Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa
File:                     3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (raw, json)
Hash identifier:          ArRnNfQejR0sI5RjCbfv6zZubamliB/ioJJ0CyHpvz8=
Subject key identifier:   2E:9B:E4:8D:D8:1B:9F:6E:E7:05:7A:3F:0F:8E:88:92:01:E9:EC:5A
Certificate issuer:       /CN=CB1DBC8005A976151FCB40B190D2FB007257926D
Certificate serial:       4AC4871267881167E3D795FC1622085E4EAA2FB3
Authority key identifier: CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa
Signing time:             Sun 03 May 2026 02:32:43 +0000
ROA not before:           Sun 03 May 2026 02:27:43 +0000
ROA not after:            Sun 02 May 2027 02:32:43 +0000
asID:                     140404
IP address blocks:        103.151.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl
                          rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c4:87:12:67:88:11:67:e3:d7:95:fc:16:22:08:5e:4e:aa:2f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB1DBC8005A976151FCB40B190D2FB007257926D
        Validity
            Not Before: May  3 02:27:43 2026 GMT
            Not After : May  2 02:32:43 2027 GMT
        Subject: CN=2E9BE48DD81B9F6EE7057A3F0F8E889201E9EC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b2:95:04:f5:d1:f0:98:a1:44:cb:73:4e:8c:
                    ba:ba:fc:fd:e1:7a:13:ef:a9:bb:df:44:6f:e9:58:
                    6c:5e:df:35:9d:d5:42:15:0f:ad:1c:75:cc:63:46:
                    80:e4:7c:20:0b:df:07:87:cc:52:01:6e:4b:31:21:
                    ea:b1:fc:77:77:00:c0:d5:63:39:d5:71:04:92:a5:
                    69:f8:47:2a:15:9f:a1:c9:f9:c8:c9:07:50:78:7c:
                    1b:52:2a:f0:09:57:14:38:7f:93:0c:b4:61:dc:c3:
                    82:4a:f3:19:ce:b2:21:25:50:2f:10:98:85:ea:24:
                    fa:5c:38:d3:db:6d:7c:b1:40:f7:f8:6c:15:cd:da:
                    a5:bd:e6:3b:9f:3b:10:42:64:ca:33:dc:5b:e1:6e:
                    1b:25:31:3b:31:d0:22:4a:b3:ab:cb:37:b9:da:f0:
                    47:4a:cd:6f:81:50:7b:47:67:25:07:a3:35:d7:ce:
                    e6:6f:f7:ab:1b:5d:9a:ff:89:bb:5b:5b:cd:c1:d9:
                    93:e7:24:ac:96:ce:65:4e:c2:a6:7c:24:3c:32:90:
                    c0:7d:a2:c4:9d:30:ab:a1:df:a9:57:55:49:05:20:
                    46:db:70:b3:0c:99:97:db:8e:a2:6f:e5:53:cd:36:
                    10:6c:48:27:56:12:77:5a:32:a4:4f:1f:b6:2d:40:
                    25:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9B:E4:8D:D8:1B:9F:6E:E7:05:7A:3F:0F:8E:88:92:01:E9:EC:5A
            X509v3 Authority Key Identifier:
                keyid:CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:8a:b1:8a:15:c7:78:2f:d3:02:0a:54:79:9c:12:b8:a2:cf:
         63:f3:fd:8b:58:2e:33:4f:45:e6:a4:2c:9c:26:e7:7a:52:d3:
         7d:ca:68:17:c9:1c:fa:24:6f:10:d4:a6:a6:91:56:b4:9d:83:
         8d:fe:d7:ae:d2:bc:59:ec:e9:30:d9:51:46:95:14:6f:a1:fb:
         60:14:ae:3a:e0:72:6f:ae:88:53:ab:75:18:80:2d:03:c9:dc:
         34:4e:82:a9:5c:69:35:c1:d8:46:07:8b:ec:de:52:4f:9e:21:
         22:1b:59:33:ef:40:42:79:1a:44:e1:44:87:d6:48:26:01:db:
         0f:62:e2:78:b9:2f:c2:71:dd:64:b7:9b:20:38:24:fd:90:ac:
         ef:93:3e:66:37:9d:b8:80:33:fd:ed:d9:dd:d9:13:97:f9:6a:
         f1:54:cb:0c:2b:b7:80:75:73:91:29:1b:d6:29:55:28:3c:33:
         bb:bf:82:69:d1:23:31:cb:51:ae:21:41:aa:87:38:26:1e:46:
         13:d1:c6:66:48:37:68:91:15:dc:84:a0:15:d6:bf:56:c2:39:
         5b:97:34:7b:7d:1f:4b:53:e5:bf:a8:ec:69:a4:9e:5d:00:fc:
         23:d4:03:32:f1:63:02:bb:55:59:09:55:19:d1:c2:cb:2b:30:
         69:21:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:00 2026 by rpki-client