Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa
File:                     3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (raw, json)
Hash identifier:          VA9x1JUvw0UogZupkAioG4JuD1sEwt/f57IrckxZ3dI=
Subject key identifier:   A3:1B:06:EB:10:12:27:C9:7E:DF:36:67:E4:48:7A:05:8E:A5:F0:59
Certificate issuer:       /CN=78E0160248ABDDA316B054457CAC9C2878172E3F
Certificate serial:       459A135ADAC8A39D3EE9AE112AB4DAE9B8EE8286
Authority key identifier: 78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa
Signing time:             Sun 03 May 2026 02:12:11 +0000
ROA not before:           Sun 03 May 2026 02:07:11 +0000
ROA not after:            Sun 02 May 2027 02:12:11 +0000
asID:                     140448
IP address blocks:        103.152.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl
                          rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9a:13:5a:da:c8:a3:9d:3e:e9:ae:11:2a:b4:da:e9:b8:ee:82:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E0160248ABDDA316B054457CAC9C2878172E3F
        Validity
            Not Before: May  3 02:07:11 2026 GMT
            Not After : May  2 02:12:11 2027 GMT
        Subject: CN=A31B06EB101227C97EDF3667E4487A058EA5F059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:65:cc:f0:76:6f:4a:8a:fb:23:8e:f9:81:
                    e2:40:16:db:a2:c0:23:84:74:5c:d0:f0:aa:b4:78:
                    8e:9e:b4:ee:c8:30:71:b6:f9:a8:8a:10:d7:ed:b2:
                    88:77:5a:b2:38:29:e0:64:fe:f8:08:06:14:32:d1:
                    c3:f9:f5:b0:8d:23:8f:c5:1b:f3:8c:48:59:53:ca:
                    b5:7f:4c:fa:3a:fb:aa:6f:d8:fe:37:a1:bc:06:3d:
                    63:6d:70:db:3b:1f:cd:e8:9d:9a:bd:3a:d9:a1:93:
                    53:cc:75:0e:0e:5b:c6:36:1d:4d:d7:5e:d1:ff:40:
                    8c:80:fb:e3:f4:13:77:30:c2:07:61:1c:2b:b8:2c:
                    4c:83:d1:53:77:60:54:f2:1c:1f:40:55:1a:e5:34:
                    50:e0:6e:61:be:8b:88:a4:38:55:46:d3:f4:88:5d:
                    6a:68:51:73:2a:89:04:5a:b5:b8:f4:20:d2:09:06:
                    ef:92:8c:3b:cf:34:4c:52:38:1d:e0:8d:93:38:1c:
                    08:62:89:e5:ed:08:94:8e:17:ad:ac:90:a2:d3:03:
                    0b:48:cf:04:c6:2b:03:4f:7c:ae:22:70:9c:f4:c0:
                    00:19:a0:30:5c:b1:b7:87:13:33:1b:e2:e2:26:6f:
                    d4:c0:62:5d:22:ea:58:23:5f:cd:1f:e6:ed:8d:7a:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1B:06:EB:10:12:27:C9:7E:DF:36:67:E4:48:7A:05:8E:A5:F0:59
            X509v3 Authority Key Identifier:
                keyid:78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:30:f3:e6:2b:71:3c:ca:b0:bc:cf:9c:c2:58:b8:6a:bb:d1:
         2d:cf:08:24:1f:ed:cf:6b:3c:ec:d6:28:ef:a8:b3:0e:d9:a3:
         1b:bd:82:be:b9:b2:35:98:e0:b8:42:b0:27:70:51:e7:94:6f:
         43:c1:b6:74:5c:e1:df:54:c3:56:5e:a0:e1:2b:10:e4:f9:d9:
         05:3f:dd:63:b5:37:b5:7f:cb:31:44:85:5d:11:bb:2f:a9:d9:
         2b:e2:03:e3:76:06:80:95:f0:db:44:c3:28:17:b9:48:5a:c3:
         25:c9:49:ee:d6:47:9b:c6:70:d3:3b:c0:46:29:10:97:d0:6a:
         df:7a:03:2b:aa:72:d9:ec:6c:fb:ab:c4:1b:38:c5:96:d4:2a:
         4f:30:49:a6:e3:94:9e:98:20:e8:5d:7b:ad:a1:52:20:99:b7:
         7b:df:04:2f:f8:d4:f3:12:4c:79:21:ac:5c:9c:f4:84:24:01:
         28:02:3a:ea:01:11:2b:49:54:3f:bf:c2:d3:74:4e:89:c2:4c:
         40:e9:ee:a4:12:d9:ca:4d:e1:98:9d:f1:1c:70:59:b2:4d:c2:
         d6:40:2a:52:ea:18:66:20:6c:ab:e4:df:a8:62:36:50:5c:d6:
         1f:2d:e8:3b:6c:f6:00:15:73:5b:87:b2:ff:67:44:ba:ae:dc:
         2e:e7:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:32 2026 by rpki-client