Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa
File:                     3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (raw, json)
Hash identifier:          z7iqZjlXVRMDIQEXZKf98grHsnfTgjJWLqwQCjq3co8=
Subject key identifier:   FA:32:D9:88:CE:E7:33:F3:BD:33:60:09:40:5C:70:D8:7E:AF:1A:C4
Certificate issuer:       /CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45
Certificate serial:       355C953066BD13761CC8B8F72B3C9E6F167B03FE
Authority key identifier: F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa
Signing time:             Sun 03 May 2026 02:15:47 +0000
ROA not before:           Sun 03 May 2026 02:10:47 +0000
ROA not after:            Sun 02 May 2027 02:15:47 +0000
asID:                     151600
IP address blocks:        103.203.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl
                          rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5c:95:30:66:bd:13:76:1c:c8:b8:f7:2b:3c:9e:6f:16:7b:03:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45
        Validity
            Not Before: May  3 02:10:47 2026 GMT
            Not After : May  2 02:15:47 2027 GMT
        Subject: CN=FA32D988CEE733F3BD336009405C70D87EAF1AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:de:98:93:78:d2:f7:6a:0a:73:49:34:89:
                    58:31:7c:96:3e:35:ac:02:e5:ca:c6:ea:f6:d4:a2:
                    95:4b:41:33:42:7f:75:1e:16:94:1b:f2:e7:5f:6e:
                    95:a7:13:10:c3:5f:dd:3f:8d:05:f5:dd:47:11:8a:
                    88:6d:8b:b4:3e:11:69:94:06:c1:ec:b0:04:e1:63:
                    71:ab:b0:f3:e5:53:d2:94:33:12:81:71:d3:48:bd:
                    3c:78:7f:2d:e6:31:60:17:51:2a:c8:cf:76:19:5f:
                    66:1a:80:23:44:2a:3e:c5:12:9f:7b:53:cc:0a:4c:
                    eb:96:93:b4:ef:63:fd:77:80:36:2f:d8:79:6b:d8:
                    c6:e0:66:fd:af:8f:d2:bf:6d:38:26:8c:bd:8e:71:
                    fe:8e:2f:e6:ad:13:ef:da:8a:b4:d5:eb:07:8b:00:
                    75:58:c1:14:f6:d1:b1:26:11:23:2f:71:c0:d8:01:
                    4d:ba:02:9e:20:19:d6:df:9c:88:3e:02:26:93:d5:
                    17:0c:ba:44:07:8c:b1:35:78:a4:1a:cb:2b:11:5a:
                    27:56:3f:e2:4e:c8:6d:35:3d:ad:9b:97:2b:f0:e5:
                    e5:7f:75:40:64:1b:71:3f:3d:b9:c1:83:2c:7b:cf:
                    58:79:06:80:84:fc:e8:f2:ac:8d:f5:b9:14:b9:0c:
                    c9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:32:D9:88:CE:E7:33:F3:BD:33:60:09:40:5C:70:D8:7E:AF:1A:C4
            X509v3 Authority Key Identifier:
                keyid:F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e7:c5:15:90:ce:f2:a1:d1:78:de:fc:40:70:43:52:44:51:
         b1:e1:c0:f5:f8:75:be:51:2f:99:f2:38:34:6a:2c:d7:53:6b:
         d5:df:e7:9d:95:a4:30:ab:0b:39:78:5f:da:b0:0f:06:ee:85:
         ea:93:a3:3b:df:56:50:66:fc:f3:9f:91:e7:c2:4d:3c:00:eb:
         52:e1:f2:27:e5:32:7a:4e:33:cb:e4:69:d6:94:6d:a6:4c:40:
         05:73:5e:ec:d8:3d:20:a8:c0:0a:4d:1c:d0:b4:85:cf:97:12:
         a3:31:79:22:62:55:9c:78:09:2f:f0:84:80:8b:f3:a6:cc:bc:
         93:9d:c6:63:53:73:9d:de:02:f3:cd:e0:87:73:a7:ab:64:01:
         aa:64:1f:4f:43:8b:b8:fa:9a:76:88:b8:13:ea:60:b4:9b:ee:
         d0:3d:22:d5:a7:43:cc:6e:93:cd:e0:da:08:48:14:3d:f1:a4:
         75:be:ec:a2:53:18:24:27:38:c0:f9:9b:e8:6d:e0:96:24:f1:
         d4:0a:c4:f7:95:1c:92:3b:37:86:f1:fc:f4:30:6f:54:97:57:
         93:5a:ee:17:8d:e7:7c:34:32:ef:96:c6:b2:01:65:92:ea:87:
         8c:32:94:3b:9f:ef:f7:76:c3:2f:0f:82:d2:97:4d:27:87:26:
         d7:57:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:20 2026 by rpki-client