Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa
File:                     3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa (raw, json)
Hash identifier:          nyod0CT/fB5gH7ANBUTQG+Fhk9ZB7fad+xE68OSLCI0=
Subject key identifier:   7F:58:C5:03:F9:67:E1:67:6E:6C:05:6D:17:C1:9D:83:14:4E:C5:B1
Certificate issuer:       /CN=38F5CCFB43C14A0A6D836EE754A8073545066216
Certificate serial:       1E443F26AFD3803BFBCF8AEF9CEA2B705BDC11D4
Authority key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa
Signing time:             Sun 03 May 2026 02:13:14 +0000
ROA not before:           Sun 03 May 2026 02:08:14 +0000
ROA not after:            Sun 02 May 2027 02:13:14 +0000
asID:                     152008
IP address blocks:        103.168.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl
                          rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:44:3f:26:af:d3:80:3b:fb:cf:8a:ef:9c:ea:2b:70:5b:dc:11:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F5CCFB43C14A0A6D836EE754A8073545066216
        Validity
            Not Before: May  3 02:08:14 2026 GMT
            Not After : May  2 02:13:14 2027 GMT
        Subject: CN=7F58C503F967E1676E6C056D17C19D83144EC5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:60:f5:fc:9d:f6:79:f0:a1:b0:42:5b:6c:a3:
                    ac:0f:4f:2b:de:0e:96:74:b2:29:f3:d4:e4:26:6d:
                    42:d0:09:68:8c:a1:a0:df:97:4d:ce:b0:cf:34:2b:
                    87:9a:bc:7c:2b:f1:fc:e4:d0:2d:39:6b:1f:97:15:
                    ea:58:9d:74:37:1c:6e:9b:00:11:fd:bb:65:10:23:
                    6a:5b:7c:83:98:12:46:ea:2a:db:a4:1d:0a:fb:3d:
                    61:5c:b5:36:34:b9:02:57:49:d7:68:82:4d:21:5b:
                    61:a1:5c:18:a5:56:19:dd:66:3a:da:da:41:70:54:
                    49:10:e9:05:3d:73:5b:b9:75:fc:21:06:68:08:a8:
                    c5:82:02:97:fb:c9:ae:85:bc:3c:d2:e0:c8:f7:20:
                    d1:53:9d:02:6e:38:9d:2d:50:b7:2c:85:f7:a7:af:
                    21:20:21:94:fc:0d:0e:98:8a:91:b4:d0:86:d7:5a:
                    e2:04:b2:43:ea:93:3e:b6:ec:5a:02:95:10:d1:bb:
                    11:70:49:88:ee:11:67:7e:77:10:40:89:bb:a9:fa:
                    da:17:54:5a:ab:4b:4a:c7:6a:b1:25:08:8a:92:50:
                    51:e9:b5:33:3a:2a:8a:bf:53:d3:ed:05:55:84:f9:
                    ac:e3:de:62:d6:e9:77:76:94:54:53:8a:d6:ae:43:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:58:C5:03:F9:67:E1:67:6E:6C:05:6D:17:C1:9D:83:14:4E:C5:B1
            X509v3 Authority Key Identifier:
                keyid:38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:da:39:e7:f3:e7:7b:58:3e:5b:3b:51:6d:58:52:00:d4:bc:
         58:bc:7a:3f:c0:4d:cc:b2:e5:76:df:2a:e0:09:de:53:58:5d:
         35:ea:b4:f6:33:e9:0a:35:bd:a0:2d:76:b1:eb:dd:35:cd:96:
         b0:c8:74:f7:68:c1:7a:ac:27:79:fe:92:67:a5:df:7f:a2:e0:
         4e:f8:26:d6:ca:e1:92:8c:f8:e8:8e:2b:0c:a0:01:37:b8:68:
         9e:32:93:12:95:4d:8f:24:44:49:de:b5:e8:00:9a:0a:08:11:
         9c:32:fe:d6:1a:73:ac:4e:c3:d3:95:7e:52:8f:bd:b5:6d:9b:
         3d:7f:96:9c:58:93:c5:b8:f0:69:f4:96:5d:4c:bf:e5:89:2c:
         52:d8:54:3f:06:55:46:77:0c:1b:e9:7e:86:b9:31:ed:d5:45:
         c1:3e:b6:7b:d3:ad:0a:8f:3c:a7:77:2a:04:29:54:89:fa:94:
         4b:52:cb:e3:96:6e:c2:ca:37:af:ff:cb:5e:a1:69:a5:25:36:
         14:41:84:0f:93:03:11:f3:b4:b5:a9:45:f0:1b:1c:72:7c:19:
         11:36:cb:b9:08:f5:e7:6c:a1:88:e3:6b:aa:aa:c9:82:39:94:
         91:17:81:e2:75:9a:c6:36:6c:b7:ab:16:07:90:a8:15:11:75:
         96:ee:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:09 2026 by rpki-client