Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          Lk1tNkM5iXGzAH8YNwcIq2YC8yUeom1TAzpJAMLwNHo=
Subject key identifier:   A4:9A:8B:99:F1:CF:00:C9:53:68:75:F3:BA:59:32:AA:3D:9E:96:71
Certificate issuer:       /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Certificate serial:       588F6344CD12DE37EC662F7C6C3172ED9D16FBEC
Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa
Signing time:             Sun 03 May 2026 02:12:29 +0000
ROA not before:           Sun 03 May 2026 02:07:29 +0000
ROA not after:            Sun 02 May 2027 02:12:29 +0000
asID:                     131111
IP address blocks:        103.158.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
                          rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8f:63:44:cd:12:de:37:ec:66:2f:7c:6c:31:72:ed:9d:16:fb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
        Validity
            Not Before: May  3 02:07:29 2026 GMT
            Not After : May  2 02:12:29 2027 GMT
        Subject: CN=A49A8B99F1CF00C9536875F3BA5932AA3D9E9671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f2:7c:66:63:d5:26:7d:31:b0:26:16:ca:54:
                    1b:96:1a:ee:f0:a3:ed:a9:4e:1b:ad:b2:9f:9d:d0:
                    6b:24:ee:0f:0a:42:e2:95:d2:b4:55:aa:3e:82:11:
                    95:cb:4f:05:f0:15:8c:78:b1:fe:89:fc:eb:0f:86:
                    63:5c:4e:4b:64:0f:59:87:83:57:e7:3f:be:76:e5:
                    ab:28:97:51:ba:1a:96:96:ac:2f:0e:b9:61:12:e8:
                    a0:3d:67:b0:8f:9a:14:0a:d8:84:d0:25:57:b7:7f:
                    78:88:4f:4b:77:65:ba:2e:00:6d:ce:a2:c8:33:6f:
                    ed:99:92:f0:b9:ae:80:e9:6e:8d:93:6f:ff:91:c6:
                    6f:9f:4d:05:c7:23:db:01:a5:17:a9:d6:17:ec:c2:
                    fc:51:7f:9d:f0:6a:0f:bd:c8:b9:97:97:16:2c:41:
                    94:10:93:2c:9a:8e:4d:aa:b0:91:07:cd:93:c1:95:
                    a6:95:5a:19:e0:40:45:97:98:bf:4d:f6:68:37:f8:
                    7b:e3:16:53:d4:03:55:4a:82:6c:a9:09:ac:4b:a2:
                    ae:9a:ee:2a:a7:78:23:5f:77:1f:af:14:40:c3:8f:
                    a9:1c:ff:93:0d:8e:7d:f9:04:2f:a5:66:6c:e1:c8:
                    4c:0b:46:48:4e:0d:b5:c8:4e:3c:4c:b4:1d:8d:09:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9A:8B:99:F1:CF:00:C9:53:68:75:F3:BA:59:32:AA:3D:9E:96:71
            X509v3 Authority Key Identifier:
                keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:3a:f8:39:94:11:f3:76:1c:62:eb:01:a4:2b:f3:5c:38:ea:
         60:33:ae:45:6d:3b:03:71:0a:f7:46:27:66:e2:7c:d1:a2:63:
         54:58:b5:de:78:16:0b:a0:c9:0b:01:98:1b:2f:f8:f5:7e:08:
         56:d6:7a:5f:44:f2:54:56:30:20:12:ca:68:47:01:7c:8c:56:
         1b:9a:e2:99:99:cb:59:de:70:5b:5e:5b:ca:ad:e2:00:cd:a6:
         d6:81:90:42:ad:09:77:5a:2b:16:ee:62:e2:0f:2f:bb:fd:5f:
         19:59:96:1f:7d:44:cf:97:b1:41:f3:a3:f9:11:d1:0c:6c:2d:
         53:4c:e9:9f:0c:3d:9d:f2:a8:0b:eb:c7:7b:42:d8:7e:58:2b:
         e0:da:3e:49:d1:f2:7a:fe:ec:16:7a:c4:d7:f8:96:62:a2:3f:
         af:72:f7:05:fb:21:4b:3b:9d:5c:4d:2b:f4:2c:24:97:e0:ac:
         15:48:44:28:e7:95:7a:24:29:96:db:9d:5b:91:c2:87:58:12:
         5a:49:b0:71:20:d0:4f:a2:4d:f1:dc:50:58:35:58:ef:05:2c:
         4b:47:a1:1f:05:2e:e9:41:97:f7:7c:da:59:fa:fc:89:15:23:
         a5:5f:f4:68:b9:3f:b6:b5:80:e6:00:cd:3d:0e:91:da:25:50:
         d8:a3:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:20 2026 by rpki-client