Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa
File:                     3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (raw, json)
Hash identifier:          +Kb0QkuG6f/u6BTqbTg841fMbaQ1r4RI338rMHPGvvc=
Subject key identifier:   C6:8D:02:2C:15:23:3C:D9:02:0E:21:FF:A5:C6:F9:C1:C3:8F:75:1D
Certificate issuer:       /CN=BCB15A9816D96CD6D5CD78E524B075E4A91EDC58
Certificate serial:       6AA1396ED863567DF9B82CD229E91D8457722489
Authority key identifier: BC:B1:5A:98:16:D9:6C:D6:D5:CD:78:E5:24:B0:75:E4:A9:1E:DC:58
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa
Signing time:             Sun 03 May 2026 02:30:19 +0000
ROA not before:           Sun 03 May 2026 02:25:19 +0000
ROA not after:            Sun 02 May 2027 02:30:19 +0000
asID:                     140398
IP address blocks:        103.150.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl
                          rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a1:39:6e:d8:63:56:7d:f9:b8:2c:d2:29:e9:1d:84:57:72:24:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB15A9816D96CD6D5CD78E524B075E4A91EDC58
        Validity
            Not Before: May  3 02:25:19 2026 GMT
            Not After : May  2 02:30:19 2027 GMT
        Subject: CN=C68D022C15233CD9020E21FFA5C6F9C1C38F751D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:e6:d8:05:92:e0:55:65:90:d5:16:15:ff:
                    32:d9:7d:c5:ec:6b:a5:dd:b2:e7:21:72:06:66:64:
                    68:ef:07:b7:f2:f7:0c:c6:3a:81:77:48:1f:01:78:
                    23:0b:92:9c:6e:a5:1a:0a:22:d1:d6:55:14:c1:e5:
                    42:cc:ef:00:b2:eb:b1:e2:18:ad:9a:9b:92:ed:67:
                    ac:40:cf:ee:7b:cf:d5:c6:9a:f9:76:35:8e:43:7c:
                    82:ea:15:98:96:78:da:e6:fd:c2:65:3d:c3:8a:5a:
                    a4:99:f0:dd:df:3c:df:47:b9:86:3a:27:2f:4c:25:
                    f6:05:2d:22:d1:8f:1a:98:ef:82:4a:08:0f:e0:60:
                    a9:d4:b1:c7:e8:e4:62:4c:28:9b:81:af:36:3b:bb:
                    8b:ef:bd:36:4b:62:9e:53:a5:dd:cd:c7:2f:66:75:
                    1d:df:75:48:d8:82:d6:28:83:e1:d2:ee:f0:91:10:
                    f5:de:f2:66:bd:70:6e:b8:b5:7d:b8:5e:81:c9:37:
                    58:31:4b:17:24:8f:1d:2b:80:6e:91:65:f4:96:6e:
                    31:dc:d2:30:66:3a:33:0c:9a:1f:7d:29:f5:d1:6d:
                    06:f5:82:b1:4c:d6:61:f9:e9:f2:e7:98:bf:82:a6:
                    d5:28:fd:1f:a1:03:75:76:df:00:4f:89:c0:ab:90:
                    0f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8D:02:2C:15:23:3C:D9:02:0E:21:FF:A5:C6:F9:C1:C3:8F:75:1D
            X509v3 Authority Key Identifier:
                keyid:BC:B1:5A:98:16:D9:6C:D6:D5:CD:78:E5:24:B0:75:E4:A9:1E:DC:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:4f:10:bd:ef:db:4f:22:7f:0e:bc:52:cd:0d:2b:36:d3:35:
         2d:bd:2a:56:1f:47:6a:ba:01:57:75:dd:21:3d:8f:7d:44:15:
         7c:fc:20:79:a8:61:8e:67:fa:37:ed:a3:ed:7d:0e:56:ca:b4:
         b3:84:7d:3e:a5:43:39:53:ab:5d:21:b6:fa:73:cc:a0:cd:66:
         fd:5b:2b:02:9e:92:26:6c:eb:b7:1b:05:9e:00:f4:d8:45:e9:
         95:95:40:9f:bb:bd:88:39:c5:35:0c:d3:d7:23:bf:fe:db:dd:
         e2:8c:dc:47:6d:2d:75:4b:25:6f:5a:d2:ae:8b:fe:e3:31:3e:
         78:45:51:ef:67:87:50:a3:d6:f0:f5:3d:97:13:07:75:5d:f4:
         ef:78:00:86:8e:13:a2:3f:c6:c6:09:38:b3:32:26:90:da:d3:
         a3:70:4d:b1:ed:7b:d7:b3:d7:d9:66:14:30:6e:70:81:db:34:
         e5:e3:c1:bb:08:b8:b1:46:da:70:fe:93:e8:04:71:d3:a3:9a:
         07:1c:5b:c4:79:95:b8:6b:30:37:4a:25:38:8e:0e:72:ea:f0:
         e9:c5:79:55:1f:0a:9c:36:e4:3f:ff:9d:8d:09:28:cc:1a:90:
         35:4c:d6:1f:0a:5f:2e:1a:8e:ae:fd:12:d7:35:7a:5c:9c:5f:
         c5:84:ef:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:08 2026 by rpki-client