Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa
File:                     3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (raw, json)
Hash identifier:          i2oBSFPKpVqeh9es/WJHy0i/TdHRHJL5ycGj+adtwXc=
Subject key identifier:   4B:20:2E:A5:66:ED:AC:DC:18:7F:D1:E0:75:45:96:C8:78:17:EE:24
Certificate issuer:       /CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
Certificate serial:       7AA53FD52CF9336973AF5DCAD584F0E8725196E7
Authority key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa
Signing time:             Sun 03 May 2026 02:46:10 +0000
ROA not before:           Sun 03 May 2026 02:41:10 +0000
ROA not after:            Sun 02 May 2027 02:46:10 +0000
asID:                     149704
IP address blocks:        103.153.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl
                          rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a5:3f:d5:2c:f9:33:69:73:af:5d:ca:d5:84:f0:e8:72:51:96:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
        Validity
            Not Before: May  3 02:41:10 2026 GMT
            Not After : May  2 02:46:10 2027 GMT
        Subject: CN=4B202EA566EDACDC187FD1E0754596C87817EE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:b6:6e:a7:e5:1f:36:60:38:98:4e:3e:a9:
                    06:f8:48:c1:14:18:f6:49:8e:0d:a0:c6:e9:d2:c5:
                    05:ff:9a:e1:f6:7d:46:d8:fa:be:de:1f:d4:a5:0e:
                    25:b5:47:07:7a:dc:d1:f6:c3:a1:7a:26:fc:27:9d:
                    49:6d:29:8c:70:71:bf:19:86:a2:a3:5c:20:48:3a:
                    dc:23:b5:59:ee:93:f8:cd:ed:ff:db:f7:14:1d:78:
                    69:c9:53:0d:e5:02:d6:99:ef:f2:d9:4e:79:91:da:
                    8a:e5:71:16:53:9d:3e:2c:e8:74:46:41:d7:64:7c:
                    60:69:ce:d6:41:0b:82:5b:73:c8:b0:82:9f:cd:41:
                    bd:63:e3:07:7c:fb:2d:5d:94:25:b1:de:d7:34:b1:
                    34:ab:ea:50:59:2d:c1:ce:70:ac:e8:7e:87:e1:07:
                    98:dd:64:3d:77:6b:e2:8c:36:ad:25:16:b8:ae:22:
                    08:61:4a:1c:69:2e:9c:1e:df:69:75:a4:2d:f8:52:
                    f9:6e:f3:50:22:08:c9:f5:ad:61:02:d3:68:ac:81:
                    38:fa:60:9a:cc:bd:cb:77:03:5e:58:e5:2f:17:7c:
                    45:f4:c3:d2:14:d0:f7:97:ed:ea:09:3f:bd:fa:fe:
                    de:ff:e5:b6:9d:1f:ee:85:4e:95:6a:c5:4b:11:e2:
                    14:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:20:2E:A5:66:ED:AC:DC:18:7F:D1:E0:75:45:96:C8:78:17:EE:24
            X509v3 Authority Key Identifier:
                keyid:90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:5c:d8:b5:7e:a7:38:08:27:dd:6f:6d:40:05:b0:d3:15:
         73:fb:c7:a0:38:62:9e:c1:27:81:09:da:11:16:f9:58:e7:8b:
         82:a7:37:1e:70:2b:a0:45:4f:4e:51:7e:c2:d7:69:31:ad:ca:
         fe:cb:20:14:b6:9f:34:84:e0:13:5e:35:76:c4:ec:93:a0:8b:
         30:16:1d:1e:2d:f7:09:4c:42:55:92:da:49:8a:d6:08:8e:7e:
         84:77:6b:0c:cc:20:1e:75:fd:63:6c:7b:b1:e7:88:db:91:7c:
         20:3e:f6:68:2b:95:b9:7c:12:d3:2e:61:14:b5:77:2c:6e:11:
         60:36:4b:cc:5b:44:95:b1:3f:eb:3f:18:d4:c1:55:17:79:a1:
         65:12:39:28:12:4f:f5:c3:45:9e:5d:03:77:14:75:9e:da:52:
         14:72:03:67:10:5e:9b:4f:15:7a:27:90:a1:c3:be:16:82:af:
         35:cd:9e:bf:93:e0:85:ed:16:a9:5c:6b:1d:42:55:f9:e0:3d:
         db:1b:fd:47:97:bb:f7:aa:1d:e1:00:82:b8:0d:48:48:b1:d1:
         c8:50:68:c3:0d:f4:74:45:8e:9d:df:19:ee:86:e8:28:c0:02:
         6e:0c:04:f3:4f:fe:d8:ac:fb:7a:9c:6d:50:16:37:6f:8f:a2:
         63:f0:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:17 2026 by rpki-client