Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa
File:                     3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (raw, json)
Hash identifier:          QFaIaeqQHBfggokFY9Zd55eDaonsJzUZS5+52YBP+KY=
Subject key identifier:   31:32:3B:C1:DB:B9:2F:5E:A4:6F:9B:8D:61:6C:95:9D:E6:E4:07:F4
Certificate issuer:       /CN=1029DD535EA34FFB57B387F3086D6C55F6685227
Certificate serial:       254E8CB2B195DBA7558F3AFEA69AC57975ED2635
Authority key identifier: 10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa
Signing time:             Sun 03 May 2026 02:42:42 +0000
ROA not before:           Sun 03 May 2026 02:37:42 +0000
ROA not after:            Sun 02 May 2027 02:42:42 +0000
asID:                     141057
IP address blocks:        103.155.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl
                          rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4e:8c:b2:b1:95:db:a7:55:8f:3a:fe:a6:9a:c5:79:75:ed:26:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1029DD535EA34FFB57B387F3086D6C55F6685227
        Validity
            Not Before: May  3 02:37:42 2026 GMT
            Not After : May  2 02:42:42 2027 GMT
        Subject: CN=31323BC1DBB92F5EA46F9B8D616C959DE6E407F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:0a:a8:4d:74:72:d8:9a:3f:ac:9d:ef:17:
                    f7:51:b7:2c:50:e3:e3:4a:f6:9a:61:b0:d4:b8:38:
                    66:08:f8:15:10:58:6e:47:85:65:43:8e:aa:8b:cf:
                    c3:16:a8:1d:bb:fe:61:c3:58:c1:96:76:9d:bb:f2:
                    b9:de:bf:28:cb:59:92:9e:9e:75:da:c7:be:b5:09:
                    1a:11:0c:e3:3e:39:f4:e9:71:b6:e8:c4:a3:fa:37:
                    51:d7:3a:50:0b:c5:96:8a:74:a8:82:cf:f1:3d:07:
                    2e:17:97:37:ef:4e:f9:b0:79:ef:0a:ae:94:d4:a7:
                    09:c8:81:44:fb:60:fc:ba:d4:d4:b3:d3:75:97:61:
                    57:c4:e8:a1:b5:4d:15:f1:8e:df:98:ee:e6:6d:00:
                    bf:c1:1d:d6:47:a6:3c:51:69:cb:83:6b:8c:fd:e9:
                    44:78:8a:ac:8f:27:83:00:4f:86:ab:6d:3f:18:d7:
                    65:a6:b7:26:e6:fc:69:ca:19:e6:18:f2:c9:0b:ee:
                    58:d8:71:ef:82:7d:da:4d:4e:81:53:54:0e:a0:c0:
                    1b:14:72:69:1e:96:11:a5:df:00:35:7d:70:9b:2f:
                    4b:03:e8:6c:a7:d6:29:ec:51:48:3a:5a:0b:d0:43:
                    94:23:77:29:c6:1b:bc:3e:ab:5c:d1:51:87:62:64:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:32:3B:C1:DB:B9:2F:5E:A4:6F:9B:8D:61:6C:95:9D:E6:E4:07:F4
            X509v3 Authority Key Identifier:
                keyid:10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:5a:0c:61:f3:45:a3:6b:30:6b:9e:00:57:24:be:95:17:fd:
         e7:c8:7b:36:86:ad:2a:55:eb:c2:25:4c:87:94:97:26:44:22:
         4b:8a:cf:92:1f:8e:59:f2:c7:d2:7c:4b:c3:b4:07:0d:00:bf:
         2f:fc:eb:c0:cf:f1:8d:83:de:1b:0f:d2:e1:cc:92:9b:28:25:
         cb:46:0a:41:18:7c:5b:15:57:82:1b:9e:60:1d:b5:cb:b4:a7:
         cf:35:a0:e3:72:1f:b6:48:e3:2e:b8:ee:ce:1a:32:e7:ab:90:
         70:23:de:df:55:91:09:00:78:8a:05:43:42:a4:1c:cf:eb:7a:
         51:15:9e:86:5a:7a:1c:fd:15:d7:8e:90:3c:64:75:8f:3e:2d:
         d8:55:8f:94:24:c7:3f:72:8f:53:83:d9:0c:8b:44:1b:62:96:
         2c:2e:fa:84:1d:d6:2a:e7:50:88:b8:a4:a2:39:43:eb:a2:85:
         c2:cd:c9:df:25:e0:b5:a4:82:bb:09:06:53:5a:61:0f:9f:26:
         ce:75:6b:0e:63:8e:4c:f7:43:95:50:dd:1c:f9:4f:bb:91:d9:
         23:14:88:5b:e2:8a:f6:b1:39:da:7c:04:2f:eb:17:4c:a7:1e:
         86:2d:05:1e:96:d5:1a:3a:11:d4:25:2c:8c:19:4c:06:20:c7:
         b4:e3:72:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:24:11 2026 by rpki-client