Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          CJ3C5Ad0lXVGoXoTJJLAUWAzAvNTOgEY9RwmCwNrPhg=
Subject key identifier:   94:BF:A6:F8:C6:2B:B3:15:59:CB:0A:52:13:31:38:34:32:D1:40:D7
Certificate issuer:       /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Certificate serial:       15454D1782CC2A1A715E42BF84F17FFC92C89FAC
Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa
Signing time:             Sun 03 May 2026 02:12:29 +0000
ROA not before:           Sun 03 May 2026 02:07:29 +0000
ROA not after:            Sun 02 May 2027 02:12:29 +0000
asID:                     131111
IP address blocks:        103.158.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
                          rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:45:4d:17:82:cc:2a:1a:71:5e:42:bf:84:f1:7f:fc:92:c8:9f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
        Validity
            Not Before: May  3 02:07:29 2026 GMT
            Not After : May  2 02:12:29 2027 GMT
        Subject: CN=94BFA6F8C62BB31559CB0A521331383432D140D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:e8:3e:24:ed:7b:cc:3a:b1:88:48:7b:97:
                    57:23:3b:ea:90:0d:36:5b:98:07:4b:d5:36:e8:5a:
                    15:5b:10:1d:89:e0:92:1e:36:b3:92:55:fc:12:a6:
                    a1:7f:4c:d0:b3:c1:a8:88:1b:ac:a1:73:31:e7:6b:
                    72:8b:fa:f6:0f:a0:1b:5f:e3:75:3e:e4:58:73:a8:
                    1d:26:c5:54:ba:d1:ff:2d:16:a7:1f:48:84:b9:dc:
                    b9:1a:5d:3d:cf:7a:6b:e5:81:38:dd:9a:5e:9f:5c:
                    1e:0c:a7:b1:48:3d:ec:44:80:b6:8a:d9:92:c6:43:
                    bc:08:a6:55:24:f9:68:6d:10:ca:b3:e1:75:27:50:
                    a5:01:1c:00:b4:53:be:b1:4c:0d:6c:79:52:81:42:
                    94:82:2f:f2:eb:c0:fd:aa:fb:55:4d:88:73:db:46:
                    96:41:c7:51:57:e1:88:28:14:0c:9b:6f:9c:67:4f:
                    48:28:8c:eb:f2:61:2e:39:06:6a:00:50:ca:b9:8d:
                    78:18:ba:c7:36:5f:b3:77:79:84:d2:60:2e:d7:b7:
                    24:e5:1e:17:56:f5:4b:ef:39:ea:7e:fb:7d:84:25:
                    7f:9c:8a:1d:71:f6:f3:97:4b:d8:15:d7:16:0f:9f:
                    37:91:52:bd:65:70:be:bf:af:49:95:b3:4c:1a:03:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BF:A6:F8:C6:2B:B3:15:59:CB:0A:52:13:31:38:34:32:D1:40:D7
            X509v3 Authority Key Identifier:
                keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:56:cb:0a:6a:cf:06:31:6b:18:3b:ec:32:80:02:c0:77:59:
         c5:87:9b:a2:89:cb:8c:6b:52:ba:3f:72:d8:1c:6b:47:85:f2:
         fb:69:00:7d:30:66:5f:a0:40:aa:fb:11:f8:c4:ce:ef:93:f9:
         b4:2f:5c:be:61:03:71:5e:1f:bf:c7:cd:5b:7f:e1:44:66:30:
         ef:cf:56:31:0d:2b:62:fb:cc:2f:dc:59:e5:95:56:15:5d:54:
         b7:66:f6:67:b6:aa:0c:87:8e:ab:38:6e:1b:42:f6:50:fa:3f:
         4d:64:ab:8f:ac:30:3e:31:f8:c0:ed:89:23:dd:a9:0e:19:08:
         5a:89:a3:db:0e:54:fd:95:35:c3:4d:bc:55:82:81:5a:f8:88:
         94:28:3b:af:de:b9:a9:7f:2b:16:ff:2c:2b:6e:b9:56:8b:8b:
         83:0e:ec:d2:c3:5c:2c:b6:55:6c:6a:3f:32:6b:0f:99:b8:4b:
         79:0d:9c:22:ea:d8:df:06:3a:ab:e0:a6:02:46:a7:67:d8:c8:
         3e:ec:67:50:17:88:c8:4c:5e:a1:0c:d3:fd:90:52:1a:76:d7:
         03:2a:ce:5a:a6:5c:0b:84:ab:b7:24:0f:9d:e8:c3:2c:39:6c:
         81:1d:30:df:32:94:b5:fa:d9:11:08:d4:1a:6d:d0:40:6c:2a:
         3c:08:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:49 2026 by rpki-client