Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa
File:                     3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (raw, json)
Hash identifier:          WjJ5R6RxIV+WwM7kuHxJKIcmy8NFLw826KU6Z0WZ/xY=
Subject key identifier:   A2:AD:C5:4B:8F:1A:88:9F:C0:5F:7F:78:00:05:A3:97:F3:BD:2D:BE
Certificate issuer:       /CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274
Certificate serial:       36BEE8519C4A7313AFBBC6B1BF79943BC14C95BB
Authority key identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa
Signing time:             Sun 03 May 2026 02:12:27 +0000
ROA not before:           Sun 03 May 2026 02:07:27 +0000
ROA not after:            Sun 02 May 2027 02:12:27 +0000
asID:                     150941
IP address blocks:        103.101.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl
                          rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:be:e8:51:9c:4a:73:13:af:bb:c6:b1:bf:79:94:3b:c1:4c:95:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274
        Validity
            Not Before: May  3 02:07:27 2026 GMT
            Not After : May  2 02:12:27 2027 GMT
        Subject: CN=A2ADC54B8F1A889FC05F7F780005A397F3BD2DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:57:4b:6c:72:bd:d6:3d:f6:75:05:31:9d:
                    5d:e8:c7:dd:61:6e:9e:66:a9:a0:38:e1:47:91:55:
                    9a:25:75:69:b2:76:55:d5:4d:2f:a4:53:62:ac:0a:
                    60:90:17:4d:af:0c:4f:b3:8d:11:54:3a:aa:9c:a8:
                    dd:92:0a:df:2b:6d:1d:25:a3:21:98:51:1c:6e:7b:
                    43:b0:0d:7f:4a:ae:46:67:e6:e1:ff:7b:ab:3f:ef:
                    ab:a9:16:37:12:64:6a:97:1d:5c:34:c7:99:08:d7:
                    21:ca:88:98:9a:2c:4a:f9:6f:91:38:a7:24:ce:65:
                    5e:d5:a7:e8:af:c9:6a:84:10:42:96:da:a3:06:1b:
                    e1:ce:1f:7d:8f:df:03:11:4a:de:46:d4:13:a4:3e:
                    3b:78:ac:9d:7b:d8:6a:65:9e:15:2e:b9:71:b1:04:
                    9a:7f:9f:e5:9d:08:dd:7e:94:18:fb:24:fe:ad:90:
                    d1:d6:99:d7:c7:da:2b:b1:34:c8:c4:4a:a0:76:6b:
                    7c:ce:91:4e:77:64:6e:66:a9:93:26:76:28:79:a3:
                    51:43:5a:1a:1b:75:41:8f:95:59:91:eb:54:6c:87:
                    16:c0:d3:df:63:da:9b:54:b7:77:5e:b6:18:63:9f:
                    e0:ca:5f:f0:f3:b6:32:b1:1b:f0:af:14:56:b5:d0:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AD:C5:4B:8F:1A:88:9F:C0:5F:7F:78:00:05:A3:97:F3:BD:2D:BE
            X509v3 Authority Key Identifier:
                keyid:AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:43:e4:70:96:39:19:54:64:e7:f9:7b:ac:3e:51:e4:8b:23:
         6e:67:58:d8:50:f9:63:35:6b:64:42:bf:61:17:dc:05:3e:d0:
         55:e7:33:9e:0d:01:be:e9:8f:ab:b6:9d:3f:ed:cc:18:73:6e:
         09:9d:bd:79:e3:8a:59:d4:08:8b:63:63:16:4d:eb:7c:82:30:
         3c:ed:95:74:4e:32:bb:c1:8e:1a:f6:49:b3:cb:6d:55:be:77:
         e5:0d:d1:31:31:b2:66:02:a0:0c:3c:a2:a8:f0:e6:57:75:60:
         cd:45:fd:20:12:b2:d9:91:3d:da:ef:66:35:f4:44:63:5e:c2:
         28:87:3c:a5:99:f2:2c:ec:11:58:85:8c:f2:83:4d:a6:58:59:
         10:52:a2:0e:85:51:97:c6:a6:cc:01:b0:2d:19:c4:57:f9:81:
         3c:f6:ca:4f:e2:97:49:7c:ba:89:c7:d3:92:86:44:fb:47:97:
         1e:d9:02:7e:81:15:da:d2:5b:d2:8f:b8:b5:0c:05:1e:00:ab:
         dc:ea:e9:7d:a7:3a:a2:b2:8b:a8:8d:80:ce:d2:81:05:8d:40:
         ba:ca:53:36:e3:e8:87:44:f0:cf:f9:a6:3f:76:ff:1f:96:cd:
         05:7f:e9:6e:2c:b9:f1:db:d2:87:1d:fb:cc:ab:3f:5b:d1:3a:
         86:9f:6a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:16 2026 by rpki-client