Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa
File:                     3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (raw, json)
Hash identifier:          PujUY2/VrkQ5U7C51TkJPpWDbUx9tvrvxL32zD/gtc0=
Subject key identifier:   C9:05:21:A7:27:88:50:B7:91:93:A3:23:65:42:4C:7F:D3:AA:C6:83
Certificate issuer:       /CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF
Certificate serial:       725EC2F7562961C9788D7B6CA9F98305C8FD27D4
Authority key identifier: E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa
Signing time:             Sun 03 May 2026 02:29:01 +0000
ROA not before:           Sun 03 May 2026 02:24:01 +0000
ROA not after:            Sun 02 May 2027 02:29:01 +0000
asID:                     150940
IP address blocks:        103.101.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl
                          rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5e:c2:f7:56:29:61:c9:78:8d:7b:6c:a9:f9:83:05:c8:fd:27:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF
        Validity
            Not Before: May  3 02:24:01 2026 GMT
            Not After : May  2 02:29:01 2027 GMT
        Subject: CN=C90521A7278850B79193A32365424C7FD3AAC683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:b3:ea:8f:a6:61:68:97:87:83:a5:98:92:
                    c9:25:2d:2c:35:3f:75:58:12:48:67:49:19:fa:c2:
                    57:c5:96:98:1a:89:91:af:9f:a7:07:26:9e:b6:9e:
                    b1:83:b9:64:3f:53:70:fe:f6:e3:90:13:70:30:70:
                    f0:dc:e5:bd:17:c6:61:51:dd:32:04:ff:d8:80:50:
                    cb:e8:39:dc:6c:9c:4b:67:db:f5:cd:63:e8:94:e2:
                    f1:33:8a:69:31:be:e9:33:b1:69:71:f8:23:51:32:
                    4f:0c:e2:80:ed:6b:7b:64:4c:ca:f5:b1:2a:8c:38:
                    dc:7f:fe:43:c8:0c:fd:a1:9a:a9:6f:0a:4d:b7:ad:
                    b7:65:6b:c7:77:59:e9:08:aa:9c:bb:d8:a8:e1:1d:
                    3c:c0:6d:85:63:ea:74:82:df:ce:b3:f8:69:50:cb:
                    dc:8b:df:27:3e:28:60:1e:d6:17:46:5a:b8:14:e4:
                    56:02:13:d4:5e:b8:a7:db:85:a2:e2:d1:dc:91:57:
                    e6:8a:b4:01:6e:93:a5:45:41:f1:20:5e:5c:d3:e7:
                    b5:09:78:11:d3:70:c4:fb:b5:5f:58:93:e3:c2:e8:
                    f7:88:dc:a8:36:7f:e7:6d:2f:3e:d4:7c:78:08:14:
                    54:09:10:a1:c4:0a:dd:5d:5a:06:c4:b9:72:5e:97:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:05:21:A7:27:88:50:B7:91:93:A3:23:65:42:4C:7F:D3:AA:C6:83
            X509v3 Authority Key Identifier:
                keyid:E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:bd:ba:12:b7:60:53:3b:6f:86:1f:c6:87:2b:af:b9:ab:b2:
         df:0e:16:ca:21:1f:f8:c1:64:2c:43:43:2e:8b:10:d5:2e:64:
         ed:7c:12:e3:91:cb:a0:05:a2:93:d7:50:d4:7f:09:90:a5:b4:
         36:65:27:97:96:3e:5a:8e:a4:7d:c6:2d:b9:d0:89:26:f3:1a:
         f3:09:ec:cf:dc:70:98:24:cb:b6:f5:3c:22:d2:ea:04:58:b6:
         0b:30:3b:db:8e:98:3d:32:59:7a:80:60:76:96:62:c0:fb:2e:
         6b:e1:62:32:5c:05:30:69:97:be:4e:c3:0c:d9:b0:6b:db:62:
         67:20:d8:c5:fc:37:a1:5b:b3:fe:77:2c:e6:9b:3e:a8:64:c4:
         15:2d:9c:2e:74:75:55:c6:2d:0c:87:db:dd:1a:73:c4:bb:eb:
         31:14:8b:8c:29:1e:8c:41:dc:ed:79:63:45:1a:20:47:3f:f7:
         ad:dd:a5:2d:fc:ad:87:88:b8:c7:5e:68:63:4d:cd:08:70:10:
         49:a9:67:cb:57:c1:6d:f2:2a:74:f4:63:68:6e:ef:cb:0e:74:
         7e:21:d2:6d:8d:0a:b2:c1:1d:7d:8b:9d:b1:0d:24:78:e3:2b:
         08:55:8f:c7:a1:f4:28:49:d3:2b:6f:1c:36:4e:e5:86:a1:19:
         65:01:96:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:26 2026 by rpki-client