Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32342d3234203d3e20313530393635.roa
File:                     3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (raw, json)
Hash identifier:          7FE61Zc3WU63aXcyhhG+2SBAGWSpraBvNcEGom2PNzw=
Subject key identifier:   7D:99:E6:22:32:A7:F3:EE:B8:DA:52:82:22:18:34:6D:93:D1:BD:5E
Certificate issuer:       /CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC
Certificate serial:       5B59ECE857073AA07C4F5302C7BBCD10BC0CAC5C
Authority key identifier: 1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32342d3234203d3e20313530393635.roa
Signing time:             Sun 03 May 2026 02:45:41 +0000
ROA not before:           Sun 03 May 2026 02:40:41 +0000
ROA not after:            Sun 02 May 2027 02:45:41 +0000
asID:                     150965
IP address blocks:        103.122.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl
                          rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:59:ec:e8:57:07:3a:a0:7c:4f:53:02:c7:bb:cd:10:bc:0c:ac:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC
        Validity
            Not Before: May  3 02:40:41 2026 GMT
            Not After : May  2 02:45:41 2027 GMT
        Subject: CN=7D99E62232A7F3EEB8DA52822218346D93D1BD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:c4:f0:61:a9:a2:66:a3:b4:47:6b:95:fa:
                    95:7b:5a:f2:66:9e:d6:68:22:75:b2:0a:9d:8c:97:
                    65:83:d4:bb:88:9d:e9:2a:bf:3f:77:e4:2d:0a:71:
                    f9:55:e7:b5:63:14:e7:3b:57:df:1d:f2:f9:c1:a2:
                    9e:a1:27:b8:36:8e:8e:38:d2:09:96:1e:b4:25:d5:
                    7a:14:03:fe:8d:98:53:4e:c9:90:f1:99:b7:c6:67:
                    27:76:d0:90:f6:d3:0c:8c:84:55:d8:6b:87:c1:7d:
                    2b:82:f8:a1:bb:37:2b:43:cd:c1:25:70:26:38:24:
                    bb:e2:01:cc:f0:5d:63:a6:e0:9a:fc:00:93:78:32:
                    3a:ea:e0:94:2a:2a:9d:aa:73:fd:36:c3:49:cb:fb:
                    4c:27:ab:9f:81:5c:55:b7:7e:25:f8:16:35:c5:42:
                    9a:0e:9f:51:c1:ff:15:ce:95:82:8e:ca:84:12:30:
                    f3:0f:59:12:fa:3e:0c:cb:3f:de:01:4d:d5:0e:6e:
                    35:f3:ab:fa:ad:f1:e0:75:79:bf:f3:62:7d:7e:6b:
                    c0:19:06:da:7d:02:c6:3e:79:a3:75:a2:9f:09:b8:
                    8c:1c:03:3e:08:94:cf:a1:b5:f6:ee:da:d3:86:71:
                    41:c0:c7:a2:4f:fb:b9:93:8f:94:e2:7b:9f:b7:6a:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:99:E6:22:32:A7:F3:EE:B8:DA:52:82:22:18:34:6D:93:D1:BD:5E
            X509v3 Authority Key Identifier:
                keyid:1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32342d3234203d3e20313530393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c9:34:5b:af:84:b9:d1:53:0e:87:45:88:dd:b3:dc:dd:4f:
         d4:f4:d5:fd:a0:84:33:22:45:e0:5e:74:d8:12:06:05:42:ac:
         78:32:27:68:bf:04:58:95:1d:99:f5:a0:42:dc:46:2a:6d:85:
         81:6a:bf:25:e2:8d:6e:15:67:ec:c3:c8:19:bc:4d:72:0d:7e:
         99:e6:a5:a0:8e:c3:9a:8d:f4:34:22:ef:d0:8a:59:2d:1b:bf:
         8b:4e:80:d4:7d:e6:7e:54:72:84:b8:fc:47:06:b0:b3:5b:83:
         c1:2d:4a:86:b5:a9:b7:95:7c:be:56:f8:f0:b6:15:9d:ca:38:
         b1:4e:90:3a:8b:49:0a:11:03:5a:29:f2:07:74:fd:58:08:ac:
         47:fb:16:fd:bb:61:fe:0d:62:5e:d4:73:4c:a3:98:df:92:d5:
         6e:5d:f5:6c:99:80:a3:39:8f:28:11:28:c6:fa:30:b1:50:28:
         e2:f8:2c:71:00:70:aa:79:e0:ac:e0:0f:da:fd:67:36:fd:87:
         15:23:4f:5c:9a:d0:bd:ab:3f:d8:f8:7e:8e:bb:a2:e6:a7:1c:
         7f:e2:c7:82:8c:f4:d8:c8:e9:08:b8:e2:05:47:6e:fa:ca:53:
         26:58:df:cb:ea:33:bb:f4:8d:d2:21:6f:be:ad:93:01:f8:60:
         41:15:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:24 2026 by rpki-client