Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa
File:                     3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (raw, json)
Hash identifier:          AsGbw0cbRJMt+AHYBFh8GsmxUOZcTvqzv4dYjEpLqWI=
Subject key identifier:   03:3F:0A:02:33:D0:B6:06:EB:38:04:3F:7F:3F:A4:05:0E:B8:69:86
Certificate issuer:       /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial:       114A36E96273A801E74E869B0C9D1475CA302538
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa
Signing time:             Sun 03 May 2026 02:20:49 +0000
ROA not before:           Sun 03 May 2026 02:15:49 +0000
ROA not after:            Sun 02 May 2027 02:20:49 +0000
asID:                     140413
IP address blocks:        103.151.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
                          rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4a:36:e9:62:73:a8:01:e7:4e:86:9b:0c:9d:14:75:ca:30:25:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
        Validity
            Not Before: May  3 02:15:49 2026 GMT
            Not After : May  2 02:20:49 2027 GMT
        Subject: CN=033F0A0233D0B606EB38043F7F3FA4050EB86986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:85:04:5e:b9:46:e9:8f:bc:69:a8:6d:1e:
                    7a:d0:90:02:5d:f7:40:10:76:de:b9:59:7f:3a:84:
                    26:2c:00:99:4f:db:f6:ac:0f:55:9d:32:df:6d:6d:
                    04:3a:e2:6d:d6:9a:66:21:fe:2f:cf:4e:5c:9b:11:
                    75:12:f8:2c:a6:4a:c6:f4:dd:04:aa:c9:30:05:59:
                    80:24:f5:82:e1:d3:3c:7b:bc:c4:19:be:66:49:9f:
                    87:89:4a:f6:a7:d7:3c:37:58:53:7e:a6:1d:fe:1a:
                    d6:cd:85:72:9b:ed:f3:e3:ca:b3:10:72:bd:f7:49:
                    00:47:9b:29:21:0e:d6:88:47:41:0b:d6:19:32:fb:
                    ef:37:af:24:07:4f:70:1c:15:9d:f0:9d:63:8f:15:
                    27:ac:a5:48:65:8b:2f:68:34:a9:46:82:17:3f:b5:
                    cc:c7:92:c3:22:63:42:6f:7d:64:3f:3c:32:5c:ca:
                    b9:8e:c5:45:1c:93:db:d7:f9:94:e6:7c:3c:d7:c5:
                    89:f9:83:57:f7:17:f9:64:be:41:d7:1e:f3:6b:6a:
                    a0:7d:2d:09:2d:9a:7d:3d:c5:73:d0:85:b2:85:fe:
                    22:03:30:21:20:f8:8e:f3:3a:b5:a1:ab:bb:6f:43:
                    c5:2e:f3:b9:2a:08:6e:e8:4a:90:ca:f4:5e:f9:ee:
                    5a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3F:0A:02:33:D0:B6:06:EB:38:04:3F:7F:3F:A4:05:0E:B8:69:86
            X509v3 Authority Key Identifier:
                keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:ac:0c:3a:00:44:58:b0:cf:6e:e1:65:d1:61:af:05:a2:50:
         9f:6b:85:00:6e:eb:18:42:12:14:ac:c1:bb:9f:42:d7:05:86:
         04:27:72:fe:06:a7:cc:52:8c:b0:5b:19:b2:48:f5:14:1e:ed:
         6f:67:d0:23:f4:98:a1:24:c6:5c:44:2b:a3:60:cf:d4:c2:ec:
         c8:ff:10:cc:8c:8d:a3:58:c3:b2:b2:c9:d1:c2:c4:64:fd:a7:
         32:0a:eb:c2:9a:64:c8:e7:f9:8a:ee:48:40:77:e3:6b:d6:c2:
         3e:33:8f:8d:3a:00:d3:d3:e5:c4:9c:49:9d:83:4c:71:b0:e4:
         1a:df:5d:8d:40:aa:57:e2:88:8e:7b:dc:22:73:b7:f3:8a:de:
         02:91:30:84:55:68:3e:64:ad:97:5e:41:bc:f7:53:ad:15:88:
         b4:d7:58:7f:2d:47:44:81:65:3c:a9:b1:c6:3f:66:ed:fd:78:
         0a:98:8d:cd:e5:75:3f:fb:ff:90:2e:10:6d:28:00:f8:4a:3e:
         cb:f7:7d:f8:9a:d8:d5:8e:f1:57:f6:44:af:c6:98:29:2f:20:
         7a:d2:c5:a1:a2:72:6c:22:d6:51:93:7a:02:bf:9f:14:59:34:
         6c:70:5c:5e:9f:e7:8f:c4:7f:ef:41:22:62:0c:dd:70:41:27:
         d6:f4:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:33 2026 by rpki-client