Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa
File:                     3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (raw, json)
Hash identifier:          WBevjDBrr8T3lRgtMCROWKCPpKkw27Bp5qV284oO8bo=
Subject key identifier:   1E:15:05:C7:8A:49:4D:B2:E8:A7:A4:CC:7B:8C:82:11:16:0B:81:51
Certificate issuer:       /CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543
Certificate serial:       7976C376D478E3D82BA1472DD4DF9AD93BD243F7
Authority key identifier: 2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa
Signing time:             Sun 03 May 2026 02:20:40 +0000
ROA not before:           Sun 03 May 2026 02:15:40 +0000
ROA not after:            Sun 02 May 2027 02:20:40 +0000
asID:                     150248
IP address blocks:        103.78.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl
                          rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:76:c3:76:d4:78:e3:d8:2b:a1:47:2d:d4:df:9a:d9:3b:d2:43:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF28EC31FA9595D4C9372E0378B127BFC07D543
        Validity
            Not Before: May  3 02:15:40 2026 GMT
            Not After : May  2 02:20:40 2027 GMT
        Subject: CN=1E1505C78A494DB2E8A7A4CC7B8C8211160B8151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:30:78:92:09:4e:70:6f:5a:20:00:ee:ef:
                    39:a0:e3:0d:da:0f:6c:64:39:49:2a:1a:fe:9e:ac:
                    a7:91:c3:82:4e:bc:d6:c5:7f:a8:d7:ee:5c:45:a3:
                    c7:39:c0:07:07:93:22:d4:55:ef:69:87:75:87:8a:
                    32:4f:02:cb:ad:62:d6:48:a6:9b:ea:bd:b6:e8:74:
                    2d:ac:6a:a1:3e:0b:b4:16:da:ab:72:8d:b8:d4:56:
                    67:92:9d:3b:75:4d:75:e3:3a:29:74:19:7a:20:af:
                    12:d0:ae:0a:86:d5:17:a4:57:ee:cf:70:5a:9b:72:
                    b7:e2:a7:8c:1e:e1:db:6a:50:15:47:7d:88:30:d0:
                    67:92:2e:44:2d:8c:96:57:dc:ac:85:cc:43:2f:b9:
                    61:76:e8:19:86:14:19:32:93:56:b8:f5:0b:49:b2:
                    fa:8e:24:e7:a7:4a:ba:83:b5:6e:8f:53:b2:c9:29:
                    44:06:c4:62:fe:9c:a5:d5:15:9a:24:95:11:b4:9f:
                    31:08:60:53:d0:db:dd:35:71:25:2a:cc:85:84:24:
                    b1:16:38:cc:cf:22:12:77:6a:b4:4a:65:04:81:4c:
                    e8:a2:2f:01:0b:e4:cf:8f:43:6d:2d:17:b4:4e:ea:
                    a1:5f:fb:83:55:50:8d:80:a5:8e:97:a5:5a:ca:f0:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:15:05:C7:8A:49:4D:B2:E8:A7:A4:CC:7B:8C:82:11:16:0B:81:51
            X509v3 Authority Key Identifier:
                keyid:2F:F2:8E:C3:1F:A9:59:5D:4C:93:72:E0:37:8B:12:7B:FC:07:D5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/2FF28EC31FA9595D4C9372E0378B127BFC07D543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF28EC31FA9595D4C9372E0378B127BFC07D543.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:63:d2:53:ec:74:5d:f7:3c:e8:e1:d3:25:89:44:c0:8c:bc:
         30:bb:0b:d8:6e:6e:8a:be:a1:83:64:ac:d4:15:54:a1:10:50:
         40:f4:cb:f7:ba:e0:81:20:3e:01:84:04:00:12:25:9c:51:06:
         4e:81:7d:69:14:d8:87:44:c6:40:3a:ec:9f:80:59:71:7b:c3:
         f0:a2:1e:e0:0e:41:3b:ff:5a:40:09:70:71:33:ed:bb:b7:b2:
         8e:2a:c5:5c:26:b9:95:0b:fd:b4:57:ee:7e:4f:9a:d6:ea:42:
         45:b4:b3:6a:62:4a:de:42:33:e4:68:fc:29:8c:bd:89:9f:61:
         f0:65:5a:5e:86:f0:ae:e8:14:a9:02:f7:89:18:dd:f3:35:c0:
         f4:b7:ac:64:8b:78:c7:bb:3e:e0:7c:01:c2:c3:f2:e2:92:a7:
         58:7e:b4:b0:ac:cf:3b:c9:92:9b:4e:f5:ee:22:c7:7c:92:33:
         fd:45:bf:9a:94:de:0e:de:0c:db:94:7b:01:d9:4c:b4:f7:72:
         99:2b:0a:b9:2a:23:a2:76:e3:f9:33:40:f0:12:8e:48:9e:28:
         7f:8f:c5:13:8a:70:85:63:5c:3d:17:72:b7:9b:cd:fa:18:4a:
         92:44:b9:da:53:5f:1f:f2:69:ae:5d:12:4b:78:be:60:f6:bc:
         eb:9a:27:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:45 2026 by rpki-client