Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa
File:                     3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa (raw, json)
Hash identifier:          68j/2R3Ewk4p7TN+xLCiDv2//M/vL0ynXYOYWgxaiD4=
Subject key identifier:   DA:24:EC:93:53:0B:04:FC:04:AD:25:59:F6:76:12:7A:21:C0:99:81
Certificate issuer:       /CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE
Certificate serial:       370F1EDC454D7171C28DB0D86F25E3467A51D20D
Authority key identifier: FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa
Signing time:             Sun 03 May 2026 02:20:37 +0000
ROA not before:           Sun 03 May 2026 02:15:37 +0000
ROA not after:            Sun 02 May 2027 02:20:37 +0000
asID:                     149966
IP address blocks:        103.191.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl
                          rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0f:1e:dc:45:4d:71:71:c2:8d:b0:d8:6f:25:e3:46:7a:51:d2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE
        Validity
            Not Before: May  3 02:15:37 2026 GMT
            Not After : May  2 02:20:37 2027 GMT
        Subject: CN=DA24EC93530B04FC04AD2559F676127A21C09981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:d1:4f:31:84:78:33:30:c1:09:be:7f:b5:
                    a6:93:64:a1:68:8f:b4:b6:d0:57:0c:8c:84:b5:d1:
                    92:e9:4f:b0:5e:d8:98:aa:19:94:ca:38:ab:8f:21:
                    85:c7:41:5b:a1:87:7d:e5:05:a0:08:5e:27:3d:38:
                    08:0b:3e:ea:df:7c:4d:23:4f:11:75:dd:34:8e:fc:
                    4b:5e:56:96:95:92:5e:d1:0c:da:7d:a5:b5:44:6c:
                    a5:6c:de:b8:15:8d:02:5a:ce:5c:07:1f:de:31:b3:
                    e8:c4:ee:b3:a3:72:87:2f:64:0e:3f:82:e6:32:91:
                    5b:92:52:b7:fb:df:1f:ff:6b:e4:d5:89:c3:a3:26:
                    df:9e:01:28:bf:cb:07:eb:78:39:2a:d6:34:33:fc:
                    67:6b:2d:cb:e2:97:18:b9:75:61:9a:f0:e6:e0:ee:
                    54:2c:0b:43:02:7d:7d:5a:f7:04:4b:e2:4d:4e:53:
                    f7:71:72:0d:82:32:83:6a:ea:1f:ac:3b:53:af:77:
                    75:c0:a9:29:36:fb:f1:15:ff:46:db:09:c2:87:a8:
                    89:4f:e0:a0:42:3b:7d:1e:10:78:f7:7d:a0:70:71:
                    36:3c:11:eb:a6:ce:c1:13:c4:76:b0:a7:16:50:91:
                    9b:62:8e:58:18:45:38:81:ed:c4:27:31:42:07:af:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:24:EC:93:53:0B:04:FC:04:AD:25:59:F6:76:12:7A:21:C0:99:81
            X509v3 Authority Key Identifier:
                keyid:FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:9d:e7:35:d2:1b:d7:a8:e2:b2:2f:5d:66:bc:c2:d5:0b:
         4b:8c:66:61:0c:7c:80:fb:bc:15:26:c5:95:01:a9:b5:86:db:
         70:89:4e:a1:82:23:6e:30:d8:47:09:1e:49:1e:4a:eb:51:cc:
         f0:ec:a0:a8:0a:b2:bf:65:7b:46:9b:f8:d3:6e:e7:33:e1:42:
         7c:69:14:18:84:ed:e8:4e:5a:d0:25:f3:59:c6:e4:19:a2:6b:
         2e:e4:03:9f:18:ac:34:13:e0:e6:a2:d8:e5:9b:9a:50:87:74:
         dc:09:54:dc:c0:48:ca:7f:c6:db:68:9d:0c:c0:fb:a5:79:01:
         bd:ea:2f:38:1c:95:bd:33:e5:65:f8:2b:bb:4a:53:86:70:69:
         c5:16:8f:2b:dd:64:f7:cc:b9:fe:f0:fa:ed:71:15:88:21:23:
         ac:4e:36:27:c7:28:22:43:a6:0d:67:b6:25:2e:45:9e:7f:64:
         2a:4d:ed:eb:07:4b:8f:1c:8c:75:db:5a:00:ac:64:27:e6:fc:
         d7:75:92:ef:e8:53:49:43:a1:33:35:d3:10:db:4a:b0:c7:31:
         d8:ce:8d:7d:16:12:30:7d:c6:98:02:be:db:5d:36:89:fe:a0:
         0a:7a:d7:b0:29:6e:f4:83:08:bd:b5:ec:17:50:6b:e2:d6:1b:
         37:f5:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:11 2026 by rpki-client