Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa
File:                     3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (raw, json)
Hash identifier:          n2jgLsgpyvuRu9OXUICieAMoUsWBKFqPo1kbmePbqLI=
Subject key identifier:   A2:13:7F:3B:26:C2:DA:5C:4B:5D:90:2C:C6:A5:81:60:C3:AE:E6:74
Certificate issuer:       /CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Certificate serial:       14B8A2D151C04707629BB73B377702A5CE84FF5F
Authority key identifier: DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa
Signing time:             Sun 03 May 2026 02:41:26 +0000
ROA not before:           Sun 03 May 2026 02:36:26 +0000
ROA not after:            Sun 02 May 2027 02:41:26 +0000
asID:                     131737
IP address blocks:        103.15.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
                          rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b8:a2:d1:51:c0:47:07:62:9b:b7:3b:37:77:02:a5:ce:84:ff:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
        Validity
            Not Before: May  3 02:36:26 2026 GMT
            Not After : May  2 02:41:26 2027 GMT
        Subject: CN=A2137F3B26C2DA5C4B5D902CC6A58160C3AEE674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:c1:9f:d4:6d:38:f2:75:b0:ea:64:1e:99:
                    cb:e2:ba:be:bb:1e:2b:3d:6a:fe:92:94:99:15:5e:
                    41:b7:11:10:0b:99:c6:2f:d8:07:9c:ae:e9:04:2c:
                    b5:aa:37:a8:75:b5:64:8a:cb:75:50:47:e2:ae:93:
                    89:2f:90:ae:a2:aa:d7:0b:77:81:8b:56:62:15:fc:
                    0b:28:58:3c:bb:cb:66:89:90:2a:5d:d0:e9:32:26:
                    42:63:f6:d0:14:12:f0:a4:de:d5:73:df:bc:b8:18:
                    ff:b0:ee:2e:95:73:63:38:03:19:2c:2c:55:c7:02:
                    01:64:f1:75:76:ca:13:da:ee:91:2b:a5:c3:84:c6:
                    47:df:a0:a8:6e:a1:64:69:ec:07:6c:64:58:be:24:
                    83:e4:6f:ae:a8:c4:64:b7:7b:b6:c6:45:3c:e4:e3:
                    c3:fa:2b:2b:f5:da:7c:43:f2:ac:d1:e6:c9:ed:50:
                    5a:2c:3e:0d:97:0f:85:9b:73:22:aa:8f:84:ae:1f:
                    dd:13:86:43:69:90:8b:5e:bb:0c:29:10:33:f9:2b:
                    f8:d1:a5:a6:52:7c:98:4f:42:43:bf:69:ca:dc:8b:
                    fe:8e:4a:62:cb:9c:91:81:b5:96:75:a4:58:a6:42:
                    ad:7e:77:8c:42:10:df:45:bf:96:15:6b:02:d1:f4:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:13:7F:3B:26:C2:DA:5C:4B:5D:90:2C:C6:A5:81:60:C3:AE:E6:74
            X509v3 Authority Key Identifier:
                keyid:DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:21:b4:8c:a0:a5:ec:82:42:e8:37:97:f6:ba:29:b1:48:e2:
         3f:27:9b:e4:cd:89:9f:d1:15:4a:da:eb:ad:26:e8:2b:ba:93:
         cd:ae:bb:0a:f1:c6:ac:fe:34:13:e6:7f:bd:3f:e2:fc:fc:56:
         33:77:52:90:6f:8c:35:8c:24:e4:34:b6:29:13:64:38:64:08:
         a5:e1:ea:3b:32:1f:1d:ad:d9:71:6e:19:a2:e9:aa:b1:f7:71:
         7f:3a:af:0d:65:60:29:1a:bc:17:57:a8:86:a3:87:0c:ef:49:
         2d:e6:28:49:1f:2c:e4:23:c7:32:a7:9a:ae:d4:5c:a2:f6:41:
         ec:64:99:72:a2:9f:ae:03:d9:a5:2d:e9:aa:54:4e:d0:e7:e3:
         20:58:9a:74:38:97:78:c0:63:2c:0b:47:6e:44:8d:15:aa:e4:
         05:9c:6e:12:2e:03:ca:99:88:26:94:6f:4c:ea:70:0a:cb:2c:
         cf:9f:03:77:46:52:cb:88:aa:f4:d3:1d:d7:f0:25:4c:76:d9:
         c2:5d:9a:bb:0b:ec:6e:bf:d6:66:41:8b:c2:5e:5f:f8:57:7b:
         1c:57:b5:36:b4:a7:c2:5c:33:10:d9:50:31:e1:79:6d:85:99:
         94:d6:be:33:72:42:03:99:61:28:87:5f:e9:b9:02:40:22:a2:
         fa:a7:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:27:48 2026 by rpki-client