Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa
File:                     3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (raw, json)
Hash identifier:          E/btGwSpPVnr4uB6ixvWNVyUJ9J3wgIEyIH8A1Fswso=
Subject key identifier:   A7:51:F7:C2:01:11:1C:E1:7D:08:06:68:C5:52:E6:EC:36:54:10:3F
Certificate issuer:       /CN=F82E16FA44E704F6B79945E8313425503473FFC7
Certificate serial:       06F9F156AC3D9C53F7B997118C876C203C4DE208
Authority key identifier: F8:2E:16:FA:44:E7:04:F6:B7:99:45:E8:31:34:25:50:34:73:FF:C7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F82E16FA44E704F6B79945E8313425503473FFC7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa
Signing time:             Sun 03 May 2026 02:15:12 +0000
ROA not before:           Sun 03 May 2026 02:10:12 +0000
ROA not after:            Sun 02 May 2027 02:15:12 +0000
asID:                     150215
IP address blocks:        103.13.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.crl
                          rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F82E16FA44E704F6B79945E8313425503473FFC7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f9:f1:56:ac:3d:9c:53:f7:b9:97:11:8c:87:6c:20:3c:4d:e2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F82E16FA44E704F6B79945E8313425503473FFC7
        Validity
            Not Before: May  3 02:10:12 2026 GMT
            Not After : May  2 02:15:12 2027 GMT
        Subject: CN=A751F7C201111CE17D080668C552E6EC3654103F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:cb:e4:01:53:ba:83:46:83:36:18:3b:15:
                    01:e1:63:ac:5c:f1:d3:0f:4e:fa:fa:d9:7b:9e:d9:
                    2f:98:02:be:9c:37:ed:dd:73:6f:4f:72:11:c4:bd:
                    05:9e:c2:77:75:16:82:10:58:4d:04:44:46:88:79:
                    fd:8b:cb:ea:40:5a:c7:9a:1c:de:9e:ff:c4:74:53:
                    c8:1e:2b:c2:93:c4:97:a4:a3:9e:9e:e4:48:60:3e:
                    66:6d:a1:9b:08:59:6b:a0:70:c4:a3:8d:24:9b:f6:
                    5c:70:44:c5:ab:f9:31:d3:66:2e:80:1a:15:67:d9:
                    05:c7:8d:7a:36:26:ac:62:af:ea:b1:7b:28:2b:5c:
                    35:e6:36:19:cd:fd:22:b6:bc:a9:0b:a3:fb:bd:95:
                    be:17:cc:d7:08:05:ca:2c:66:65:cd:9c:09:42:f8:
                    80:e4:df:0f:9f:9c:40:6f:2d:73:72:f1:e0:c4:d5:
                    3c:02:c0:58:0f:f1:65:29:dd:51:e3:09:ae:30:da:
                    10:21:21:04:73:f7:d9:5c:76:77:7f:94:70:fd:0d:
                    f0:77:69:30:6f:49:03:65:2e:9a:7e:48:55:49:8e:
                    55:cb:83:9c:27:38:e6:ca:2b:cb:b9:91:89:f7:f3:
                    50:5b:b7:8e:81:73:00:c3:df:90:fa:c6:72:6f:cf:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:51:F7:C2:01:11:1C:E1:7D:08:06:68:C5:52:E6:EC:36:54:10:3F
            X509v3 Authority Key Identifier:
                keyid:F8:2E:16:FA:44:E7:04:F6:B7:99:45:E8:31:34:25:50:34:73:FF:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F82E16FA44E704F6B79945E8313425503473FFC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:df:6b:4e:db:68:ed:56:f5:52:2d:8f:d1:af:b1:c3:67:df:
         91:5c:98:4c:e0:80:2e:ab:45:4b:89:3e:00:d2:5b:c6:e0:74:
         48:dd:63:a9:d5:98:78:52:a6:61:d7:67:80:9b:47:e4:dc:b7:
         51:8d:e3:93:59:07:cb:e0:7d:88:3d:c3:8e:7c:8c:9e:95:44:
         a7:6d:15:d0:b2:b9:a7:9d:a8:30:4a:eb:df:3d:6f:88:91:6b:
         6d:1c:a8:5c:13:2e:a7:2d:4b:ee:05:6c:07:06:47:fc:d2:93:
         22:fe:6f:d6:63:fe:4d:b3:a8:cb:4a:8a:f1:08:11:59:4a:8d:
         f9:f8:64:54:1c:ef:c4:5c:8f:c8:73:9f:44:ae:84:62:23:b3:
         b4:dc:85:74:7a:69:ae:81:54:da:d4:be:cc:31:8c:2b:0f:b6:
         02:6c:37:e2:83:a3:bd:66:c3:65:69:5e:1e:46:07:3e:4f:0f:
         fc:60:c5:8c:fb:da:e7:9e:cc:17:bb:55:1b:20:7e:e2:71:e0:
         5d:06:a6:f4:de:2b:d6:1c:d5:30:75:89:06:34:1f:be:ee:4c:
         3a:b0:e9:f3:54:42:f5:48:68:f1:68:a0:82:07:e1:3b:98:f6:
         4f:58:cd:41:43:cb:5d:f8:34:a1:d8:95:04:2c:ab:01:7d:38:
         84:3c:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:04 2026 by rpki-client