Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa
File:                     3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (raw, json)
Hash identifier:          fvMMfrS6mYlNF9rFiUBs/HRENLIoPVlg2GbOLNt+atE=
Subject key identifier:   84:A5:FF:A6:AC:4D:0D:E1:72:00:02:B2:02:11:57:EB:7F:C8:F0:65
Certificate issuer:       /CN=330092B238160780852731102A871D6304465F70
Certificate serial:       062680DA6EB9ED461BFCEF8DB872212CD38FD119
Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa
Signing time:             Sun 03 May 2026 02:28:25 +0000
ROA not before:           Sun 03 May 2026 02:23:25 +0000
ROA not after:            Sun 02 May 2027 02:28:25 +0000
asID:                     141056
IP address blocks:        103.155.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl
                          rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:80:da:6e:b9:ed:46:1b:fc:ef:8d:b8:72:21:2c:d3:8f:d1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330092B238160780852731102A871D6304465F70
        Validity
            Not Before: May  3 02:23:25 2026 GMT
            Not After : May  2 02:28:25 2027 GMT
        Subject: CN=84A5FFA6AC4D0DE1720002B2021157EB7FC8F065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:d3:df:5b:2c:2e:25:88:23:7d:07:9c:c4:
                    0f:90:e4:0a:0d:e9:15:d9:b7:87:46:20:2f:23:40:
                    5f:32:7e:40:f9:c0:94:0c:69:fb:03:28:36:11:8b:
                    99:e8:3e:cf:11:1f:17:fa:b4:4c:27:5c:09:eb:8d:
                    22:cb:3e:d7:61:c4:03:bd:1b:a6:8b:3f:14:5e:67:
                    36:0d:fc:b2:09:4c:eb:62:fa:f8:95:7a:b5:07:86:
                    ec:7c:f8:bb:57:47:f2:83:a7:a7:e5:c7:f9:cd:76:
                    6a:dc:98:16:c7:e2:a5:67:c3:2f:b1:fd:cc:6c:63:
                    c2:9f:c3:4b:96:84:9e:eb:5e:c2:59:c1:3f:e7:d4:
                    a6:17:03:30:3d:e7:48:24:50:4b:90:ec:2a:fd:6a:
                    e6:3f:24:f1:c1:48:ee:e6:dd:17:d7:8f:47:c7:a2:
                    40:68:4b:3c:72:05:df:45:69:49:f9:f7:a7:f5:10:
                    4b:13:6a:bc:b5:64:c5:46:19:49:d2:98:ef:ea:56:
                    d5:2e:85:3b:57:9b:7f:a4:e6:76:ea:7a:cb:19:f4:
                    3b:7b:dd:c8:1c:a6:df:1f:e4:5e:0d:04:32:12:8f:
                    58:7f:68:d6:11:e2:ea:cf:ce:b0:c3:17:32:b9:76:
                    39:3e:77:ed:05:6e:4a:31:1c:0d:9c:d8:3f:0d:07:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A5:FF:A6:AC:4D:0D:E1:72:00:02:B2:02:11:57:EB:7F:C8:F0:65
            X509v3 Authority Key Identifier:
                keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:8b:47:8c:53:43:1f:f8:e5:f3:70:71:00:79:f8:15:46:7d:
         5a:9d:0e:d2:d4:3d:6b:64:fb:8d:8b:41:a9:82:69:c5:37:fd:
         64:13:4e:ae:0f:bf:46:60:71:95:03:5b:6b:6f:4c:b7:5a:f8:
         b4:2e:d1:0e:35:35:32:ad:56:cc:09:62:eb:8a:b6:63:d6:13:
         26:c5:07:90:ca:28:40:40:88:ca:e0:04:2c:b9:f4:c9:f3:75:
         40:46:87:a9:a3:0a:19:9f:72:63:05:01:90:e5:a8:a8:12:71:
         d8:31:36:a6:24:7e:df:a6:ad:5a:d0:09:15:d8:cd:8c:b7:f5:
         59:fe:25:b3:86:89:5b:79:11:a5:79:88:94:38:8e:d7:f5:08:
         7f:a3:31:5e:16:1b:00:7e:89:78:30:3f:7b:09:81:62:d4:e7:
         d7:e1:91:87:23:50:71:2d:36:62:83:ff:e5:ae:4d:3a:b9:f0:
         45:39:b6:31:bd:16:dc:8e:36:18:5b:5e:44:ab:6b:4b:9e:38:
         d1:2f:cd:4c:82:36:9a:d5:7d:2f:5e:24:c7:21:3e:f1:7d:b9:
         bd:29:4f:c1:58:47:f7:7f:9d:ee:6b:92:fb:2b:9d:e7:83:c3:
         b8:85:80:72:74:22:f5:c8:3b:b9:22:3a:66:39:43:d8:8b:57:
         42:8e:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:44 2026 by rpki-client