Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa
File:                     3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (raw, json)
Hash identifier:          6lqWNKAt2XmMr/8ZP7Y7ImCHg1Wbbj2dB1ROb8aS1r0=
Subject key identifier:   19:75:F9:AB:7B:F9:BE:F9:CA:77:E3:3C:E1:50:E7:71:D1:1D:C8:53
Certificate issuer:       /CN=B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60
Certificate serial:       2A262912F6A87D4363A19C3B6D0F60403B1765CD
Authority key identifier: B8:4C:63:BE:F8:B2:6A:45:95:EC:8A:50:0B:A5:15:4E:3A:6B:0F:60
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa
Signing time:             Sun 03 May 2026 02:20:25 +0000
ROA not before:           Sun 03 May 2026 02:15:25 +0000
ROA not after:            Sun 02 May 2027 02:20:25 +0000
asID:                     150188
IP address blocks:        103.30.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.crl
                          rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:26:29:12:f6:a8:7d:43:63:a1:9c:3b:6d:0f:60:40:3b:17:65:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60
        Validity
            Not Before: May  3 02:15:25 2026 GMT
            Not After : May  2 02:20:25 2027 GMT
        Subject: CN=1975F9AB7BF9BEF9CA77E33CE150E771D11DC853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:b0:cd:33:a0:40:57:27:25:ed:b3:a8:56:
                    c9:0f:37:2e:c0:c1:75:a7:c7:8c:cb:4a:fd:d7:94:
                    ad:b7:74:08:d8:4f:56:0f:e8:56:84:98:f1:1a:4d:
                    87:1a:5b:41:1d:7b:13:02:c0:0e:a9:17:dd:6e:13:
                    8c:ab:b8:7a:26:62:97:33:4e:a3:90:1d:1d:d0:e0:
                    ff:f0:44:e5:aa:2e:fd:83:59:d3:2d:aa:64:c9:a8:
                    43:b2:f6:a4:52:74:22:8f:52:de:e4:c1:f3:a7:60:
                    2c:99:4c:12:9a:80:c5:e4:2f:1e:1d:68:07:ef:3c:
                    80:62:4f:ac:5c:53:95:b0:3e:50:16:06:53:02:e8:
                    bc:b6:88:4d:68:fb:35:8b:50:bc:6d:2f:93:d9:eb:
                    3f:a7:77:c1:c3:99:97:6f:66:15:b3:87:5b:fd:f9:
                    50:ee:70:cc:7b:8e:50:11:6e:30:d9:d9:c5:fb:69:
                    d8:e9:70:d1:94:1d:ee:b2:bc:58:35:69:92:c2:25:
                    bc:ea:03:0c:a2:34:2e:31:47:63:78:d9:bc:67:57:
                    97:e9:7a:aa:24:7d:bd:6e:b2:95:5c:98:cc:1b:c8:
                    cf:bf:26:bf:de:f3:ac:99:62:0d:9e:26:5e:42:f0:
                    fe:15:4e:96:1e:2a:18:d2:50:12:9e:2b:6c:84:8f:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:75:F9:AB:7B:F9:BE:F9:CA:77:E3:3C:E1:50:E7:71:D1:1D:C8:53
            X509v3 Authority Key Identifier:
                keyid:B8:4C:63:BE:F8:B2:6A:45:95:EC:8A:50:0B:A5:15:4E:3A:6B:0F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:30:0d:96:56:16:e8:20:07:20:b3:be:c6:94:3c:96:4d:
         68:ae:a2:aa:86:82:14:2e:7b:5b:63:18:ba:73:01:54:ae:11:
         61:69:99:e1:e7:c2:35:48:ed:e4:d3:2a:78:07:82:13:12:85:
         2c:f9:2a:7c:37:61:24:c9:df:b8:ac:75:b2:cd:bf:06:51:ee:
         f9:e0:99:70:0c:f6:a3:dc:35:18:4a:31:5f:c6:dc:b5:fb:e0:
         30:9f:78:d7:7f:15:1c:7c:b1:c1:b1:ff:5e:dd:bb:40:e4:66:
         db:f3:ae:23:cd:b7:14:bc:5d:96:7f:3c:3d:42:a0:70:05:21:
         34:34:9c:3b:fa:0d:7c:3d:d4:30:20:e3:53:3a:80:0d:0a:32:
         f2:81:43:89:41:e8:6f:20:fb:a7:71:00:85:89:21:bc:14:f3:
         99:a8:cc:c9:98:a1:37:20:a2:b2:19:2c:10:3d:54:2a:59:af:
         04:e0:ef:94:89:c5:09:82:79:1b:9e:27:75:ab:e0:2e:48:62:
         58:37:68:d1:c1:e6:a4:29:a9:4c:05:c0:0e:0d:a5:14:c9:9f:
         be:97:1d:81:23:dd:c4:05:a7:99:63:bc:76:c4:24:71:96:dd:
         a4:a0:f0:6e:29:47:63:6b:94:60:4c:b7:ee:3b:0e:2c:ca:e5:
         f0:9d:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:03 2026 by rpki-client