Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa
File:                     3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (raw, json)
Hash identifier:          pYHFYFUzoJNAsC6Cp8pDGU8Mnw4SxVjzZR48Pyb+I2A=
Subject key identifier:   59:C6:8F:5A:25:D3:FE:4C:62:1A:A3:54:13:83:FF:02:68:70:71:BE
Certificate issuer:       /CN=CB1DBC8005A976151FCB40B190D2FB007257926D
Certificate serial:       64AE8DEB69E54B8ADE8452E187DBECB6409DB38B
Authority key identifier: CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa
Signing time:             Sun 03 May 2026 02:32:44 +0000
ROA not before:           Sun 03 May 2026 02:27:44 +0000
ROA not after:            Sun 02 May 2027 02:32:44 +0000
asID:                     140404
IP address blocks:        103.151.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl
                          rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ae:8d:eb:69:e5:4b:8a:de:84:52:e1:87:db:ec:b6:40:9d:b3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB1DBC8005A976151FCB40B190D2FB007257926D
        Validity
            Not Before: May  3 02:27:44 2026 GMT
            Not After : May  2 02:32:44 2027 GMT
        Subject: CN=59C68F5A25D3FE4C621AA3541383FF02687071BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:49:47:20:ed:4b:d2:dd:19:cd:a7:1a:52:
                    88:b6:a0:86:cf:97:18:17:03:3b:c5:08:d9:f4:bd:
                    f5:df:57:c6:25:9c:2c:32:8d:fb:e2:32:73:ac:41:
                    a0:e3:fe:63:af:f3:4c:a5:34:ef:f1:d9:c8:95:d9:
                    39:c8:ea:4a:9f:56:df:02:0c:de:a9:ca:b0:2d:cf:
                    33:d0:46:60:9f:cc:48:91:52:99:cd:6e:5f:69:7e:
                    7d:ec:01:88:21:09:b5:ba:9c:28:e2:16:72:aa:8b:
                    8f:59:84:5b:68:17:e7:4a:87:ec:a7:17:00:9e:15:
                    2a:b9:68:e9:1c:f0:c1:a6:1a:ca:8f:9e:b6:31:4d:
                    6e:9f:86:77:7c:df:92:f4:2b:88:61:08:ae:50:9a:
                    ca:57:6b:9a:b7:55:c4:78:7a:39:75:0c:e1:7c:e1:
                    8b:63:1c:c0:3c:43:35:57:e4:3b:6d:1d:15:9d:7e:
                    f2:fb:e1:d0:3d:1a:0c:35:ef:f9:12:f0:f3:45:0a:
                    6b:03:57:ea:7d:67:0a:00:2f:a1:60:8c:82:bb:dd:
                    49:67:dc:db:97:f7:44:46:1b:b0:30:e2:27:f5:ac:
                    57:06:e5:04:cd:77:01:d3:95:b7:4f:37:19:82:1e:
                    c0:65:e2:df:0b:88:3e:bf:aa:ce:3c:42:fb:7b:a4:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C6:8F:5A:25:D3:FE:4C:62:1A:A3:54:13:83:FF:02:68:70:71:BE
            X509v3 Authority Key Identifier:
                keyid:CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:f7:46:55:eb:0d:c2:77:b1:5c:37:05:a6:99:8a:64:cc:
         dd:b9:c0:cc:c8:22:41:12:5e:b8:17:d5:3e:b9:a4:64:f0:be:
         17:e9:f5:ac:90:00:24:1c:7d:9a:36:49:0d:a6:18:c7:86:18:
         ad:b1:98:5f:32:cf:5b:8c:10:06:34:4c:50:66:7e:e0:86:77:
         00:ce:41:b4:05:7d:0e:48:4e:74:c8:f3:93:1c:7c:83:fc:fd:
         cf:5b:23:53:83:fb:40:98:c4:0e:5e:e1:e9:0e:a9:44:81:df:
         f4:d4:88:e7:7a:78:bb:78:4f:64:45:3d:33:e8:c0:de:1d:be:
         30:9e:40:46:f2:81:47:f6:9d:77:5b:d1:ac:e8:fe:ee:bc:93:
         00:b6:d3:79:bc:18:9f:98:43:28:74:da:5a:e4:3f:4b:b6:80:
         0d:6f:4c:b7:27:99:b0:55:4a:2e:59:13:1a:06:12:8e:ad:08:
         53:d5:37:e3:12:96:7a:92:34:54:98:86:b8:ff:0f:3b:19:ed:
         9b:be:06:95:7a:15:6c:5e:e0:30:cc:4d:b7:79:d0:fb:5e:52:
         c4:0a:d6:9c:d6:49:cf:61:42:14:aa:1b:cf:5b:b9:09:dc:3f:
         63:b6:16:43:28:48:e6:03:0e:6e:0a:3b:ec:ef:1e:e8:bf:94:
         13:e6:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:57 2026 by rpki-client