Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa
File:                     3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (raw, json)
Hash identifier:          1t9yzNFOj0CAbODcXUQcoM9eYOKr+Gim4y4R0hZm1ws=
Subject key identifier:   B6:D2:34:CD:82:C3:CD:31:C2:F1:56:00:13:DE:AD:66:87:D0:48:BC
Certificate issuer:       /CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849
Certificate serial:       0E150D541CCA7319F91DB9EA2899A52CAFC7708D
Authority key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa
Signing time:             Sun 03 May 2026 02:49:22 +0000
ROA not before:           Sun 03 May 2026 02:44:22 +0000
ROA not after:            Sun 02 May 2027 02:49:22 +0000
asID:                     141660
IP address blocks:        103.162.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl
                          rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:15:0d:54:1c:ca:73:19:f9:1d:b9:ea:28:99:a5:2c:af:c7:70:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849
        Validity
            Not Before: May  3 02:44:22 2026 GMT
            Not After : May  2 02:49:22 2027 GMT
        Subject: CN=B6D234CD82C3CD31C2F1560013DEAD6687D048BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:43:a0:cd:d1:d0:3b:7e:50:f2:cf:ef:eb:
                    9b:ac:80:a5:3e:8d:1b:57:fd:28:45:b7:3a:8a:f6:
                    cb:a3:9f:63:f9:07:5b:bb:84:75:4a:1b:f8:df:52:
                    25:e6:c8:36:f3:08:7f:2b:dc:df:1d:ed:72:a9:fd:
                    0b:fb:16:6c:c0:dd:91:50:c6:a3:ab:d1:b4:d5:a8:
                    c3:b3:7a:7f:af:6c:4e:1b:45:b8:dd:eb:17:26:00:
                    ae:89:ca:ad:6f:a1:3c:fe:09:c5:11:ed:3e:14:05:
                    a8:8d:aa:76:b6:6e:4f:96:54:d4:ef:6f:db:c0:ec:
                    d8:b0:15:ef:a4:4e:6a:97:b3:4a:27:25:52:ae:df:
                    82:1c:62:f3:10:45:e9:ff:a7:95:82:30:10:ba:30:
                    a3:ff:45:b0:2e:6c:0f:77:4d:b7:ad:c7:71:16:da:
                    f1:f4:8a:91:fa:90:57:91:92:a7:41:1e:04:f8:a0:
                    a3:f4:8d:98:6f:2f:11:76:75:a7:8d:bb:27:54:5d:
                    0b:c1:c2:9f:4b:7d:b2:c9:24:3f:9e:7e:b1:a2:f2:
                    d1:f0:c2:5d:bc:50:63:70:6c:ee:0d:51:97:5f:c7:
                    9f:2a:a7:56:44:24:12:b7:1b:57:9a:ce:73:23:ca:
                    92:97:78:b5:dd:b5:ec:75:41:dc:65:f3:7c:74:7e:
                    25:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D2:34:CD:82:C3:CD:31:C2:F1:56:00:13:DE:AD:66:87:D0:48:BC
            X509v3 Authority Key Identifier:
                keyid:53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:59:20:af:7d:44:0b:16:bf:14:45:c3:3b:3b:16:73:e8:
         ee:f0:80:93:d2:6d:ee:c2:c3:db:ed:06:f3:98:5c:0e:36:7f:
         8c:0a:ac:9e:4b:62:c6:19:b3:ab:65:b4:b4:6d:ed:44:9b:fa:
         ab:e2:fc:6f:9b:a8:bb:41:39:8a:30:56:bf:1f:76:8b:1e:dc:
         43:34:bf:04:b7:d9:b6:db:6d:40:e6:ab:23:73:f3:6d:a8:64:
         90:d1:66:46:94:8c:17:44:a1:88:43:d4:36:9a:90:fe:61:b8:
         c9:89:58:b4:f8:77:88:91:61:cf:8e:c9:5a:3b:ad:4f:38:8b:
         a9:d1:87:44:34:c9:34:72:22:12:92:0e:f3:c8:98:fd:97:df:
         bd:3e:01:35:1f:af:f5:ff:60:09:6b:d9:82:15:ef:88:78:12:
         31:2c:fc:87:23:da:bb:e0:56:28:ac:9f:7e:26:63:2f:23:11:
         10:bf:2d:6b:b6:8a:12:e0:b8:33:48:59:11:48:25:d3:65:53:
         ef:1a:58:c4:32:f9:87:6b:63:3f:1d:a5:04:7e:80:cd:2c:ef:
         66:c7:76:95:a7:b4:a4:ae:0d:1d:2e:ae:98:22:6c:96:b4:e3:
         3f:58:35:26:9f:48:f9:3f:93:e3:6d:9a:78:e5:86:87:6a:70:
         f8:29:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:01 2026 by rpki-client