Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          B9uGziJoJ3vGf5NvgTMOSPQWAPSbs6/SbCQ1GHvUQS0=
Subject key identifier:   9F:BB:A8:61:1E:F0:05:F7:82:26:A7:F1:36:9D:38:57:61:19:80:48
Certificate issuer:       /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524
Certificate serial:       45492F35DBC5DC63984875F3B3483C7F15274A15
Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa
Signing time:             Sun 03 May 2026 02:45:01 +0000
ROA not before:           Sun 03 May 2026 02:40:01 +0000
ROA not after:            Sun 02 May 2027 02:45:01 +0000
asID:                     140389
IP address blocks:        103.150.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl
                          rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:49:2f:35:db:c5:dc:63:98:48:75:f3:b3:48:3c:7f:15:27:4a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524
        Validity
            Not Before: May  3 02:40:01 2026 GMT
            Not After : May  2 02:45:01 2027 GMT
        Subject: CN=9FBBA8611EF005F78226A7F1369D385761198048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:6c:da:90:07:5e:59:d3:ad:ed:f1:62:ec:
                    d8:e7:fc:19:08:04:60:9b:25:a5:29:13:ad:2d:63:
                    eb:c9:a7:39:0c:32:b6:36:d0:df:41:9f:45:d7:f8:
                    a5:53:5c:32:74:2c:f8:34:94:8f:a0:90:1f:7b:ad:
                    a3:2c:57:b9:36:5a:a6:50:c3:9c:3b:69:86:ae:04:
                    02:59:c2:b1:25:9d:11:3f:19:5c:26:da:5f:4d:ee:
                    ee:00:d3:aa:27:2e:a5:07:60:45:04:4a:57:07:de:
                    62:f4:02:ff:5c:f9:28:9c:88:70:a2:87:60:af:48:
                    72:43:fa:60:86:4f:ac:4b:d9:65:23:81:26:7c:d1:
                    6c:a2:1e:74:d2:67:37:a1:1a:08:81:bf:d3:d7:f7:
                    d6:33:fe:52:f7:42:4b:3a:1a:dd:30:09:dd:05:0c:
                    24:a6:c0:ae:58:96:83:7e:6e:bb:98:37:82:fc:1f:
                    ab:8d:10:48:6e:a6:2a:c0:88:bc:24:a6:8b:78:17:
                    63:04:fa:0b:4b:c7:dc:3b:6c:75:12:71:96:83:fa:
                    a3:8c:fb:40:14:1f:6a:07:a9:ff:43:5f:57:79:45:
                    07:9c:d2:5e:44:3a:84:04:84:ce:94:f1:4d:da:73:
                    d0:04:5f:d6:81:91:e0:d8:06:98:83:d4:68:9a:81:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BB:A8:61:1E:F0:05:F7:82:26:A7:F1:36:9D:38:57:61:19:80:48
            X509v3 Authority Key Identifier:
                keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:c4:60:b2:5a:8c:e6:ae:81:ea:91:3f:13:de:e9:12:9b:5a:
         28:d7:7f:c0:2f:ff:a5:6e:f7:70:10:80:1a:76:5b:6e:3b:fa:
         cc:91:d2:bd:f2:ab:d0:c6:aa:dd:7b:0a:28:51:43:48:2f:3c:
         72:9c:3f:4e:d7:2d:0c:f2:6a:a2:10:b9:bb:14:df:80:87:67:
         aa:aa:31:4c:ce:b5:af:ca:91:df:02:8a:c5:49:53:34:d9:32:
         4e:19:85:ab:00:ec:48:aa:ab:a8:c6:0e:a1:09:c8:66:bf:90:
         8c:83:7f:79:4c:d9:59:a6:42:32:ba:25:52:08:02:a8:a8:fe:
         ad:2c:a7:e9:6a:16:6b:00:0d:84:aa:9e:c3:2e:7b:df:e5:99:
         b6:a6:a9:ca:db:c5:d8:85:b1:bc:0d:8f:66:57:16:de:5f:76:
         2e:66:fe:56:e8:de:09:b8:39:f7:01:32:94:7b:d2:e7:d1:9e:
         a4:03:b7:6e:e0:5b:fa:a5:7b:72:b4:5f:02:b9:4c:20:c2:e2:
         53:bd:fe:14:9b:38:02:3a:37:fe:96:ea:9b:4b:8c:e4:96:f2:
         d9:1d:8e:6a:5a:28:74:e8:d7:4a:d6:26:70:45:8a:bd:0e:e6:
         35:cc:7d:ba:ad:59:d4:41:bd:60:8d:37:af:ea:87:63:fe:3e:
         b4:f8:cb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:11 2026 by rpki-client