Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa
File:                     3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (raw, json)
Hash identifier:          +P/AMngDtPsWOGxlH3Mr6PlyfaGk41zvE2zQOV1G0jQ=
Subject key identifier:   E9:F8:7A:0C:4C:FC:93:D4:42:00:FE:5B:6F:E4:47:80:F2:A1:D1:B3
Certificate issuer:       /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial:       2FAA475DA3F75D71904BC59B5E9954F688380CE0
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa
Signing time:             Sun 03 May 2026 02:20:47 +0000
ROA not before:           Sun 03 May 2026 02:15:47 +0000
ROA not after:            Sun 02 May 2027 02:20:47 +0000
asID:                     140413
IP address blocks:        103.151.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
                          rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:aa:47:5d:a3:f7:5d:71:90:4b:c5:9b:5e:99:54:f6:88:38:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
        Validity
            Not Before: May  3 02:15:47 2026 GMT
            Not After : May  2 02:20:47 2027 GMT
        Subject: CN=E9F87A0C4CFC93D44200FE5B6FE44780F2A1D1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:31:c1:5b:45:f6:17:2e:37:38:cb:4e:25:
                    dd:77:b2:a7:46:47:73:3f:38:4b:dd:7f:9c:ad:11:
                    96:47:bb:4e:d2:21:42:d6:1c:05:77:7f:97:69:4b:
                    1d:f2:2f:ca:3e:df:80:4f:1c:59:10:b2:20:09:54:
                    40:ca:65:a1:0c:0e:d6:60:03:4d:21:73:5f:88:7a:
                    22:38:7e:98:c2:68:c6:94:10:d7:68:aa:8a:16:d7:
                    67:9d:84:55:3e:b0:f8:be:c0:c8:32:fd:69:bf:f9:
                    0f:7a:48:d6:84:42:8a:e7:74:35:58:21:ec:39:30:
                    df:4f:80:c9:3c:a1:70:8f:81:03:96:bb:4c:a3:55:
                    20:7e:fc:41:a1:e2:4f:01:2e:9c:f9:b5:c8:9f:90:
                    c5:23:bc:2f:30:ab:17:1c:a7:34:45:29:ee:8d:4a:
                    18:7f:93:b9:1b:b1:80:bb:cf:e8:6e:a6:99:97:ef:
                    ea:d7:45:7d:fd:9b:36:48:24:6f:5f:53:1e:81:5a:
                    71:d6:8a:8b:79:ac:fc:96:32:45:4f:6d:1e:94:ae:
                    3f:55:15:94:10:b7:86:26:90:a4:a8:14:7a:b5:08:
                    17:fd:0b:6b:9d:43:b5:a8:44:fc:09:4b:5a:75:23:
                    2c:e1:b3:7c:d0:2e:d5:7c:ff:91:27:76:ea:57:b3:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F8:7A:0C:4C:FC:93:D4:42:00:FE:5B:6F:E4:47:80:F2:A1:D1:B3
            X509v3 Authority Key Identifier:
                keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a1:c3:99:f2:1a:27:71:38:13:bd:df:73:02:bd:5a:34:b6:
         19:76:fe:5d:48:fa:45:da:17:cc:32:d4:17:47:2f:f4:96:1b:
         13:a7:12:f6:08:26:6b:8b:ba:38:15:ba:5e:fc:e6:18:92:a7:
         b3:13:b1:ac:c4:18:7f:9e:62:67:02:7b:49:f8:bf:9c:19:26:
         4b:58:65:96:37:97:ef:2a:5b:e7:06:73:06:48:fc:4c:d1:97:
         09:b2:71:02:ad:7e:6a:5a:f4:83:06:80:06:c1:cb:6d:fe:f9:
         7d:b6:0f:10:a5:9c:23:50:43:2a:6a:ab:b8:dc:c9:1c:2b:98:
         e2:1c:33:db:74:01:e6:c1:bf:0f:d5:58:ac:a5:eb:98:e3:24:
         6f:32:f0:b2:d3:88:a7:a5:40:98:92:d3:59:14:6e:8a:e2:c1:
         7a:3d:55:5e:c9:85:75:8b:08:a9:3c:33:7d:3f:3f:88:35:5b:
         45:7a:57:57:df:27:4f:f9:f8:61:02:ee:bb:80:e0:34:50:28:
         dc:c7:10:30:88:7a:1c:44:6b:49:39:93:0d:1a:8e:a2:8a:52:
         41:d4:4f:bd:41:b1:72:8c:78:c5:69:81:6f:73:c5:f6:74:08:
         34:51:2d:85:7a:f2:f3:37:88:d3:f6:96:34:d7:00:9f:98:b3:
         42:26:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:03 2026 by rpki-client