Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa
File:                     3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (raw, json)
Hash identifier:          Tf1Q9sDwa+GlXIub485EhNzCHd5//pppNP4qkGRGD+Y=
Subject key identifier:   49:58:F7:6B:55:4F:B3:52:F8:A1:EF:8A:F6:E7:CA:8F:53:00:DC:41
Certificate issuer:       /CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274
Certificate serial:       7614A35276FF95F44D8C317B523D85886FC60E09
Authority key identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa
Signing time:             Sun 03 May 2026 02:12:27 +0000
ROA not before:           Sun 03 May 2026 02:07:27 +0000
ROA not after:            Sun 02 May 2027 02:12:27 +0000
asID:                     150941
IP address blocks:        103.101.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl
                          rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:14:a3:52:76:ff:95:f4:4d:8c:31:7b:52:3d:85:88:6f:c6:0e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274
        Validity
            Not Before: May  3 02:07:27 2026 GMT
            Not After : May  2 02:12:27 2027 GMT
        Subject: CN=4958F76B554FB352F8A1EF8AF6E7CA8F5300DC41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:19:8b:5e:c8:ac:57:9f:20:06:f2:71:80:
                    38:38:8d:f6:0e:32:be:f5:f5:f9:3b:e5:b4:e2:33:
                    29:29:20:a2:0e:b4:d8:37:c5:b1:c9:68:68:af:cd:
                    28:d6:b0:dd:1c:1c:d6:3a:18:e1:8c:ba:00:cf:40:
                    8e:07:fe:8f:1b:e6:4d:89:23:ed:aa:a4:62:dd:59:
                    10:34:88:76:94:0b:f8:dc:c5:bd:28:7e:e9:87:c7:
                    4d:e7:a1:63:54:7a:4e:56:ca:a8:2b:70:30:99:4f:
                    52:e0:aa:64:8b:79:da:94:5e:fb:5b:41:07:b7:ec:
                    98:fa:66:9d:08:d5:0f:46:da:e0:6a:63:0b:7d:ce:
                    ca:b7:67:d3:e9:1b:49:2d:55:4b:21:f8:59:e5:4a:
                    02:20:cc:4c:65:ba:c8:15:9d:d0:37:2b:dc:fe:81:
                    c7:19:b7:fc:cb:10:25:4f:c8:24:3a:be:b1:94:aa:
                    1e:d8:b9:3e:28:d2:eb:42:7f:92:15:d3:70:aa:0f:
                    f3:15:f9:75:77:ce:6f:8d:08:fd:64:87:3a:24:1e:
                    84:bc:6f:a5:ff:e8:aa:60:eb:36:41:a7:9e:4b:c3:
                    ac:80:01:f6:6c:6e:a8:93:be:cc:60:71:a2:46:bf:
                    bd:80:24:7d:d3:d5:60:1c:fe:77:0b:06:ce:40:c6:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:58:F7:6B:55:4F:B3:52:F8:A1:EF:8A:F6:E7:CA:8F:53:00:DC:41
            X509v3 Authority Key Identifier:
                keyid:AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:75:9c:1e:a8:35:2b:b1:ed:4d:e1:5d:93:0a:91:0a:f1:92:
         d2:32:57:9e:a0:12:42:71:f9:55:b2:a3:c4:d5:05:cc:53:3c:
         84:42:e1:6d:c3:cb:cc:94:19:0e:15:9b:fb:36:f7:b5:3d:d3:
         a3:36:b7:3f:8d:2b:21:f0:c1:63:68:bc:bb:d1:23:68:09:23:
         4f:18:1f:2d:d6:67:19:86:dc:8b:ec:b6:1a:82:df:91:92:ad:
         87:44:47:0d:26:03:6e:f0:95:34:a2:a4:5a:8b:ed:19:7f:8a:
         88:76:9e:5f:af:79:f8:99:91:a6:b5:28:c4:e2:08:7c:57:81:
         2e:ad:53:9a:c7:98:fc:ab:61:31:b9:b5:13:44:f5:c3:d9:fd:
         ab:ab:23:af:9a:f4:ba:f8:d4:13:5d:8c:94:de:22:d8:a4:4b:
         a3:39:bb:c8:56:ad:f7:84:eb:a9:92:69:24:a9:28:d4:0f:cf:
         9b:a2:17:c2:e8:85:d8:3f:ee:41:bc:32:54:79:38:e0:f9:5d:
         ed:ad:14:ee:c8:97:50:9f:93:57:23:34:13:fc:f3:6f:2d:5c:
         f9:59:81:c1:33:ba:c8:75:31:c5:4c:1e:c8:87:8c:e6:9a:89:
         a4:05:a3:9a:00:53:d6:e4:df:a1:5b:7d:f5:c4:1c:23:1d:4e:
         b6:ca:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:43 2026 by rpki-client