Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa
File:                     3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (raw, json)
Hash identifier:          fOWfEwCz1sQLruXxV5SZRGMn95LgQ1Kei01ICgLlNgA=
Subject key identifier:   E0:1A:6F:EF:AC:E5:E5:A1:18:E1:75:F6:B8:0A:25:BA:04:CB:FC:30
Certificate issuer:       /CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C
Certificate serial:       69F51EC50D8B9E44067476133A68214D8B482166
Authority key identifier: 15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa
Signing time:             Sun 03 May 2026 02:44:42 +0000
ROA not before:           Sun 03 May 2026 02:39:42 +0000
ROA not after:            Sun 02 May 2027 02:44:42 +0000
asID:                     139449
IP address blocks:        103.145.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl
                          rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f5:1e:c5:0d:8b:9e:44:06:74:76:13:3a:68:21:4d:8b:48:21:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C
        Validity
            Not Before: May  3 02:39:42 2026 GMT
            Not After : May  2 02:44:42 2027 GMT
        Subject: CN=E01A6FEFACE5E5A118E175F6B80A25BA04CBFC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:c8:0a:a5:dd:fd:48:97:3d:75:cb:2c:38:
                    b2:c4:11:b4:fa:66:ec:ec:8c:76:2b:cd:90:4a:3a:
                    3e:c1:6e:17:24:d1:5d:d9:6b:05:3a:ce:bb:31:a1:
                    f8:21:21:70:46:b6:a6:ff:c6:02:49:c4:77:9b:0c:
                    0a:e8:86:09:78:62:9e:01:66:40:78:c3:8d:a3:c3:
                    0a:73:12:db:56:6e:9d:db:bc:22:f2:37:9e:41:06:
                    90:fe:f0:a3:4b:22:b9:5b:15:c4:18:46:31:1a:c5:
                    65:2f:46:fc:58:5b:9c:31:37:72:bb:97:4c:70:ce:
                    66:be:c5:17:1b:aa:7b:2c:ef:b5:25:35:bb:3c:bc:
                    87:0c:b9:83:76:a1:92:8a:6d:79:20:ea:72:f9:ef:
                    e4:a5:19:9c:f7:c2:63:0e:80:80:e2:16:cb:a4:5a:
                    43:24:d4:84:4c:2e:d7:8b:45:85:99:2d:9b:96:12:
                    63:d4:74:4f:96:cf:24:ad:76:f7:bc:c8:42:9c:42:
                    c3:94:18:9d:15:26:20:c0:94:75:b8:3d:93:b0:52:
                    c3:79:eb:16:34:e0:93:5f:48:06:b7:f9:0d:39:aa:
                    5f:2a:9d:bf:c5:3d:28:cc:51:72:37:a3:e1:e3:61:
                    8b:e4:b6:12:46:99:41:04:30:e9:25:12:0d:ad:c3:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1A:6F:EF:AC:E5:E5:A1:18:E1:75:F6:B8:0A:25:BA:04:CB:FC:30
            X509v3 Authority Key Identifier:
                keyid:15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:27:b6:85:cd:b4:0b:ff:a7:4b:bc:db:00:8b:0b:74:ca:10:
         71:64:2d:fa:72:61:a3:e6:87:7e:16:c8:bc:16:63:60:f3:f9:
         86:c5:e2:1a:8f:ba:be:f0:31:59:75:bd:68:93:77:20:bc:1f:
         0c:eb:e0:b7:d7:7a:3f:e8:e1:6e:d9:13:4b:59:a1:9d:5f:74:
         dc:9c:16:be:c4:66:b8:05:27:4e:de:27:e3:75:00:3b:2c:e2:
         d4:06:10:b4:60:b2:27:d7:e5:2c:72:42:ce:fa:73:a7:ca:9a:
         cc:d8:e3:09:6a:58:ee:07:17:e9:6c:e9:b1:23:69:86:f2:90:
         de:1f:f9:1c:62:50:9a:c7:1b:51:a8:eb:7f:49:1a:9d:82:a0:
         71:e8:c5:e4:bd:73:5f:93:41:04:04:94:00:f3:bf:ff:cc:e1:
         f8:1f:68:ec:16:9c:c6:01:2e:7a:5e:78:3b:52:ce:49:e8:39:
         2a:57:3e:a5:78:2c:6e:42:2b:3f:5f:2e:17:a6:84:7c:1f:ca:
         6d:16:3f:cb:ab:e8:51:4a:9c:30:8f:19:de:5d:17:fb:24:f9:
         f2:ab:39:cc:4c:f6:a8:63:bb:8b:84:0b:8b:67:3c:f5:34:94:
         80:96:3f:ab:21:c9:75:c9:ec:58:8d:9c:54:ce:10:b2:8a:c9:
         d4:12:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:59 2026 by rpki-client