Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa
File:                     3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (raw, json)
Hash identifier:          s1c5Xhjj1A4MpzLQqmtjwYb0lHUpDy9QxtX6cd6J7tw=
Subject key identifier:   96:49:B4:69:84:CB:E4:23:C4:5A:5D:AF:03:66:A2:6D:82:58:6B:3A
Certificate issuer:       /CN=5ABFE157E467A6732384B658909A9764D5D88AEC
Certificate serial:       550FEBA8A90C9465A86C02482AA891EF8251C920
Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa
Signing time:             Sun 03 May 2026 02:22:03 +0000
ROA not before:           Sun 03 May 2026 02:17:03 +0000
ROA not after:            Sun 02 May 2027 02:22:03 +0000
asID:                     149976
IP address blocks:        103.157.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl
                          rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0f:eb:a8:a9:0c:94:65:a8:6c:02:48:2a:a8:91:ef:82:51:c9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC
        Validity
            Not Before: May  3 02:17:03 2026 GMT
            Not After : May  2 02:22:03 2027 GMT
        Subject: CN=9649B46984CBE423C45A5DAF0366A26D82586B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:62:b8:06:25:bc:50:aa:4b:6e:a2:14:e1:
                    60:2f:6a:59:dd:50:05:6e:f6:bf:3f:f8:4d:c3:e7:
                    02:6f:c7:e4:25:dd:3e:b6:bf:31:f9:65:01:60:80:
                    40:14:c2:b0:1f:78:d1:f9:8f:2d:c3:a3:c8:02:a8:
                    82:42:e8:71:14:85:f2:c9:f4:18:ad:94:e4:3c:1a:
                    78:68:a9:9c:3b:17:4e:c4:54:72:bf:29:1f:fe:ee:
                    f0:8f:5a:59:fb:9d:1c:86:89:c0:e8:2b:4e:89:4d:
                    64:4d:9b:66:7f:d0:a7:a0:17:ad:b9:f4:a2:9b:51:
                    bd:80:2b:d2:fc:2c:c8:a2:b4:ca:38:5d:8d:a6:05:
                    a9:b0:de:57:53:99:4d:e0:d0:e9:3b:84:1e:7b:81:
                    fb:db:5b:55:a7:13:52:69:d4:90:17:d4:11:6e:a3:
                    ba:19:4e:33:69:3b:a9:03:fd:3d:ec:71:e3:6a:be:
                    df:3f:07:11:66:17:32:3c:24:b7:77:41:74:d3:a6:
                    01:64:56:5f:ea:c4:20:64:4a:84:2d:2e:d9:17:fc:
                    bc:5d:5e:ea:5c:96:0b:fa:73:b9:94:dd:29:37:ad:
                    97:83:91:b4:33:48:36:b7:0f:23:74:94:6a:d4:3f:
                    a3:fc:18:42:d2:94:b6:7e:f5:55:1f:e7:79:97:ec:
                    42:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:49:B4:69:84:CB:E4:23:C4:5A:5D:AF:03:66:A2:6D:82:58:6B:3A
            X509v3 Authority Key Identifier:
                keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:f4:a0:1d:fd:e9:1a:14:16:07:bd:56:95:7d:6d:eb:fe:23:
         e6:13:87:ad:9d:e8:8f:53:88:cb:e9:f6:05:f8:27:42:60:55:
         b1:3a:9d:ce:0a:fa:a9:21:bd:b2:2f:c1:51:fc:dd:da:1f:0d:
         55:f2:95:7b:77:9e:58:f7:ee:07:20:c6:0b:8c:fb:19:c3:e8:
         64:51:95:d8:b4:35:7e:99:68:b3:5b:b3:67:c3:8a:36:69:0b:
         fc:f2:62:ef:77:85:00:e2:65:8b:fd:27:94:d0:2f:f4:dc:7c:
         08:98:33:49:e1:ec:c1:d1:95:03:eb:96:e1:db:90:f1:c5:9b:
         70:14:e0:46:a5:3e:aa:96:7e:89:04:55:d4:46:08:1a:3d:9c:
         16:5c:db:8e:bc:df:92:ec:7d:2c:82:d8:5e:a1:ea:9c:b6:08:
         27:64:83:52:a9:01:cf:23:87:15:00:49:e2:b3:2a:51:fd:40:
         d0:19:e5:e3:bc:8a:b8:91:44:33:b6:20:93:fe:9b:85:c8:1a:
         37:34:02:15:ee:52:b8:84:ec:e2:97:8c:50:b4:0d:59:a6:22:
         16:d9:d5:bf:39:eb:ba:f7:09:36:d8:0a:47:e2:0f:3d:ba:a0:
         0f:99:21:67:a4:15:14:62:8e:97:2d:25:16:d6:c2:12:25:1d:
         0a:e7:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:51 2026 by rpki-client