Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa
File:                     3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (raw, json)
Hash identifier:          WFBdDzYNGyGBPxFeYXB5Lb1GK9i9G1iuTrrdeZuMZkY=
Subject key identifier:   46:36:94:31:01:0B:68:CE:13:33:BC:AE:FE:35:7A:DF:B1:44:A1:2C
Certificate issuer:       /CN=5ABFE157E467A6732384B658909A9764D5D88AEC
Certificate serial:       358109C6442D08B44A4025A23CACED4F0BA8AD94
Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa
Signing time:             Sun 03 May 2026 02:22:04 +0000
ROA not before:           Sun 03 May 2026 02:17:04 +0000
ROA not after:            Sun 02 May 2027 02:22:04 +0000
asID:                     149976
IP address blocks:        103.157.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl
                          rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:81:09:c6:44:2d:08:b4:4a:40:25:a2:3c:ac:ed:4f:0b:a8:ad:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC
        Validity
            Not Before: May  3 02:17:04 2026 GMT
            Not After : May  2 02:22:04 2027 GMT
        Subject: CN=46369431010B68CE1333BCAEFE357ADFB144A12C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:f3:07:39:fe:70:ea:98:93:dc:ca:0c:27:
                    1e:87:40:46:98:17:7e:10:e1:3a:f2:fc:ca:e1:d0:
                    7c:53:5a:43:e1:95:09:f8:f2:6b:e2:a3:2a:09:f4:
                    7e:41:39:53:6e:28:8c:dc:8d:2e:12:24:0e:60:be:
                    78:6f:d6:7b:5a:85:ee:39:e2:1d:b7:86:14:bc:d8:
                    dc:06:35:9c:25:75:56:d9:d4:02:6d:b8:18:cc:30:
                    ac:c1:9e:5b:66:4d:42:49:b6:7e:cb:0b:de:ac:19:
                    87:a0:d9:4e:1a:22:c3:13:6a:ac:a2:e0:96:24:4d:
                    78:06:85:3f:71:a8:62:80:35:d2:19:90:c3:20:d1:
                    49:7f:9f:6b:65:17:b9:ea:72:d3:79:3e:56:c8:b8:
                    cf:b0:3f:94:ea:a5:b7:d2:18:99:e0:ee:84:29:a4:
                    92:98:d3:2a:e1:6e:d0:35:45:86:d5:8c:f4:e1:ef:
                    63:fc:b9:30:39:da:1d:6a:77:d0:08:4b:93:12:5f:
                    11:a0:4a:5a:ec:4c:ba:74:4b:74:1a:02:ad:a8:2c:
                    5b:0e:47:3e:16:97:d2:70:6f:ba:af:07:2f:d9:f6:
                    6d:b6:09:c9:68:76:9a:44:73:de:36:f1:3a:fd:67:
                    60:38:9a:fb:7b:b2:64:25:2c:67:7a:81:bf:65:e1:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:36:94:31:01:0B:68:CE:13:33:BC:AE:FE:35:7A:DF:B1:44:A1:2C
            X509v3 Authority Key Identifier:
                keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:49:d3:59:fe:7c:08:8a:7f:2e:5e:16:bb:25:4a:c2:e2:59:
         ce:9d:dd:d4:e3:85:c8:cd:79:1f:0e:9a:22:fd:55:81:06:ed:
         e7:f8:b4:c8:59:b5:01:0b:87:a8:58:b1:5a:84:57:9a:c1:23:
         98:d4:0d:20:aa:df:24:e4:d4:ae:a1:48:86:18:26:0d:90:7f:
         88:30:8f:85:82:ad:da:bc:c9:f5:4b:8f:e8:f9:48:39:6a:6e:
         a8:35:65:e5:01:a9:c8:eb:93:b7:b2:77:28:29:e0:f2:3d:3d:
         9c:f2:01:a8:77:c9:fa:34:8b:09:36:dc:ac:96:51:37:0d:b9:
         35:a0:51:01:76:00:43:40:74:df:4a:f5:d6:11:ac:23:be:43:
         16:af:5d:c4:be:a5:36:37:c4:94:31:05:4e:8c:34:6b:e0:f2:
         6c:6f:3c:98:42:88:fd:5f:ad:50:ca:25:a1:48:62:c6:9a:56:
         d7:6a:d1:5f:f8:55:37:e8:bc:7c:42:91:47:89:87:12:d4:75:
         39:92:bb:c9:7b:ef:4c:1d:b2:d4:10:f7:17:d5:e5:e9:43:92:
         8c:4f:09:59:b4:b1:a9:2f:b1:a0:59:bd:5c:77:8c:d5:5f:f0:
         64:ad:30:ed:ea:73:14:85:65:cd:f6:25:e2:ff:ac:7d:61:40:
         50:0e:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:03 2026 by rpki-client