d:83:a3:
         25:79:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:36:51 2026 by rpki-client