Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa
File:                     3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (raw, json)
Hash identifier:          chSnFe2TA+OmeDv7yM6MlQKXcupUNd+M99kXzF+BQEw=
Subject key identifier:   EA:4D:EC:3B:69:84:B7:C4:C9:54:11:F5:2E:69:C0:F6:30:DB:0A:0B
Certificate issuer:       /CN=C797413CFB24F6454A9F7473DF020BB107134EE7
Certificate serial:       54B137C20060D1CC86CE26AEA9B74F994D41CDF8
Authority key identifier: C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa
Signing time:             Sun 03 May 2026 02:25:48 +0000
ROA not before:           Sun 03 May 2026 02:20:48 +0000
ROA not after:            Sun 02 May 2027 02:25:48 +0000
asID:                     141083
IP address blocks:        103.156.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl
                          rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b1:37:c2:00:60:d1:cc:86:ce:26:ae:a9:b7:4f:99:4d:41:cd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C797413CFB24F6454A9F7473DF020BB107134EE7
        Validity
            Not Before: May  3 02:20:48 2026 GMT
            Not After : May  2 02:25:48 2027 GMT
        Subject: CN=EA4DEC3B6984B7C4C95411F52E69C0F630DB0A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:50:c7:53:ec:29:e0:3c:0f:cc:18:29:19:
                    1d:e8:5c:00:c9:0e:13:c8:3b:0e:1c:a6:5e:83:1a:
                    d6:9e:51:38:78:52:7f:af:7c:99:16:d9:94:c6:32:
                    ac:3c:a0:0f:24:14:48:65:b0:cc:2e:04:5f:39:b4:
                    c5:d4:e0:9b:82:88:f3:9b:fc:87:e3:a2:38:55:84:
                    21:a8:e4:9b:3f:70:5f:17:2d:bc:06:58:24:5a:17:
                    e2:67:5a:37:e2:bc:6c:ab:db:e9:50:f2:e8:51:ab:
                    8e:57:c7:a3:c3:10:50:ba:fb:bf:a8:b8:e5:95:1a:
                    cf:ee:42:1e:df:4a:a4:8e:9c:64:31:88:a2:84:5d:
                    8b:d3:00:d0:8b:bb:d4:1d:38:8c:9e:8f:4a:e8:b1:
                    9e:5a:cb:74:21:2b:6e:cc:86:57:1e:1f:23:75:92:
                    24:53:e9:72:b9:0a:be:29:6e:93:bd:50:03:8d:17:
                    aa:2d:55:7e:2f:4d:11:4b:24:2d:8e:b9:52:c3:de:
                    22:9c:d2:34:49:d9:a1:dc:f1:12:f4:49:de:25:75:
                    c0:7c:5c:af:2d:5b:f2:e1:17:7a:0e:ca:49:d3:35:
                    c3:a2:04:b1:ee:94:dc:40:60:95:3c:02:04:14:c3:
                    67:14:1a:32:63:a3:49:a0:e9:d4:47:aa:3c:7f:3c:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4D:EC:3B:69:84:B7:C4:C9:54:11:F5:2E:69:C0:F6:30:DB:0A:0B
            X509v3 Authority Key Identifier:
                keyid:C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:3e:6d:17:fb:12:31:ba:a9:56:99:8f:45:04:57:dd:fb:18:
         9d:84:56:fb:d7:6f:67:4e:0c:a0:db:9a:85:5f:8a:30:ed:dd:
         5b:ef:39:23:09:38:a7:2a:d0:02:9d:5a:46:fb:4d:cb:93:2e:
         3d:f0:a0:e1:e0:d0:25:71:8a:2d:14:8c:d8:9d:95:e1:7b:6f:
         7a:bf:37:89:dd:f7:bc:03:06:f1:3d:80:56:71:26:e1:e3:1e:
         64:43:ab:47:17:be:bc:da:68:a3:6f:0b:f2:43:51:21:76:1a:
         26:c3:77:7d:f5:f1:48:25:2e:ed:09:fe:3c:98:c5:7a:51:40:
         8e:ad:87:3b:6d:3b:16:76:c5:92:71:ee:d9:87:a8:dd:a0:bb:
         5f:91:0a:5c:12:1a:f0:e2:ef:ec:77:0d:ea:1c:d4:b8:8a:fe:
         0d:88:40:c6:5a:84:fa:2e:72:6b:3b:67:31:a6:a8:27:7e:e4:
         48:1b:9f:c9:ee:36:79:02:6f:c7:a0:00:9f:b0:02:40:9c:58:
         ed:be:a5:d9:1c:8f:e8:d9:68:1e:76:4a:25:75:5d:98:b2:26:
         5e:ff:8a:5b:b6:f6:7e:43:ae:24:27:6e:25:8e:58:65:5b:27:
         b6:c7:8b:50:3e:01:fc:9d:73:64:33:a7:4e:de:7b:50:2e:7e:
         bd:12:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:48 2026 by rpki-client