Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa
File:                     3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (raw, json)
Hash identifier:          fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=
Subject key identifier:   31:A0:E9:7E:EC:77:85:19:2D:0D:59:0C:4D:6A:B1:3B:2B:32:C1:D6
Certificate issuer:       /CN=BA80E957332B450B1641062F6C02C57C817FFCB6
Certificate serial:       09F13C569D635AB7E9F36FDE9305D5FD0AE4F122
Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa
Signing time:             Sun 03 May 2026 02:17:01 +0000
ROA not before:           Sun 03 May 2026 02:12:01 +0000
ROA not after:            Sun 02 May 2027 02:17:01 +0000
asID:                     142309
IP address blocks:        103.152.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl
                          rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f1:3c:56:9d:63:5a:b7:e9:f3:6f:de:93:05:d5:fd:0a:e4:f1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6
        Validity
            Not Before: May  3 02:12:01 2026 GMT
            Not After : May  2 02:17:01 2027 GMT
        Subject: CN=31A0E97EEC7785192D0D590C4D6AB13B2B32C1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:72:c1:b3:e4:ae:9b:ab:a2:7a:a6:e3:9d:
                    ff:18:a6:40:26:51:f3:ea:a1:ea:d3:20:5e:31:47:
                    a4:65:36:10:c9:fc:c1:61:8f:83:9e:b4:75:3e:0c:
                    9c:b3:45:94:36:50:23:42:2a:9f:47:f8:c1:05:74:
                    63:4d:dd:ef:82:f3:41:ce:3f:64:b3:45:99:78:fd:
                    67:84:60:6c:f1:59:79:a6:4a:7d:a5:72:67:9a:dd:
                    52:58:50:fe:c0:01:51:9d:f6:4a:74:27:24:0b:bc:
                    92:88:cf:d2:9a:ae:fb:62:a8:8a:20:10:79:8f:e1:
                    b8:d1:67:f0:1c:10:9a:bc:c6:52:8c:41:06:af:03:
                    8c:5d:4c:bd:be:34:b8:26:b5:6d:43:82:3e:1e:67:
                    07:43:5e:6d:8f:3f:e7:92:40:42:23:e0:e9:81:3d:
                    58:03:7a:18:2a:e1:bb:73:02:9b:74:d9:dd:83:24:
                    65:b2:f6:af:d1:42:c7:77:ab:71:af:42:f6:c9:4f:
                    46:53:a0:83:cc:06:fa:7e:fe:ea:b9:a3:c0:93:68:
                    82:6a:f0:31:51:d7:79:40:de:9e:ec:52:d9:fc:a6:
                    cd:93:ab:0c:f0:4d:45:fe:47:05:ed:24:36:fe:36:
                    93:6c:ea:e0:ab:39:7c:3a:1c:45:c9:d4:e1:e2:49:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:E9:7E:EC:77:85:19:2D:0D:59:0C:4D:6A:B1:3B:2B:32:C1:D6
            X509v3 Authority Key Identifier:
                keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:90:c8:f9:8f:4c:a9:51:01:67:7a:38:3f:33:0f:35:9b:4c:
         ef:62:a2:4c:d9:af:24:70:8a:af:5a:d3:9e:c6:59:4f:c4:17:
         8b:7d:40:a1:a4:9d:d4:85:29:dd:ad:2c:e1:1f:18:02:81:e2:
         81:b6:ff:5e:a7:23:33:f9:6b:2f:98:91:80:20:be:5e:75:bc:
         22:10:58:5e:50:83:34:46:a2:08:cc:b9:d8:3e:9e:6c:81:53:
         35:de:32:74:de:38:2f:6a:ca:7d:d7:2e:d5:cc:8d:ae:ac:b1:
         5f:cf:a1:3b:64:52:f8:93:95:9e:11:58:84:87:5f:82:9f:1b:
         73:4f:ed:f7:d4:b3:fb:b7:0b:92:b4:1e:42:a5:7f:68:21:25:
         29:8a:7c:43:01:a2:cc:76:e4:f4:aa:b0:20:8b:ad:e3:fc:81:
         57:e4:89:9e:77:77:0d:af:e1:b2:33:e2:54:04:6b:da:5b:63:
         0e:fc:02:6f:03:b0:88:7f:e9:ed:f6:88:35:99:a9:83:47:e3:
         f2:22:dc:c4:60:8e:88:ec:53:44:cb:22:64:f4:55:10:63:21:
         13:34:0f:61:e9:c5:49:a9:b2:b3:7c:a2:9f:9a:3f:79:b9:a1:
         c4:ee:82:c8:38:fe:fa:63:aa:b9:0b:07:be:3b:e1:d4:b1:37:
         de:c1:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:57 2026 by rpki-client