Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa
File:                     3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (raw, json)
Hash identifier:          YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=
Subject key identifier:   21:CB:21:85:C7:DA:41:79:7F:5A:FB:CE:15:07:8B:65:10:10:0C:AF
Certificate issuer:       /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635
Certificate serial:       70FED700246D7AE3C9450C938CFE723C3C667B76
Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa
Signing time:             Sun 03 May 2026 02:51:30 +0000
ROA not before:           Sun 03 May 2026 02:46:30 +0000
ROA not after:            Sun 02 May 2027 02:51:30 +0000
asID:                     141132
IP address blocks:        103.158.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl
                          rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fe:d7:00:24:6d:7a:e3:c9:45:0c:93:8c:fe:72:3c:3c:66:7b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635
        Validity
            Not Before: May  3 02:46:30 2026 GMT
            Not After : May  2 02:51:30 2027 GMT
        Subject: CN=21CB2185C7DA41797F5AFBCE15078B6510100CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:ed:2d:b8:0a:7d:f6:cb:98:f9:d3:7d:15:
                    3e:79:e2:81:a1:5a:a9:5b:7c:ff:78:2b:c4:29:20:
                    d6:e3:62:cd:9e:8d:e3:e8:c8:cd:0e:5f:7a:2a:fa:
                    41:9c:63:07:9b:f7:26:c7:75:37:35:c4:32:0c:2b:
                    f0:ac:5b:75:e1:77:ab:dc:51:52:8f:83:d8:5b:53:
                    b8:72:6e:bf:83:5f:52:80:a9:1a:ad:e3:12:5e:6b:
                    68:c2:1d:77:2b:14:52:28:f1:df:5c:79:23:f8:34:
                    45:d9:17:2c:f8:b2:7d:15:8a:4f:76:c0:d8:0e:10:
                    03:a3:df:a6:00:0f:78:df:2e:70:b6:4d:07:86:27:
                    d4:ff:18:93:87:72:8c:50:04:4a:29:61:f7:eb:d7:
                    06:ce:f8:e2:e2:1e:a1:5e:5c:ab:bb:0f:84:0a:cf:
                    79:34:ec:dd:7f:4e:90:e6:21:66:76:7a:d3:ed:bf:
                    b1:62:9e:f2:9e:30:a0:d8:d5:4f:9a:bf:95:f3:5b:
                    58:74:4e:d7:50:20:93:7f:1c:bb:65:a7:c5:d0:6a:
                    88:87:42:de:d3:3c:0f:bd:a0:d1:d1:51:83:da:ab:
                    a8:8f:17:a3:3e:81:36:76:37:e2:ef:99:4b:ec:19:
                    8e:22:18:d5:23:60:54:96:6c:57:c3:47:ba:fa:8f:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:21:85:C7:DA:41:79:7F:5A:FB:CE:15:07:8B:65:10:10:0C:AF
            X509v3 Authority Key Identifier:
                keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:9f:f1:0e:aa:5f:0f:f3:3f:8d:44:d2:70:5a:91:9c:b7:
         5b:a8:27:08:47:31:20:7d:42:0d:3b:78:19:d5:d5:d5:e0:c9:
         f4:52:3b:c5:f0:59:73:40:89:cd:36:05:00:b0:87:a2:8b:05:
         1e:27:e2:eb:f5:25:ec:af:d0:b9:53:ef:f6:d6:79:67:6e:1a:
         21:9c:82:db:cc:09:47:95:5d:4b:6f:3b:a8:1b:3f:f3:ed:35:
         97:40:32:a2:69:e1:dc:20:ed:34:e9:36:99:20:dc:bc:47:eb:
         a2:f0:fa:24:c2:55:09:6e:96:67:a0:a1:ca:c2:ab:fc:a0:81:
         2e:b2:c7:37:b2:83:63:98:2b:12:1f:cc:51:6b:6e:2e:80:f3:
         96:45:75:1f:78:04:9e:74:08:7d:3d:05:4b:96:bb:8a:06:01:
         a0:b0:cd:97:c8:f3:5f:47:6d:02:96:ad:3e:73:d0:0e:bb:6b:
         cc:32:d3:4d:6c:63:41:84:aa:9b:e9:ca:e4:49:62:18:02:89:
         96:9d:9c:ac:05:60:54:8a:fc:8b:f5:2a:7d:b9:ac:f7:a9:f0:
         6b:4e:06:ad:ae:10:82:f0:3e:a0:96:cc:07:e3:c0:4b:55:47:
         3e:04:d1:a9:98:ea:8f:25:9a:a6:9b:95:5c:6c:e5:54:e0:1c:
         ae:51:3b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:44 2026 by rpki-client