Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa
File:                     3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (raw, json)
Hash identifier:          Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=
Subject key identifier:   A7:D9:DB:5E:E1:05:60:CC:88:67:81:18:1A:14:CC:82:C7:24:13:3F
Certificate issuer:       /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635
Certificate serial:       158FCBF4A2F18238FB9A37CA9A2E0860BE9F9EE5
Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa
Signing time:             Sun 03 May 2026 02:51:29 +0000
ROA not before:           Sun 03 May 2026 02:46:29 +0000
ROA not after:            Sun 02 May 2027 02:51:29 +0000
asID:                     141132
IP address blocks:        103.158.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl
                          rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8f:cb:f4:a2:f1:82:38:fb:9a:37:ca:9a:2e:08:60:be:9f:9e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635
        Validity
            Not Before: May  3 02:46:29 2026 GMT
            Not After : May  2 02:51:29 2027 GMT
        Subject: CN=A7D9DB5EE10560CC886781181A14CC82C724133F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:cc:72:20:40:f6:1c:b8:76:94:c7:b0:ea:
                    c3:e5:03:f1:5f:ae:df:e5:b2:8d:40:b6:79:e9:5f:
                    d3:0a:fd:55:69:9a:10:24:0f:ad:e6:e6:3b:9e:b4:
                    9f:f4:6b:a5:b6:1a:0c:f8:89:86:45:ad:f8:34:a8:
                    2d:0f:9b:c4:1a:84:5a:11:38:8d:70:eb:91:53:3e:
                    15:22:f0:94:08:ef:70:6a:2c:28:cd:2b:63:29:b3:
                    4f:72:fe:95:51:77:11:f1:40:c0:e9:80:b6:63:6b:
                    d4:52:d6:b1:7e:1f:16:0a:4a:f5:1b:8a:1d:3d:c0:
                    70:c3:88:49:ca:61:1f:1c:07:cf:5e:00:dc:91:c3:
                    96:82:6e:c6:b7:a9:9f:6d:5f:e8:0d:9f:ec:75:01:
                    9d:67:69:51:01:1e:65:2d:c0:9a:3b:fd:95:71:eb:
                    16:19:45:90:a9:27:66:5e:1c:62:b9:a3:3d:5d:36:
                    e9:9d:c2:59:37:97:de:0f:1f:af:0d:78:b6:bc:ae:
                    d1:7a:e9:3d:b8:04:9d:77:45:8a:3f:38:86:a2:90:
                    d9:d2:e4:72:a8:75:a4:7a:d3:02:68:94:8c:2e:46:
                    a2:b5:b5:00:c4:55:c0:3c:0a:b3:d8:95:5a:fc:e4:
                    20:6f:26:58:eb:43:be:ac:ef:d7:6b:bf:31:5c:fb:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D9:DB:5E:E1:05:60:CC:88:67:81:18:1A:14:CC:82:C7:24:13:3F
            X509v3 Authority Key Identifier:
                keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:94:3b:ec:e8:0b:c4:d9:c4:6f:f0:c4:d3:0e:75:b9:c7:f0:
         64:af:28:e7:3a:b7:12:2f:c9:60:98:f3:f7:9c:e6:ee:02:18:
         da:8d:07:c4:bf:c5:67:e4:7b:34:0a:89:b2:34:42:24:d4:eb:
         5d:39:58:2b:80:b1:03:77:ae:d4:93:96:38:a4:44:13:8e:5d:
         61:01:b7:7f:01:c5:4f:b6:c0:45:fd:5c:c5:da:b9:af:67:4b:
         87:6e:cd:89:ce:3d:24:6e:6e:31:83:7b:26:66:75:60:50:b6:
         19:7b:4e:6d:66:f7:b2:20:87:8e:90:92:ec:6f:b0:dd:67:65:
         36:78:16:d9:28:d6:20:2c:bf:c7:72:e2:6d:1d:f3:88:96:ec:
         04:35:36:bf:ab:ef:5f:1d:9a:84:d2:f2:81:20:7a:8b:c3:e7:
         f6:f8:82:aa:c7:82:e6:e6:ab:85:33:3c:1b:69:a9:ee:64:fd:
         d5:90:91:ee:41:d7:c9:1d:42:58:0f:ca:e9:bb:dc:e3:6f:92:
         56:7e:c6:3d:8c:9a:6f:66:91:33:7b:f9:1a:84:0b:36:c6:6a:
         e3:28:7d:7c:45:e4:6d:e6:fe:eb:f0:30:84:19:50:27:42:b3:
         51:da:88:9f:5d:af:c2:a3:ed:2f:02:c0:2c:56:6d:1e:c1:58:
         bd:f7:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:52:10 2026 by rpki-client