Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa
File:                     3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (raw, json)
Hash identifier:          He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=
Subject key identifier:   8B:13:FA:E4:51:62:F5:B5:04:EF:E9:93:CB:83:ED:A7:9E:3D:27:4D
Certificate issuer:       /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866
Certificate serial:       7097976BF0B118C32775DF725F3AF43FEC601679
Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa
Signing time:             Sun 03 May 2026 02:45:06 +0000
ROA not before:           Sun 03 May 2026 02:40:06 +0000
ROA not after:            Sun 02 May 2027 02:45:06 +0000
asID:                     140401
IP address blocks:        103.150.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl
                          rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:97:97:6b:f0:b1:18:c3:27:75:df:72:5f:3a:f4:3f:ec:60:16:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866
        Validity
            Not Before: May  3 02:40:06 2026 GMT
            Not After : May  2 02:45:06 2027 GMT
        Subject: CN=8B13FAE45162F5B504EFE993CB83EDA79E3D274D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d6:cb:09:49:87:6f:42:7f:aa:42:a2:fd:99:
                    72:1f:b6:b2:fb:ea:ed:fa:21:7c:b3:84:d9:f0:b8:
                    03:d0:6c:06:b7:3a:1b:62:43:aa:d0:a6:22:c2:5f:
                    a1:75:0c:49:29:d7:b8:49:39:c5:78:04:a2:23:91:
                    65:9a:82:5b:94:4d:5b:44:04:24:fb:1c:2f:68:db:
                    26:9f:a8:aa:2a:96:a8:7d:fd:9a:f8:88:8f:40:ad:
                    28:ce:cc:71:a9:8b:77:4e:01:4a:41:0f:fa:86:e1:
                    92:37:60:f9:a0:04:3c:2a:ec:69:62:a6:bd:66:19:
                    c5:f3:af:0d:63:c1:58:31:7d:5a:1a:fc:0d:e7:69:
                    b6:7b:1b:50:ec:51:16:6b:f0:31:2c:31:9c:8b:62:
                    8b:da:b4:ec:05:08:ed:eb:e3:05:f2:f0:c8:d1:e7:
                    13:e9:79:23:8a:11:64:b5:b8:b2:5d:25:36:79:dd:
                    7d:db:8a:bc:75:a6:c6:dc:a9:44:53:e3:1b:fb:39:
                    2b:bd:59:7a:31:d0:d1:6c:f6:94:a5:ef:a8:b8:41:
                    ed:a2:4b:ba:4e:f0:de:ea:d4:d6:c7:26:d6:7a:08:
                    44:64:4f:02:13:5c:3d:ac:75:4b:9a:d7:f0:d6:ac:
                    f1:c0:03:89:8d:20:f3:b8:d3:df:de:77:e8:40:02:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:13:FA:E4:51:62:F5:B5:04:EF:E9:93:CB:83:ED:A7:9E:3D:27:4D
            X509v3 Authority Key Identifier:
                keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:7c:b6:84:bb:ae:b9:91:08:3f:21:3c:e4:28:c0:5c:13:d2:
         1b:70:7e:82:5a:dd:b7:31:51:2f:8c:f3:0b:0b:79:4e:b8:dc:
         e7:cf:7f:b2:a3:22:f0:26:cd:1d:4f:f8:14:51:52:fe:1c:af:
         1d:bf:da:6a:6f:a9:99:b8:81:b3:0f:89:f1:10:fd:34:d9:96:
         cd:35:83:bb:9a:63:34:10:36:aa:bf:85:b4:45:3c:25:b5:54:
         e8:6c:65:47:c0:be:16:f2:78:86:9d:80:61:37:8f:c5:1a:65:
         ff:d5:c9:f4:8b:0d:26:62:ae:cb:3d:cd:41:fa:1f:0d:bf:d7:
         88:bb:4f:31:1e:2b:ec:a1:a5:cd:1c:32:22:90:be:75:df:e7:
         fd:e9:e3:4a:a0:85:20:6a:59:bc:48:b7:7c:88:d9:1c:5b:ee:
         cc:fa:4d:11:fe:ab:ad:df:ef:86:2a:90:72:e7:47:ed:d1:15:
         c4:09:90:31:be:92:9c:b4:70:d1:f3:fc:2d:55:46:dc:9a:7e:
         64:41:c0:74:c8:74:c4:e3:20:de:88:45:46:20:33:44:62:35:
         b9:5c:c1:86:f1:55:8a:f1:fb:24:c9:67:a1:b6:74:25:44:ed:
         2b:22:7b:84:42:7d:68:23:48:c4:28:8e:f5:40:f8:b2:af:b5:
         47:85:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:00 2026 by rpki-client