Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa
File:                     3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (raw, json)
Hash identifier:          KbxYJxQkrPD3OtPmy5r9JcBm1KX3NIIgvPWHWn6VjP8=
Subject key identifier:   BF:7E:72:42:DD:0B:EC:90:F9:4F:34:2F:6D:CA:F5:96:01:DF:69:C6
Certificate issuer:       /CN=05F08C4CD8D1918A8E88D2D4AA116633745B8F66
Certificate serial:       3CA9E6D3E158A7350B48C4C210FFCFE2F1EB4600
Authority key identifier: 05:F0:8C:4C:D8:D1:91:8A:8E:88:D2:D4:AA:11:66:33:74:5B:8F:66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa
Signing time:             Sun 03 May 2026 02:32:51 +0000
ROA not before:           Sun 03 May 2026 02:27:51 +0000
ROA not after:            Sun 02 May 2027 02:32:51 +0000
asID:                     141130
IP address blocks:        103.158.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.crl
                          rsync://rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a9:e6:d3:e1:58:a7:35:0b:48:c4:c2:10:ff:cf:e2:f1:eb:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05F08C4CD8D1918A8E88D2D4AA116633745B8F66
        Validity
            Not Before: May  3 02:27:51 2026 GMT
            Not After : May  2 02:32:51 2027 GMT
        Subject: CN=BF7E7242DD0BEC90F94F342F6DCAF59601DF69C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:f6:bf:99:12:52:c4:bf:bc:a1:04:19:8c:
                    16:b3:b8:c0:88:2a:83:5f:6f:44:37:35:eb:28:9b:
                    c9:b0:ea:29:71:d4:04:92:71:e9:22:5d:e1:d9:b7:
                    52:fe:8e:3c:bc:89:88:a8:e2:75:e4:ee:fe:8d:3e:
                    72:fc:45:c4:fe:7c:81:8b:51:1d:a5:f4:43:20:93:
                    c9:42:3c:f8:08:fa:3a:de:bd:1c:16:76:93:ee:e5:
                    19:42:47:3b:a6:7b:c9:c5:65:45:00:9d:94:59:d7:
                    cf:ca:93:fa:5e:fb:b6:47:22:95:15:34:76:7f:b5:
                    83:5f:af:e9:a9:98:66:ad:a6:17:8e:11:88:95:33:
                    93:0f:b1:03:6e:89:ca:e8:fb:24:30:89:51:ce:24:
                    be:3e:26:7b:36:99:92:24:d9:b8:9f:6b:e1:35:e2:
                    b9:03:d9:5d:97:77:b9:8c:38:14:55:f8:14:88:32:
                    9c:c7:ad:69:dd:6f:2a:40:da:9a:b0:27:4c:b7:0a:
                    4f:55:d9:00:61:03:3e:ef:3d:3d:44:db:92:12:08:
                    11:30:b7:56:73:db:d0:bf:93:b3:aa:8a:23:9d:f3:
                    ea:b6:5d:b5:5a:2c:e8:1e:12:ce:84:7a:1a:ec:c0:
                    a6:58:89:b1:ed:e1:d6:60:b9:a5:eb:5a:ee:0b:7d:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7E:72:42:DD:0B:EC:90:F9:4F:34:2F:6D:CA:F5:96:01:DF:69:C6
            X509v3 Authority Key Identifier:
                keyid:05:F0:8C:4C:D8:D1:91:8A:8E:88:D2:D4:AA:11:66:33:74:5B:8F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05F08C4CD8D1918A8E88D2D4AA116633745B8F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:7d:3e:0b:5f:c3:52:3a:c6:b4:9e:9e:f6:26:22:90:c1:
         19:3c:9f:63:ed:81:6b:e5:96:a5:00:5f:89:a9:c2:d7:b2:c5:
         41:f5:75:02:39:0c:ab:dc:bb:4e:95:10:e7:4c:51:f6:df:fd:
         32:6f:aa:4f:00:a5:59:3a:38:d9:ce:84:07:64:53:ff:31:18:
         05:95:c4:ee:26:ac:4d:54:e3:3d:5a:1d:59:52:d8:ba:28:48:
         d3:ab:0f:36:6c:83:b6:d5:3f:12:e2:ea:52:cf:24:ca:c3:88:
         75:10:97:c4:6e:9d:d3:95:1e:c1:76:a4:ab:ec:fe:9b:16:4a:
         5e:8d:c5:c9:d9:fd:6b:07:c9:c2:3e:86:7a:cf:43:9d:05:db:
         5b:d3:d2:c7:d3:4a:23:df:21:53:bf:67:ea:34:81:3f:ca:83:
         f6:cc:1e:7b:9f:7e:6d:56:b7:9e:dd:13:b7:f1:e3:33:88:7a:
         08:28:dc:24:06:2a:dc:d0:93:24:33:8d:70:54:72:5d:77:11:
         87:7b:30:95:e5:da:36:a2:5d:2f:a4:50:2d:21:13:b8:7e:64:
         cc:d7:0b:bb:f7:f4:f9:26:1d:8c:d9:6e:9d:a4:83:c5:50:9e:
         51:e7:f2:b3:47:51:5a:b6:05:42:35:a5:86:07:c0:20:4a:8c:
         36:a3:60:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:09 2026 by rpki-client