Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa
File:                     3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (raw, json)
Hash identifier:          swr4aEtGPRWs62gogwkO9Y1o8MbTFhHlDaee8r9gWcE=
Subject key identifier:   6D:54:8A:3F:FC:E4:E0:58:F7:4D:DC:40:3C:08:31:AA:25:33:FA:A5
Certificate issuer:       /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24
Certificate serial:       2B745304297F4F086D94D25BF993F047A6B2A814
Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa
Signing time:             Sun 03 May 2026 02:16:06 +0000
ROA not before:           Sun 03 May 2026 02:11:06 +0000
ROA not after:            Sun 02 May 2027 02:16:06 +0000
asID:                     150541
IP address blocks:        103.68.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl
                          rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:74:53:04:29:7f:4f:08:6d:94:d2:5b:f9:93:f0:47:a6:b2:a8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24
        Validity
            Not Before: May  3 02:11:06 2026 GMT
            Not After : May  2 02:16:06 2027 GMT
        Subject: CN=6D548A3FFCE4E058F74DDC403C0831AA2533FAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8f:64:94:7b:70:d4:52:ce:21:2a:44:cc:7f:
                    2f:64:01:9b:95:69:60:81:89:0a:8f:76:7f:ba:4f:
                    5a:a1:6c:01:32:86:76:06:3c:c6:c7:f1:c1:f3:0a:
                    c0:08:c0:db:dd:f2:1c:29:b1:77:d9:92:52:ec:8d:
                    58:33:a6:19:54:1b:9d:ba:1a:5f:b9:e7:c5:85:a1:
                    bb:38:28:9f:3b:da:3c:c9:d9:f6:b2:f4:39:32:e8:
                    d3:2b:00:d2:43:71:ef:29:0c:67:66:bb:49:79:1a:
                    d1:b9:80:9c:15:3a:21:73:0d:4c:4b:1a:d5:c8:df:
                    fe:6c:8e:80:6f:06:c7:08:06:b0:be:b9:46:0c:c2:
                    0c:c4:cf:d0:db:d2:c4:1e:d0:a9:ba:93:0e:da:0d:
                    d6:b2:06:f8:3c:4f:a8:28:d2:7e:5e:1c:72:20:dc:
                    8b:bb:99:78:d7:11:e8:15:2a:2f:10:75:6a:f5:63:
                    4c:08:e7:91:98:76:3d:ed:a5:fe:c7:d3:44:21:5a:
                    bb:fc:a2:1d:dd:ba:f2:52:32:98:21:b4:f1:d8:63:
                    2f:ee:bd:f9:df:f2:10:d4:a5:14:7a:02:f1:ac:38:
                    91:03:f6:bb:3f:93:3d:8f:2a:ec:d4:8d:3e:16:d5:
                    82:74:32:42:bb:37:3e:61:55:7f:83:04:6c:ac:f8:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:54:8A:3F:FC:E4:E0:58:F7:4D:DC:40:3C:08:31:AA:25:33:FA:A5
            X509v3 Authority Key Identifier:
                keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:87:f6:76:19:f4:a1:ef:0c:5f:b9:15:68:5c:c8:50:62:63:
         c1:c5:42:29:79:13:2c:70:23:00:b2:09:e5:40:40:0f:00:ec:
         9c:47:35:86:dc:7d:2d:4e:4e:3e:05:ea:f0:10:2d:3a:49:84:
         ab:5b:65:51:65:45:8b:26:55:78:09:25:50:b3:04:43:4c:f6:
         6f:92:4c:96:e6:8f:98:11:7e:f1:f8:a1:94:61:aa:c2:e9:2e:
         79:91:f8:9d:f4:e2:11:f2:98:b2:51:af:f4:f0:d7:3b:ef:9f:
         9e:99:6d:0c:2b:e6:48:6f:99:e1:f6:f3:f3:54:15:2e:15:57:
         00:81:d6:97:c5:e0:13:42:c3:fe:a0:a8:6c:85:1b:e6:7d:51:
         84:51:0e:0d:66:3d:2f:ef:01:88:78:58:f2:37:0d:05:96:2b:
         a3:d7:93:41:a8:04:f7:b5:97:84:2e:28:56:ed:c7:1f:9f:ff:
         61:92:d3:3c:73:d7:b4:ca:63:a2:db:85:58:3a:98:67:a1:3c:
         45:58:ab:6b:cd:b7:2b:7e:b1:ad:0b:dd:bb:a0:80:ac:13:a4:
         44:6c:65:d7:00:42:f0:cd:e6:6f:df:b0:04:df:10:46:89:06:
         2c:e5:a5:78:be:f6:2b:43:52:5e:b5:91:cd:6a:be:5c:04:bc:
         67:88:e1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:49 2026 by rpki-client