Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa
File:                     3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (raw, json)
Hash identifier:          SW4deFwDdRpgisaH7RqLBMHR3upFCn0yA60y2S1M1VI=
Subject key identifier:   31:9F:37:10:FB:90:BC:9D:76:49:90:58:47:03:76:AE:9E:1A:78:3A
Certificate issuer:       /CN=AC861103DDC024E3BEB681351D66B027A8BA785A
Certificate serial:       1560CB010E1ADFD97668FB949507D51ADF7FA3B6
Authority key identifier: AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa
Signing time:             Sun 03 May 2026 02:20:17 +0000
ROA not before:           Sun 03 May 2026 02:15:17 +0000
ROA not after:            Sun 02 May 2027 02:20:17 +0000
asID:                     141137
IP address blocks:        103.158.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl
                          rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:60:cb:01:0e:1a:df:d9:76:68:fb:94:95:07:d5:1a:df:7f:a3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC861103DDC024E3BEB681351D66B027A8BA785A
        Validity
            Not Before: May  3 02:15:17 2026 GMT
            Not After : May  2 02:20:17 2027 GMT
        Subject: CN=319F3710FB90BC9D76499058470376AE9E1A783A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:93:af:74:e3:db:23:4e:f7:6c:fe:8e:b1:
                    75:a3:0e:37:76:41:e6:52:e3:69:8f:f1:82:d4:64:
                    db:a0:38:85:67:fe:8a:9f:76:2d:30:9a:ab:b1:00:
                    60:e3:bd:4d:b8:19:05:b8:81:3e:e9:9f:b5:9a:31:
                    15:0d:22:db:5e:45:58:5a:7b:14:1f:12:c9:bf:9f:
                    25:87:34:5b:79:61:85:d8:c4:8e:28:57:58:fc:6f:
                    5c:ac:6e:7b:c2:ee:38:2c:32:d3:c1:0d:ee:27:4f:
                    77:43:6f:25:c5:70:e5:04:50:a2:f9:26:da:7c:3d:
                    f9:33:02:96:98:f1:16:d3:97:c6:69:76:f1:c8:0f:
                    50:21:15:74:a7:59:c4:82:c0:89:3a:20:0d:e0:cb:
                    8b:13:43:c8:b1:09:5b:90:96:18:d4:bb:b7:29:1f:
                    b7:12:5a:f4:de:11:11:2d:d5:0d:85:2c:02:4b:c5:
                    31:ec:76:15:06:c8:b3:1c:f0:e3:24:c5:22:b4:31:
                    b1:85:f0:bc:ae:29:d6:9d:3e:81:3f:f9:83:5c:ee:
                    85:f6:c1:ae:49:04:45:08:1a:93:cb:dc:11:5b:fc:
                    33:21:4f:5a:a9:45:f7:3e:ab:0b:31:59:64:35:16:
                    a4:c3:3e:f5:24:57:82:db:a0:19:84:f1:50:c0:2a:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9F:37:10:FB:90:BC:9D:76:49:90:58:47:03:76:AE:9E:1A:78:3A
            X509v3 Authority Key Identifier:
                keyid:AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:98:91:1a:76:8e:74:b8:6d:0a:75:9e:ce:e0:af:36:06:fe:
         d8:7f:b1:c8:9d:6d:0b:e6:72:13:28:59:53:14:b7:f7:69:a3:
         14:b6:0c:e3:8c:66:dc:b4:71:dd:9a:68:95:78:2e:66:78:1a:
         1a:bd:83:79:15:dc:9d:13:b9:9e:02:2f:2a:61:28:15:74:a2:
         98:5d:58:21:e7:07:82:f9:59:be:d7:60:71:3f:aa:c5:ba:d2:
         68:63:ea:23:63:98:50:24:f6:3d:c0:78:7c:89:ba:e4:77:e0:
         5a:66:33:30:02:0f:0d:e8:a9:0f:8d:57:59:cf:93:24:a3:a8:
         0e:cb:01:fe:84:ed:af:41:42:4c:d8:c2:f2:62:e8:8d:20:aa:
         ce:51:82:63:b9:6f:55:ca:c7:e3:45:3e:a3:e9:d4:9d:d5:4d:
         90:97:6f:69:19:ec:34:85:4e:40:85:2e:5f:1f:a3:63:47:44:
         96:31:59:a3:9e:df:1b:51:cd:f0:af:86:7c:2b:dc:65:8d:27:
         e4:00:0c:68:be:68:1f:43:97:f1:a5:0f:27:e6:08:69:13:17:
         1b:f1:c3:c4:9c:e4:f3:53:07:84:13:81:90:f5:29:c6:a4:60:
         a3:78:40:83:f0:29:b3:21:bf:27:9f:08:26:a7:1c:3e:35:da:
         b2:90:cc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:29:59 2026 by rpki-client