Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa
File:                     3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (raw, json)
Hash identifier:          2HdM5SxPhqs0v66pqKtYjA5YE63M2BNBs+YFxsyjHnE=
Subject key identifier:   EC:14:87:F7:41:68:6E:8E:8E:15:36:FB:74:7F:08:1E:AF:77:31:C3
Certificate issuer:       /CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3
Certificate serial:       53EA38BF77A96AD7BF5429D0A583C9BACFCBBF37
Authority key identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa
Signing time:             Sun 03 May 2026 02:40:26 +0000
ROA not before:           Sun 03 May 2026 02:35:26 +0000
ROA not after:            Sun 02 May 2027 02:40:26 +0000
asID:                     140460
IP address blocks:        103.153.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl
                          rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ea:38:bf:77:a9:6a:d7:bf:54:29:d0:a5:83:c9:ba:cf:cb:bf:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3
        Validity
            Not Before: May  3 02:35:26 2026 GMT
            Not After : May  2 02:40:26 2027 GMT
        Subject: CN=EC1487F741686E8E8E1536FB747F081EAF7731C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:25:a2:69:e0:19:9c:d9:3b:0f:de:55:e1:
                    e9:8c:9b:d5:2d:69:8d:25:0f:77:61:e2:9b:64:a5:
                    6f:7c:cc:cc:bd:c1:33:1b:85:b5:02:8e:73:70:15:
                    3d:f1:a0:74:83:f4:65:8c:b3:79:d9:47:d5:0f:6d:
                    83:b4:11:6b:ee:f9:eb:ab:a7:94:44:1d:99:5c:4a:
                    85:b6:ce:f5:62:66:12:bf:be:16:15:5e:0f:78:76:
                    31:6a:0c:90:23:f4:3c:f0:a3:99:9e:8e:a9:dd:3f:
                    cb:a4:00:9e:bc:d6:47:79:3e:06:95:2c:bc:ce:a1:
                    c9:b3:3a:b7:21:c4:60:81:3d:48:f0:b7:26:d7:01:
                    2e:a0:70:00:f9:ff:17:38:34:34:99:db:02:eb:d3:
                    03:12:2a:c2:4d:78:79:c2:ac:7d:a3:57:e3:97:40:
                    ad:86:f7:45:cb:7a:1d:c5:3c:e2:a1:9e:c3:8c:cd:
                    1c:75:9b:4c:7f:cc:73:27:69:21:e5:49:7b:ab:88:
                    fa:ca:cf:a9:3e:bb:23:e7:ca:07:c5:4e:b3:52:97:
                    86:a8:69:f6:1a:c1:11:c7:8f:ea:f1:0c:c3:03:b7:
                    e6:33:ff:b1:76:3d:9e:c0:95:65:8e:1f:4f:22:f1:
                    50:da:b5:15:03:8d:9c:8f:75:6c:24:19:67:11:64:
                    04:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:14:87:F7:41:68:6E:8E:8E:15:36:FB:74:7F:08:1E:AF:77:31:C3
            X509v3 Authority Key Identifier:
                keyid:B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:11:4d:b9:d3:86:d5:9a:5f:8e:da:f7:51:41:5e:a8:1a:0b:
         1e:e3:27:81:55:ee:77:39:86:ba:29:5b:46:8f:5f:dd:11:3f:
         80:74:5a:8e:7e:97:51:88:85:1f:0d:0d:d5:a0:f2:c3:f7:73:
         3f:cf:55:5e:2f:81:a4:25:70:ee:82:16:68:ff:1c:61:aa:4f:
         4f:f5:47:bb:31:2d:09:52:e2:e8:94:0f:00:42:55:51:e7:4c:
         59:79:5e:53:c1:47:55:0a:3a:b7:f6:fd:62:18:d2:c1:1f:5d:
         7f:a5:82:9b:e0:0c:86:8e:73:5e:5f:76:f5:63:83:d6:68:47:
         63:80:31:06:77:68:0a:f2:59:3a:7a:26:0e:e0:ee:e1:11:69:
         e3:c0:3e:cc:07:32:60:16:87:1a:d2:e7:21:6b:5a:ec:e4:3d:
         f1:1b:fc:91:2e:51:ed:11:be:d4:34:38:ed:5a:87:46:a2:76:
         8a:39:12:e8:5b:7d:f1:ac:95:e7:26:76:32:8b:da:74:97:d2:
         68:34:45:2e:bc:e9:03:31:fb:6d:88:63:88:04:ce:ff:67:7d:
         df:4e:fa:59:74:00:fa:68:d6:b0:04:2b:77:f0:c1:d1:d8:7e:
         5c:69:4a:d2:c4:3b:b6:35:08:aa:f0:53:52:44:f6:01:e0:ff:
         50:d7:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:32 2026 by rpki-client