Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36382e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=
Subject key identifier:   64:C1:72:9F:D8:97:7E:EC:F4:7A:A1:DA:72:A8:F7:B3:2B:15:D0:96
Certificate issuer:       /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406
Certificate serial:       2F649A683E0EF95A1085E9A15DFD27F3896370DC
Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36382e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 03 May 2026 03:11:01 +0000
ROA not before:           Sun 03 May 2026 03:06:01 +0000
ROA not after:            Sun 02 May 2027 03:11:01 +0000
asID:                     48465
IP address blocks:        103.160.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl
                          rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:64:9a:68:3e:0e:f9:5a:10:85:e9:a1:5d:fd:27:f3:89:63:70:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406
        Validity
            Not Before: May  3 03:06:01 2026 GMT
            Not After : May  2 03:11:01 2027 GMT
        Subject: CN=64C1729FD8977EECF47AA1DA72A8F7B32B15D096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:7b:57:b7:38:76:8e:ec:2e:e6:55:67:59:
                    85:6e:8c:94:85:4d:dd:0b:7c:98:d0:6c:1f:3a:5a:
                    8f:9b:d6:bb:83:d0:58:9f:e3:13:29:29:f0:b4:cc:
                    c8:9f:df:c7:d0:9a:37:bb:0d:9a:ba:e6:94:a0:6d:
                    fe:c4:d6:74:4f:ed:44:f0:22:99:77:66:63:92:bd:
                    9d:a7:4d:b5:ae:85:95:a5:61:7d:75:3a:d4:b4:6e:
                    1b:6b:37:74:48:ef:65:18:b9:c7:66:d9:52:2f:17:
                    38:85:d5:55:53:7f:56:65:35:8c:0b:5e:20:a8:a7:
                    e0:cd:5e:5b:89:00:03:47:3a:87:fb:f1:e7:ca:a5:
                    71:2f:88:10:98:78:e6:d3:fe:fe:0a:76:56:1f:e0:
                    44:5c:82:26:25:1e:e4:e0:94:b4:99:7e:cc:28:44:
                    a1:bb:c3:f2:3f:f9:db:a7:e8:bb:53:cd:9f:de:a3:
                    c6:7b:55:60:fc:75:ad:43:5c:49:63:28:41:95:03:
                    ba:b7:84:6f:c9:fa:83:f3:ff:c0:7d:85:19:ee:c7:
                    ce:bf:c6:08:cf:7b:52:c5:d5:4c:1d:58:bd:02:03:
                    54:88:10:29:15:0c:eb:69:05:35:76:02:e0:fb:d4:
                    90:23:c1:00:e7:77:78:9e:19:e8:50:72:82:33:56:
                    7f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C1:72:9F:D8:97:7E:EC:F4:7A:A1:DA:72:A8:F7:B3:2B:15:D0:96
            X509v3 Authority Key Identifier:
                keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36382e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:93:e8:dc:c4:aa:97:15:ec:60:fc:c7:f9:c9:16:64:b0:fd:
         12:56:12:9b:38:a4:7f:39:e6:7e:05:8c:2f:23:29:a1:f0:bd:
         87:50:23:3b:c3:9a:c3:52:27:75:4c:de:a7:f7:bf:4a:cf:0e:
         b3:f4:af:35:11:8b:90:c1:6d:8b:c8:51:cb:45:ca:da:5c:db:
         3b:b3:ba:e3:29:d6:ae:98:df:5a:f4:19:04:c9:2f:e4:45:3d:
         ef:ba:39:eb:93:f4:e0:64:3d:3b:90:94:fd:03:c7:46:29:33:
         11:96:cc:63:50:80:2e:92:71:fc:87:75:bd:7f:ae:0e:47:6b:
         4f:f7:7e:ed:34:de:d3:7a:35:64:63:9a:d7:0a:5c:49:d1:02:
         a1:15:bc:02:68:e0:e1:cd:67:c4:61:29:7e:f1:42:da:2f:ab:
         c6:07:cc:bc:d0:ec:76:f4:6a:0f:9f:fa:f7:d9:85:1d:39:2f:
         c8:1b:ff:22:ef:d5:c8:d0:00:27:2b:af:83:da:39:58:2b:c0:
         f9:8e:84:48:45:15:9c:2e:29:bb:03:ea:25:49:26:25:df:f2:
         f8:b0:30:8c:78:58:25:c2:99:9e:2a:3e:a0:62:c2:63:f8:a0:
         68:85:4b:e3:12:92:73:27:db:95:ec:2b:55:27:63:a7:cb:ef:
         97:74:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 15:05:00 2026 by rpki-client