Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa
File:                     3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=
Subject key identifier:   7A:5D:DE:1C:65:19:D0:62:F9:6A:EB:32:41:96:9C:E2:69:69:35:D1
Certificate issuer:       /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD
Certificate serial:       4F459D4D4C2184BEDBF2ECA0AA4A76A36C66B121
Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa
Signing time:             Sun 03 May 2026 02:47:24 +0000
ROA not before:           Sun 03 May 2026 02:42:24 +0000
ROA not after:            Sun 02 May 2027 02:47:24 +0000
asID:                     138089
IP address blocks:        103.158.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl
                          rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:45:9d:4d:4c:21:84:be:db:f2:ec:a0:aa:4a:76:a3:6c:66:b1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD
        Validity
            Not Before: May  3 02:42:24 2026 GMT
            Not After : May  2 02:47:24 2027 GMT
        Subject: CN=7A5DDE1C6519D062F96AEB3241969CE2696935D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:f2:c3:1b:a6:56:fc:f6:d9:4f:39:51:ab:
                    b9:4d:cf:2a:f3:ef:16:e4:5d:a6:76:75:69:9b:d7:
                    15:bd:61:73:8b:e5:7a:ca:87:d1:a0:b8:85:1b:75:
                    3e:08:4d:3a:4c:19:bf:ae:d0:f6:06:a2:bf:b0:08:
                    af:43:5d:a0:91:23:5a:c2:90:f6:4f:50:22:50:55:
                    95:63:65:e4:16:16:c3:ef:b6:d2:32:73:f4:65:96:
                    ab:69:e0:72:d1:10:23:59:8b:7e:a4:c6:8e:be:cb:
                    1f:eb:73:53:69:b7:04:fd:da:3b:7c:47:d2:ff:1a:
                    c9:93:d5:51:f0:76:1b:2b:fc:09:cd:0a:ad:a6:6e:
                    d7:83:0f:a3:e8:c2:53:65:bf:40:c3:b4:06:2b:2e:
                    5a:c6:e0:e2:2b:3b:89:a2:82:7d:ca:17:b9:dc:9e:
                    23:1c:de:d6:e7:04:d0:88:75:56:fe:0e:30:e7:fd:
                    14:44:31:be:01:ac:78:72:5e:80:5f:d5:c9:f1:dd:
                    6c:0e:46:d8:c4:69:f1:33:ee:94:1c:2f:13:5c:3b:
                    68:c6:53:8d:2c:e5:37:f6:b0:6c:d9:db:8b:2c:12:
                    f6:ab:e2:4c:9b:e0:52:d4:08:ab:45:95:b1:6b:c8:
                    b9:a8:38:dc:c8:59:6b:65:11:97:75:33:a4:27:0b:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5D:DE:1C:65:19:D0:62:F9:6A:EB:32:41:96:9C:E2:69:69:35:D1
            X509v3 Authority Key Identifier:
                keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:39:53:17:13:a8:5e:d8:97:81:b6:69:c9:bd:af:68:a0:3a:
         b0:25:24:9e:03:ce:ab:30:f5:85:de:9e:15:71:3d:e6:f2:f0:
         c8:23:bf:a2:60:89:ce:c0:21:a0:f6:9a:ed:97:1b:d5:d0:9b:
         c0:29:4b:17:d2:d5:b0:5f:0d:39:d6:6b:b2:fb:14:5a:67:47:
         56:30:dc:8f:b3:6a:71:2a:86:53:eb:74:57:09:45:4e:95:cb:
         46:f2:4b:83:11:fb:99:90:5b:53:d1:73:7c:4f:ae:01:39:55:
         73:62:36:cc:77:fd:19:38:67:9c:12:12:88:ea:7c:c8:3d:2e:
         62:17:1a:89:d7:5b:20:7f:9c:5c:c6:89:c9:f2:ac:42:b3:c3:
         5d:95:d7:ad:be:a4:e1:4c:df:1e:79:48:7b:fb:a7:3a:81:12:
         56:6e:06:fe:a5:99:5f:d9:53:0f:64:07:f3:fd:6f:a6:e8:c6:
         98:4f:45:63:6a:49:7b:8d:46:ef:11:72:ac:b4:69:9c:a4:ac:
         71:26:a0:2c:15:54:fc:65:10:62:13:85:3a:df:dc:bb:5e:62:
         0e:6f:dc:3d:4d:82:93:a7:b8:46:94:f8:23:98:d1:10:4f:06:
         45:98:d5:ed:2a:1c:83:2d:ee:e2:6f:c8:01:2a:ae:c3:86:0a:
         0f:42:a0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:24:15 2026 by rpki-client