Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa
File:                     3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (raw, json)
Hash identifier:          vTXEw2nFS8mBOVTo8lu49rzJxOq1c9YHy/bnjV3FQcc=
Subject key identifier:   EF:14:B2:FE:AB:E4:79:71:09:78:06:77:A8:5A:6E:12:9F:F2:00:AB
Certificate issuer:       /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02
Certificate serial:       6DAAB011458B29136F5E3B01DDE228BB7EDD0F7A
Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa
Signing time:             Sun 03 May 2026 02:25:52 +0000
ROA not before:           Sun 03 May 2026 02:20:52 +0000
ROA not after:            Sun 02 May 2027 02:25:52 +0000
asID:                     140462
IP address blocks:        103.153.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl
                          rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:aa:b0:11:45:8b:29:13:6f:5e:3b:01:dd:e2:28:bb:7e:dd:0f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02
        Validity
            Not Before: May  3 02:20:52 2026 GMT
            Not After : May  2 02:25:52 2027 GMT
        Subject: CN=EF14B2FEABE4797109780677A85A6E129FF200AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:d3:42:29:7a:b4:4b:f7:2e:84:27:12:d4:
                    83:c5:0e:43:11:5a:32:b0:df:3e:bf:d4:e8:26:e2:
                    f4:a5:53:15:7b:b1:2c:6a:04:6e:ca:1f:9f:9a:bb:
                    71:2c:d5:d4:bc:ab:e5:3c:ee:b1:62:76:13:5f:f2:
                    99:e6:c4:0d:b0:23:38:0d:ab:86:b1:d6:07:b5:54:
                    2b:16:94:e4:23:85:ae:b5:fb:a2:b7:16:b1:de:5e:
                    9a:79:fc:12:12:ba:40:ed:0e:bc:30:6e:d9:d0:06:
                    cd:5f:44:f9:fd:4c:47:ce:73:78:ee:c4:a2:2b:f8:
                    49:78:5f:34:2f:14:5c:50:ba:9c:ec:93:94:0d:d5:
                    69:64:4d:db:11:8a:8c:38:f7:7e:a3:85:15:a9:d5:
                    11:6b:77:86:89:17:c0:5f:84:51:f5:f7:ba:41:c3:
                    01:54:93:f7:a1:72:f8:bc:bd:b9:de:a2:de:db:7a:
                    89:c9:76:8b:f5:95:26:cc:f2:a7:aa:29:e3:d8:c4:
                    00:7c:df:6b:5a:23:5a:56:e4:9e:28:b4:c1:aa:3f:
                    7d:21:61:7a:ae:35:60:3b:0a:ee:77:9a:f4:7e:43:
                    18:3b:16:5c:14:9f:26:d8:ac:d6:fa:df:8e:74:22:
                    39:71:62:96:5f:40:dd:c0:08:d0:fa:bd:47:30:1f:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:14:B2:FE:AB:E4:79:71:09:78:06:77:A8:5A:6E:12:9F:F2:00:AB
            X509v3 Authority Key Identifier:
                keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:9a:8b:58:76:92:f8:a2:76:9c:5b:7a:69:c5:32:dc:b2:
         62:02:c4:d8:88:4c:01:f5:e3:20:b8:54:18:b0:b1:35:d3:07:
         a1:e6:9c:32:21:df:b7:28:ad:3c:dd:f9:45:95:ab:9d:18:44:
         e8:c6:11:63:70:a7:a7:d8:10:f8:16:22:d8:51:f0:27:53:1b:
         6c:c2:11:77:a4:e0:76:b8:d6:78:95:b7:c0:d4:92:ed:d7:65:
         90:ee:ff:1c:1b:8e:59:a6:49:00:59:4a:83:65:4d:62:06:3b:
         49:66:8c:f0:4c:f1:af:e0:65:11:d0:ca:50:e4:fd:a3:16:bf:
         d6:08:96:75:a9:85:0e:bb:03:e8:b8:4a:ee:cd:7f:f7:9b:40:
         d7:7a:e9:89:0e:4f:12:b8:b6:58:ee:cd:0d:fe:02:bc:90:d9:
         d3:15:a6:06:76:66:46:69:14:e0:dc:60:89:9f:1a:1f:58:a7:
         56:7d:50:50:7a:d0:cd:7a:08:8f:56:e8:45:12:49:0c:15:5e:
         26:66:8e:95:43:f5:d8:e0:3b:4b:9f:42:4f:bd:42:a6:90:c4:
         10:ba:73:e0:25:89:ab:08:1d:3c:db:02:da:7a:b8:eb:a8:a7:
         b1:bf:02:a5:59:d7:b4:de:fd:06:5a:47:9b:5b:1b:d8:78:5f:
         7d:c6:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:40 2026 by rpki-client