Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa
File:                     3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (raw, json)
Hash identifier:          GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=
Subject key identifier:   C4:E2:72:9A:EC:F7:D7:4D:7A:72:53:03:46:F4:BD:C6:53:A5:44:43
Certificate issuer:       /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866
Certificate serial:       770D966FA50464D87A237F62E2EDE881B9CAB1F5
Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa
Signing time:             Sun 03 May 2026 02:45:06 +0000
ROA not before:           Sun 03 May 2026 02:40:06 +0000
ROA not after:            Sun 02 May 2027 02:45:06 +0000
asID:                     140401
IP address blocks:        103.150.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl
                          rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0d:96:6f:a5:04:64:d8:7a:23:7f:62:e2:ed:e8:81:b9:ca:b1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866
        Validity
            Not Before: May  3 02:40:06 2026 GMT
            Not After : May  2 02:45:06 2027 GMT
        Subject: CN=C4E2729AECF7D74D7A72530346F4BDC653A54443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:62:ac:10:9c:8e:df:3b:25:bd:ba:57:1b:
                    80:46:0b:a4:62:22:51:7c:02:d0:51:73:c7:91:fd:
                    ea:ab:dc:94:37:eb:a8:01:98:41:52:ce:27:94:3f:
                    f2:14:63:9f:01:17:1a:38:7d:a0:28:ce:4e:7c:0a:
                    74:c1:fb:54:cc:2f:48:e2:4b:7e:2e:c5:9c:6a:17:
                    a1:91:5f:d7:3e:01:f9:23:61:c3:20:e1:7a:4f:ef:
                    aa:7f:84:0b:38:dd:1b:39:81:71:ac:0e:ea:c7:42:
                    61:0e:7c:15:29:f2:91:1d:76:15:ba:2f:fa:42:5c:
                    34:0a:58:26:6b:56:8b:d2:a9:9b:4d:36:46:ae:0d:
                    c4:fe:03:d2:70:aa:b6:08:19:bd:76:5f:57:a4:7f:
                    ee:2d:1f:0f:05:b7:79:0a:eb:94:8a:f6:94:ad:3d:
                    31:2f:9f:0c:e2:3d:38:72:3d:35:78:55:57:f0:8e:
                    5b:98:85:bd:6a:fd:9b:90:b1:8a:00:f9:c1:95:c8:
                    33:ee:89:55:cc:66:1c:ff:4b:8f:99:3a:bf:7b:d6:
                    a5:8e:c9:2d:b1:cb:be:e7:6f:8d:62:ee:bf:ca:0e:
                    44:97:f0:42:ae:d4:05:ec:4b:a2:41:eb:db:f4:65:
                    62:d5:61:e9:d2:5a:c2:2b:0e:be:56:4c:2a:4f:77:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E2:72:9A:EC:F7:D7:4D:7A:72:53:03:46:F4:BD:C6:53:A5:44:43
            X509v3 Authority Key Identifier:
                keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e6:8b:ff:43:36:e3:a5:4d:06:e9:93:91:4d:e8:0f:27:41:
         48:eb:06:05:08:5b:80:a1:ce:17:33:6f:7d:59:19:ff:4b:d5:
         7b:36:fd:07:77:93:b3:8c:53:d8:d2:e7:cd:b5:55:10:99:80:
         76:34:05:16:7f:d7:d1:1c:8a:2b:59:ba:5b:73:c7:75:dc:b2:
         fe:62:68:13:b6:45:10:49:36:04:2f:14:fa:f9:96:2d:6a:c2:
         f0:fa:4b:82:5a:7b:68:ed:08:06:f5:1c:02:96:5c:7f:cf:66:
         ef:e1:b6:72:a2:f1:36:3c:46:7c:42:f1:3c:44:04:d4:62:66:
         df:cf:e0:72:89:6c:97:1b:3a:8c:82:79:91:99:ec:6c:4d:08:
         a0:dd:e7:a3:c3:27:c4:12:33:72:b0:b7:8e:9f:72:82:46:e9:
         9f:43:d6:2d:af:8d:28:6d:90:72:8f:12:de:e8:51:55:51:6b:
         f8:47:5d:53:ba:b4:4e:5f:4e:c3:15:5d:b3:b0:7e:af:cb:16:
         bd:d7:9a:9a:27:64:7f:33:4e:e0:10:ca:9e:2c:2b:09:da:ee:
         9c:dc:84:79:ac:3d:c9:b9:1b:df:db:f0:75:ab:f4:9b:05:c9:
         3a:f8:31:d2:5f:f8:78:c3:64:5b:be:a3:a9:f6:18:22:82:0e:
         bc:c4:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:10 2026 by rpki-client