Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/3130332e3136372e32322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136372e32322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          jBjn/26T9nOLxs1yUlk7/z6hpoVPKoLHthzCZsrv0gk=
Subject key identifier:   4C:ED:9F:A8:41:68:3A:13:A4:E6:A7:40:9A:CC:8E:B3:C1:FD:54:A9
Certificate issuer:       /CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1
Certificate serial:       41D7348257589FE1760404506B38FC8F8CFF1638
Authority key identifier: 6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/3130332e3136372e32322e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 02:16:07 +0000
ROA not before:           Sun 03 May 2026 02:11:07 +0000
ROA not after:            Sun 02 May 2027 02:16:07 +0000
asID:                     17995
IP address blocks:        103.167.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl
                          rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 15:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d7:34:82:57:58:9f:e1:76:04:04:50:6b:38:fc:8f:8c:ff:16:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1
        Validity
            Not Before: May  3 02:11:07 2026 GMT
            Not After : May  2 02:16:07 2027 GMT
        Subject: CN=4CED9FA841683A13A4E6A7409ACC8EB3C1FD54A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:84:8f:a7:8f:e9:57:90:3d:ed:99:4a:48:
                    f1:1d:b0:2e:56:00:b5:3e:9a:b4:3c:60:ef:bf:88:
                    2e:aa:b8:89:dc:86:97:73:d4:13:fe:4b:36:e3:fe:
                    0f:75:3b:e4:ac:86:66:89:a7:1a:a5:5c:24:cc:03:
                    74:53:82:a5:f3:84:07:51:e7:46:cb:81:ba:c4:f3:
                    36:f7:9f:36:58:b1:7a:72:f4:5b:6c:b5:3c:1f:e8:
                    c9:8a:e4:06:fe:2c:9c:6f:19:40:63:5e:ed:06:8b:
                    4c:15:d4:5a:d2:8e:03:7f:68:56:de:57:28:a8:31:
                    68:60:a8:54:b3:7e:f8:95:ec:02:f6:5b:cd:64:3e:
                    3c:15:c1:d7:af:53:59:c5:29:90:a7:2c:75:41:23:
                    10:2d:a3:c4:39:64:8a:50:4e:ce:15:98:6f:cd:3e:
                    64:a1:2b:0e:7b:77:69:67:18:89:07:48:73:ed:ec:
                    94:e9:22:57:49:47:8e:55:66:d0:52:95:8a:1a:b9:
                    37:39:80:7a:91:a9:e6:4f:c6:69:18:89:0b:58:ed:
                    c6:14:d7:ae:c3:7d:11:cc:15:d2:f3:c5:2d:da:d8:
                    4a:94:68:fe:54:85:2c:84:2a:3a:ff:87:a8:7d:49:
                    56:91:ab:82:b6:6e:2b:cd:e4:fe:fc:45:9c:d4:da:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:ED:9F:A8:41:68:3A:13:A4:E6:A7:40:9A:CC:8E:B3:C1:FD:54:A9
            X509v3 Authority Key Identifier:
                keyid:6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/3130332e3136372e32322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:8b:fa:de:f6:e2:d9:ca:a3:bf:91:fb:51:91:f1:cd:f0:cf:
         cd:45:74:02:00:0f:02:d5:ed:05:4e:02:aa:3b:60:9d:9d:ce:
         9d:a7:e5:c4:13:46:5f:5f:61:36:14:28:18:55:be:06:0d:75:
         11:01:90:d0:b7:2a:74:32:97:45:aa:c2:92:d7:6f:8d:14:eb:
         f1:97:b1:77:c5:ab:28:82:d3:3e:c8:fe:a4:90:8e:a9:da:a3:
         9e:e8:b7:8b:ec:ff:e4:1e:83:77:93:4a:b2:54:88:72:e6:eb:
         33:59:2d:68:e9:ce:9d:76:c0:0d:c0:6b:91:b3:51:fa:0d:82:
         8b:97:c2:b2:1c:f9:6c:48:11:f2:b2:0c:a0:cb:f6:dc:82:ef:
         f0:1a:af:46:05:3f:1d:81:20:f0:0a:68:6f:4a:ff:52:80:4d:
         a5:00:97:4e:83:a4:27:43:e6:44:f1:05:11:ec:36:ee:5f:e0:
         90:26:a9:de:c8:c0:4e:ee:29:fd:ca:2c:75:7c:62:70:db:e7:
         8b:3c:a5:41:1b:2f:6d:a4:04:cd:54:19:84:68:e9:00:05:49:
         c4:fb:ad:8a:2d:ff:8b:0e:26:7e:f9:2b:a1:f1:83:10:24:ea:
         94:1e:02:d9:2c:55:8c:bc:b4:57:de:54:30:9f:be:f3:36:03:
         ad:0b:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:36:29 2026 by rpki-client