Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa
File:                     3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (raw, json)
Hash identifier:          Dgai9I/TT4G/oQBQ3mEn1fS7dXTCrr7cZjoLYBavMXQ=
Subject key identifier:   E6:97:E4:DE:2D:B5:E1:6A:BE:66:A7:4D:CB:4E:3E:B7:F6:C1:42:86
Certificate issuer:       /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A
Certificate serial:       5C19C9F16A661B9F4F51A1C892D6066085C00353
Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa
Signing time:             Sun 03 May 2026 02:19:25 +0000
ROA not before:           Sun 03 May 2026 02:14:25 +0000
ROA not after:            Sun 02 May 2027 02:19:25 +0000
asID:                     150234
IP address blocks:        103.19.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl
                          rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:19:c9:f1:6a:66:1b:9f:4f:51:a1:c8:92:d6:06:60:85:c0:03:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A
        Validity
            Not Before: May  3 02:14:25 2026 GMT
            Not After : May  2 02:19:25 2027 GMT
        Subject: CN=E697E4DE2DB5E16ABE66A74DCB4E3EB7F6C14286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:55:b0:a4:08:be:cf:c6:7f:8b:28:45:19:
                    8f:0b:b2:27:30:64:84:e7:b6:e2:86:2b:55:ce:ac:
                    cb:07:64:fd:82:52:e6:c7:b7:c1:7c:67:b7:47:03:
                    9a:05:4f:8e:97:65:78:56:d0:b8:3c:15:aa:8e:6d:
                    08:d0:cd:95:2f:91:41:1c:ff:83:89:e4:e7:6b:7d:
                    36:f5:aa:0d:41:b1:2f:16:96:6e:6d:72:46:ba:11:
                    00:bd:f6:f5:7f:77:9b:a7:39:6f:c8:67:df:62:d8:
                    75:f9:34:cf:72:c9:83:ea:b5:c2:0d:a7:f0:6f:69:
                    e3:66:f6:42:83:c1:cc:24:49:b7:a4:ee:aa:c8:47:
                    a6:d1:c8:22:76:2b:64:74:c7:c5:aa:7d:3d:de:ee:
                    44:90:51:c9:5c:fc:16:04:23:ec:55:e5:28:1d:f2:
                    2d:5f:bf:d8:aa:84:c7:5b:34:6c:a8:cd:16:47:d8:
                    22:37:4e:78:f4:26:9a:05:e9:37:aa:ac:31:38:62:
                    4d:9d:02:98:61:eb:c8:65:f3:ea:62:8d:61:3c:c7:
                    38:f0:0a:64:7e:b5:fa:29:b4:82:2d:fc:77:16:4c:
                    98:e1:cf:b8:73:de:49:e2:15:be:cd:b1:da:bb:3b:
                    41:39:9e:83:0f:eb:98:d8:7f:4a:50:80:ad:4b:56:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:E4:DE:2D:B5:E1:6A:BE:66:A7:4D:CB:4E:3E:B7:F6:C1:42:86
            X509v3 Authority Key Identifier:
                keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:8e:a2:c6:d9:c1:9e:03:0c:bb:0b:98:6c:e2:b5:e0:b2:93:
         22:fd:9f:c8:7a:26:33:d1:b8:3f:56:51:80:16:de:e0:62:41:
         50:7a:58:44:74:84:f4:4a:e1:cc:34:ac:91:e1:2d:da:f0:10:
         60:70:db:85:03:bb:3a:d5:f6:62:f5:39:5e:6f:bd:29:00:29:
         ef:90:bc:bb:1f:7f:f8:b5:b6:33:37:b3:c8:4b:76:ab:b7:11:
         13:95:23:8c:99:4a:b1:16:1b:8d:c9:79:5e:3b:f2:23:26:6f:
         b0:45:19:e5:dd:98:b8:f8:21:9f:8f:0e:27:b4:b5:69:f0:67:
         74:dd:55:c0:3a:74:31:88:94:4b:55:a3:71:f2:b1:c1:e3:72:
         cf:e7:ed:9b:a6:4a:34:1e:ae:fb:12:90:3b:80:be:45:18:04:
         45:d4:24:f1:53:e9:d3:9b:bc:89:af:60:13:cd:73:dc:3b:ae:
         61:39:75:e6:fc:98:ca:aa:53:22:bb:99:b5:3b:d0:90:ab:fc:
         5d:22:04:4f:4d:aa:ca:e7:1f:ea:cc:ee:79:5d:50:b2:84:fd:
         c2:78:85:2f:38:b9:09:60:15:23:60:2c:2e:7c:b2:d4:3a:04:
         32:60:0a:49:51:33:0e:88:0a:74:27:13:44:ac:c0:67:63:39:
         01:dd:55:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:37:57 2026 by rpki-client