Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa
File:                     3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (raw, json)
Hash identifier:          ecbLm05zQBSilErebG558HI4LAmRy170h81zwnXJv1A=
Subject key identifier:   83:01:F1:C1:23:9D:3F:37:8B:A9:8F:BC:0A:1C:9A:C6:81:DE:CE:13
Certificate issuer:       /CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243
Certificate serial:       56A4A1380B38C1D08105255951E457148AE0D1CF
Authority key identifier: BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa
Signing time:             Sun 03 May 2026 02:15:10 +0000
ROA not before:           Sun 03 May 2026 02:10:10 +0000
ROA not after:            Sun 02 May 2027 02:15:10 +0000
asID:                     140481
IP address blocks:        103.154.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl
                          rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a4:a1:38:0b:38:c1:d0:81:05:25:59:51:e4:57:14:8a:e0:d1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243
        Validity
            Not Before: May  3 02:10:10 2026 GMT
            Not After : May  2 02:15:10 2027 GMT
        Subject: CN=8301F1C1239D3F378BA98FBC0A1C9AC681DECE13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2a:80:b0:65:21:c6:91:48:34:de:b0:58:9a:
                    b7:34:45:98:e5:de:4f:c1:c1:4a:5e:04:6d:52:54:
                    18:79:b3:30:44:5a:c8:45:80:ff:cb:67:a0:f4:ef:
                    86:a4:74:44:f7:16:39:9c:de:79:c0:de:2c:b0:1a:
                    1c:15:14:a7:71:87:b5:e6:2a:56:70:91:3c:ac:b4:
                    a0:87:11:42:f0:e9:3c:57:9a:92:90:96:22:c9:45:
                    0d:51:d7:7a:57:13:e9:de:cb:f3:b8:68:e5:af:e0:
                    b9:9f:24:12:8e:46:9f:88:a4:fd:1e:82:f5:70:7e:
                    39:94:d3:5f:1b:c2:9d:4e:f9:39:e6:b5:52:c1:99:
                    ad:d7:fd:9e:d9:69:bf:18:c4:e1:55:e7:72:9f:4d:
                    fb:c5:e6:96:1a:c3:73:6f:5d:0f:c8:a7:85:c0:83:
                    f2:15:6f:68:99:e5:7f:4d:32:a6:e2:7e:c0:af:a2:
                    a6:bf:73:ee:4f:d6:26:ae:26:17:9b:68:17:be:d5:
                    33:55:e7:f0:93:f7:89:91:8d:8e:39:4c:cc:3c:d4:
                    44:f5:81:de:66:ab:d1:0a:a9:81:8b:c4:44:2b:2f:
                    b1:b0:0f:ae:07:75:b2:93:d3:b8:9f:10:6b:f7:94:
                    ac:32:bb:0f:e5:d1:67:6c:f7:1c:49:93:52:ba:cb:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:01:F1:C1:23:9D:3F:37:8B:A9:8F:BC:0A:1C:9A:C6:81:DE:CE:13
            X509v3 Authority Key Identifier:
                keyid:BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:aa:bd:42:7b:ba:7c:f8:b0:2f:bd:09:15:0b:dc:e4:45:8e:
         9f:08:9c:39:50:b1:e2:4b:fb:23:59:cf:c0:d9:2f:30:f2:18:
         d8:ed:e3:f1:e7:7f:1d:ee:eb:dc:7b:42:45:83:c0:b3:2b:14:
         4c:23:3d:3d:30:84:d4:cb:04:f9:67:59:9c:e7:11:76:dd:8f:
         40:2c:ee:f1:5f:bc:48:d7:1f:4b:11:af:d1:f9:7e:8e:b2:1d:
         6b:33:8b:ef:1a:c4:02:ce:5a:1a:0c:5b:48:de:8d:55:9a:72:
         9a:9c:39:fc:91:9b:1f:8c:8d:3d:a0:34:1f:ae:b5:69:45:a6:
         b0:aa:00:b4:2c:c2:6b:ad:3a:f7:4b:8f:c7:99:13:4f:d7:3a:
         15:69:f5:bc:1a:47:2c:41:9c:8c:f1:10:f6:b7:a4:0e:b0:43:
         ef:76:59:8a:54:f2:5b:0e:43:1c:1f:0d:88:e1:fd:2f:fa:e3:
         99:25:0e:d4:8d:63:a2:d7:49:ab:91:bb:5a:33:0e:ed:93:8f:
         92:a3:27:07:f4:d2:58:13:75:16:e7:6c:47:38:73:68:12:66:
         72:a5:f1:78:3f:fa:e7:87:ac:0f:0d:e7:84:ba:bf:23:cf:01:
         ed:f9:62:cd:67:aa:cb:a0:2a:af:80:46:01:3d:0c:cf:4e:1b:
         1d:08:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:01 2026 by rpki-client