Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa
File:                     3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (raw, json)
Hash identifier:          keOPkaU9xFvf9rbttWbatnRuZitbsiWuBrO+qREpte8=
Subject key identifier:   27:A5:94:C5:25:6A:FF:12:5F:22:A9:E9:1E:8C:7D:6F:6F:42:48:87
Certificate issuer:       /CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8
Certificate serial:       4FC5C3620315EA0D4C43A38E10A58C3916EA482E
Authority key identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa
Signing time:             Sun 03 May 2026 02:11:32 +0000
ROA not before:           Sun 03 May 2026 02:06:32 +0000
ROA not after:            Sun 02 May 2027 02:11:32 +0000
asID:                     151503
IP address blocks:        103.215.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl
                          rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c5:c3:62:03:15:ea:0d:4c:43:a3:8e:10:a5:8c:39:16:ea:48:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8
        Validity
            Not Before: May  3 02:06:32 2026 GMT
            Not After : May  2 02:11:32 2027 GMT
        Subject: CN=27A594C5256AFF125F22A9E91E8C7D6F6F424887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:d9:03:cf:8d:9b:f8:02:58:37:fd:bb:26:
                    66:dd:23:c5:cb:94:82:c6:62:4a:c3:20:c1:e1:5f:
                    08:ae:22:18:64:4e:a9:23:19:f1:0e:2c:19:05:5e:
                    8d:6d:17:9e:d4:97:51:af:fc:a7:7f:7b:4f:d9:d6:
                    14:53:b6:da:82:58:02:1c:e9:47:16:06:81:50:b0:
                    db:78:a2:4e:a1:e3:b6:fb:22:f7:6a:5a:4f:24:c6:
                    38:c2:d5:1a:0e:c0:07:a9:15:d7:9d:99:1e:c7:f0:
                    b3:66:56:f9:d9:9f:0e:8a:e0:d2:d8:c5:98:14:8f:
                    19:2d:e3:95:be:f4:06:90:62:73:9a:2a:c9:7e:0f:
                    73:c8:0e:54:a8:2f:bf:99:41:ec:20:36:61:a3:ed:
                    1b:01:fe:17:89:2d:a5:e8:b2:0c:4e:2a:47:0d:fe:
                    7e:12:53:f0:2a:49:35:31:60:38:89:5e:ed:54:a6:
                    ac:c3:8f:8d:8d:1c:ad:03:ce:95:c0:90:01:8e:f9:
                    01:d3:ff:5e:9d:d1:01:74:23:cb:de:28:e2:69:38:
                    64:ee:39:c0:6a:d0:64:bb:4c:0a:5e:dc:ab:f2:b7:
                    39:4f:2f:0f:e8:cd:5f:2d:93:d4:62:f6:2f:c6:f0:
                    cd:71:dc:13:48:ee:90:d3:c6:80:65:01:57:01:e7:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A5:94:C5:25:6A:FF:12:5F:22:A9:E9:1E:8C:7D:6F:6F:42:48:87
            X509v3 Authority Key Identifier:
                keyid:70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6f:d0:67:6d:f6:d4:4c:32:47:e0:6e:e7:00:4b:ed:63:b7:
         6c:92:49:d7:f3:00:11:63:8c:c6:7b:94:9f:3c:d2:63:d2:6f:
         ea:d7:0e:f8:71:3f:62:57:c9:ce:fe:e6:26:35:c1:32:4b:f3:
         20:74:5a:45:f9:8c:3c:86:c9:e8:79:33:68:dd:bd:cb:37:8f:
         f2:08:9f:28:68:78:78:46:f3:3a:2a:83:92:41:aa:55:52:bf:
         0f:f6:7d:24:c8:44:67:1d:a4:20:9f:eb:cb:c7:a2:58:d0:8a:
         5b:17:f8:26:08:e4:43:b2:12:cf:b0:81:cc:d7:cc:fe:96:7e:
         75:6c:24:45:50:05:b3:8b:7b:57:fe:e1:e4:e5:6b:16:14:0b:
         99:3f:0a:d9:d7:43:a7:48:1c:09:37:32:81:51:46:0e:ef:87:
         9c:36:8f:d0:80:9d:6b:1b:8d:de:7e:1d:33:57:34:74:59:f6:
         96:03:ab:8f:b0:e7:aa:c2:c2:54:1c:c2:8f:65:74:11:aa:5d:
         62:a4:96:5b:c3:2c:ac:b0:85:a3:cf:25:6a:82:b4:03:46:8e:
         26:79:7c:7d:d8:06:91:74:7b:f1:68:d4:4c:39:30:a0:6c:82:
         fa:cb:c6:22:96:07:93:dc:6c:c3:1f:f3:33:12:93:d0:3b:6d:
         19:f2:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:01 2026 by rpki-client