Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa
File:                     3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (raw, json)
Hash identifier:          hrwaL58bLcWsXLir3kxI1OkAj6GGFQmLA1ZKUXd0Ogs=
Subject key identifier:   28:1D:DA:5F:ED:48:7A:AE:32:F3:69:31:3A:FB:B1:A0:44:13:E5:2B
Certificate issuer:       /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24
Certificate serial:       1E6D688DC89D33877B200B85A9DBC0D154FA3DF2
Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa
Signing time:             Sun 03 May 2026 02:16:06 +0000
ROA not before:           Sun 03 May 2026 02:11:06 +0000
ROA not after:            Sun 02 May 2027 02:16:06 +0000
asID:                     150541
IP address blocks:        103.68.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl
                          rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6d:68:8d:c8:9d:33:87:7b:20:0b:85:a9:db:c0:d1:54:fa:3d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24
        Validity
            Not Before: May  3 02:11:06 2026 GMT
            Not After : May  2 02:16:06 2027 GMT
        Subject: CN=281DDA5FED487AAE32F369313AFBB1A04413E52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e6:1f:36:9c:dc:f5:43:31:01:a6:40:1f:36:
                    0f:56:67:ee:be:24:93:d3:d5:46:c9:08:02:10:71:
                    ee:b5:a7:f4:a5:d6:4b:0f:1b:73:1a:3f:aa:88:f3:
                    76:59:cd:c9:73:ce:b3:95:f5:60:eb:7f:b7:59:0e:
                    78:54:7f:45:43:ba:91:4f:79:cb:61:01:1a:5b:d2:
                    a1:df:c5:3e:34:7d:ee:a0:bb:5e:c9:94:3d:32:e7:
                    bb:1e:ad:29:52:58:4e:a8:48:7f:b4:b2:f4:82:54:
                    26:09:7f:06:5d:e9:11:a7:cd:a4:ba:76:cc:7d:94:
                    f0:60:c0:ab:53:a5:d5:b3:47:87:75:71:b5:fb:f9:
                    81:06:33:e3:9c:48:da:16:46:d3:99:bd:f3:4a:06:
                    9e:7f:d8:a5:d0:ee:56:1a:3c:aa:77:56:87:4d:f9:
                    67:48:db:a3:2c:cd:fd:ae:6c:4d:d9:96:1c:c7:8d:
                    67:92:cc:8f:19:50:be:43:22:9d:05:c4:63:4d:a0:
                    7d:79:68:48:6d:f8:06:0a:1c:d9:e2:bf:86:40:0f:
                    c0:1a:2f:15:1a:37:cf:81:c3:19:59:cd:59:47:e3:
                    cc:61:6e:02:6c:5c:d6:00:4f:2b:bb:7f:c8:95:07:
                    c6:a9:a9:74:f1:77:35:39:85:cf:4f:90:a5:0a:de:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1D:DA:5F:ED:48:7A:AE:32:F3:69:31:3A:FB:B1:A0:44:13:E5:2B
            X509v3 Authority Key Identifier:
                keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:6a:8a:c2:9d:72:13:fc:87:ed:7f:ac:89:46:08:a1:fc:eb:
         63:5e:23:d7:80:c0:51:01:df:e1:57:bb:2e:e5:f9:0d:be:37:
         33:26:75:e2:25:81:56:09:90:1f:51:bb:c2:72:9f:3e:c0:79:
         1a:12:a6:1e:29:ef:f2:37:38:c1:79:0a:f8:14:b9:67:6b:da:
         70:7b:bd:22:ed:ff:fe:d7:0e:b7:f1:97:5c:21:7b:2c:74:2f:
         63:c6:36:47:ec:98:5a:f4:5e:21:14:89:13:a8:c7:a5:c2:8a:
         13:da:c4:e6:86:ec:2e:38:8e:fa:65:33:73:d5:b7:41:d5:9c:
         97:b6:9d:fb:50:70:1f:8a:9c:19:c2:a2:9b:27:cf:cf:8f:d4:
         3a:a6:f1:33:4a:69:16:d1:b5:6f:8d:85:5c:10:21:2c:41:f8:
         5e:e4:4d:49:f6:3f:3f:05:2b:76:39:49:04:40:f3:6b:a8:4e:
         1f:3e:96:f8:a7:a0:cf:7d:c1:0b:e7:01:6c:a0:48:cb:ae:e5:
         66:71:06:ec:49:03:34:f0:b7:34:a2:65:2a:2e:13:d8:f9:1c:
         e6:11:4b:91:3e:6a:78:b8:67:92:60:ab:47:c7:97:ce:59:be:
         ac:fa:37:fe:3b:73:65:47:2b:c5:e1:8d:b5:2c:08:48:bd:d8:
         f4:1e:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:26 2026 by rpki-client