Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa
File:                     3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (raw, json)
Hash identifier:          9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=
Subject key identifier:   13:02:7F:9E:C2:C8:0F:20:AA:31:D8:F9:4D:70:96:C8:CD:44:6C:66
Certificate issuer:       /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866
Certificate serial:       6B5C089119DCD52ECD6D688963CB9666E8E0F698
Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa
Signing time:             Sun 03 May 2026 02:45:07 +0000
ROA not before:           Sun 03 May 2026 02:40:07 +0000
ROA not after:            Sun 02 May 2027 02:45:07 +0000
asID:                     140401
IP address blocks:        103.150.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl
                          rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5c:08:91:19:dc:d5:2e:cd:6d:68:89:63:cb:96:66:e8:e0:f6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866
        Validity
            Not Before: May  3 02:40:07 2026 GMT
            Not After : May  2 02:45:07 2027 GMT
        Subject: CN=13027F9EC2C80F20AA31D8F94D7096C8CD446C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:39:a0:45:6c:45:1b:c5:b2:0f:b3:66:e7:19:
                    02:9e:32:29:04:2c:f4:d9:45:08:59:34:40:fd:a8:
                    ac:96:f4:e3:4a:a9:54:3f:54:da:33:31:31:7d:89:
                    44:cd:37:cb:37:10:9f:9a:d3:54:43:7d:e5:d2:ee:
                    bf:ff:c5:5e:58:30:86:39:7f:53:2f:23:e8:33:3d:
                    27:cf:ec:ff:fa:09:1d:84:30:a7:0b:83:94:c9:f2:
                    ba:f6:84:d3:79:31:67:20:8e:66:cd:a9:15:dc:84:
                    45:90:19:7a:57:5b:6b:26:e5:5d:fb:71:8d:c5:3f:
                    5a:e0:9f:50:64:02:25:75:0b:ba:7e:4a:71:7b:52:
                    7b:b9:c8:0b:67:9b:0c:69:f8:71:cb:68:6d:1d:e9:
                    d4:86:40:98:20:3e:66:da:9b:ae:e4:d3:df:20:b7:
                    03:c2:b4:ff:3d:5f:13:44:4f:e7:12:30:dd:6c:a7:
                    7b:ee:30:ff:99:8b:ed:6f:71:36:5b:f9:e2:f1:44:
                    77:2e:4b:d0:c6:91:61:18:34:2a:97:de:04:31:dc:
                    bb:b8:c0:da:cf:86:ed:63:f1:ea:bc:05:28:9b:95:
                    0a:51:ed:97:23:a5:61:2b:e2:af:80:37:4e:7e:dc:
                    70:7e:57:13:7f:a4:8d:88:6f:61:92:b4:fa:23:ab:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:02:7F:9E:C2:C8:0F:20:AA:31:D8:F9:4D:70:96:C8:CD:44:6C:66
            X509v3 Authority Key Identifier:
                keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:ac:58:b1:29:91:a6:0e:4a:59:2c:0d:12:c9:41:fc:1c:af:
         f5:9b:a2:55:ff:f1:0b:f0:03:63:84:1a:21:97:4d:fb:96:ff:
         52:34:3b:2c:db:85:b8:04:31:ba:48:f1:5d:23:fa:a8:8a:25:
         a1:ba:67:b6:26:1a:ec:7e:1f:b6:86:52:79:be:51:d5:6f:74:
         2c:c1:ce:82:5e:a3:1f:ea:9f:e4:cf:ca:3f:11:83:b9:b7:e4:
         79:36:4e:da:e9:04:f8:4f:bd:57:94:d6:36:8f:b9:c5:26:1e:
         d4:93:0d:6b:95:dc:04:97:61:bb:90:92:d4:f2:ed:96:9e:f0:
         7d:2f:17:c7:98:f0:b8:3e:ac:05:93:3b:10:9e:b3:38:06:3c:
         93:8e:98:38:42:ad:50:cb:df:b5:b3:c8:63:b7:f2:0f:d8:55:
         00:1d:e6:cb:8a:c3:1d:2e:03:7d:8b:93:aa:87:c9:d3:13:01:
         b5:98:27:3d:1c:f6:34:6d:b4:51:1e:ca:d0:78:0a:34:4e:6e:
         0f:22:c6:55:ee:46:da:dc:a3:0d:02:d1:39:30:a5:df:47:89:
         b2:25:6d:50:ab:13:89:83:56:58:6f:16:50:60:9e:92:88:e3:
         41:b4:32:6f:3d:18:22:82:68:7e:57:ed:3d:c5:17:e1:95:b5:
         fa:18:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:09 2026 by rpki-client