Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
File:                     3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (raw, json)
Hash identifier:          JtFDDBHLhFW7JsMlxs4g2eR/5c2AZrAbcpY0KNoiazs=
Subject key identifier:   CF:A8:4F:57:4E:51:F4:6C:8C:72:7F:69:BF:FB:12:47:78:D9:F9:9C
Certificate issuer:       /CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D
Certificate serial:       27B0F3B5E7B7C1277CF94F53E02B6BF75DA2ADA0
Authority key identifier: B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
Signing time:             Sun 03 May 2026 02:52:06 +0000
ROA not before:           Sun 03 May 2026 02:47:06 +0000
ROA not after:            Sun 02 May 2027 02:52:06 +0000
asID:                     150951
IP address blocks:        103.196.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl
                          rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b0:f3:b5:e7:b7:c1:27:7c:f9:4f:53:e0:2b:6b:f7:5d:a2:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D
        Validity
            Not Before: May  3 02:47:06 2026 GMT
            Not After : May  2 02:52:06 2027 GMT
        Subject: CN=CFA84F574E51F46C8C727F69BFFB124778D9F99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:98:e4:2c:03:b1:85:e7:30:99:c7:dd:f1:
                    19:3f:66:30:1f:3e:72:8c:5f:2c:f0:a6:58:8d:1c:
                    cf:0f:01:cd:c4:19:74:01:f6:c7:6c:f8:4f:3b:76:
                    b6:ed:b4:c5:e6:ab:98:e3:32:0e:a3:e2:12:b4:15:
                    39:82:08:37:b0:9c:f6:10:c8:16:5a:10:59:7b:47:
                    68:71:0d:36:ac:01:e1:78:d5:8c:90:51:11:71:b9:
                    d1:5c:e6:03:ce:4f:bb:2b:5e:a9:a7:82:8b:df:9d:
                    e1:47:80:b3:a0:d2:8b:df:48:a0:8f:4e:34:b4:c0:
                    d4:84:19:b0:98:db:94:38:68:60:aa:f9:36:50:ba:
                    3e:bf:17:cf:e7:b0:e8:d3:51:34:a6:85:67:cc:7b:
                    1d:43:e2:a0:31:b2:6a:b2:20:09:cf:4b:95:1a:2c:
                    ec:de:5e:e6:e8:32:78:ff:db:9c:9f:db:d2:97:26:
                    9d:0c:2b:63:4b:66:3e:40:84:bc:6e:5e:aa:f5:e4:
                    25:a6:93:1b:3b:7b:07:f3:82:11:91:95:e3:c0:f3:
                    70:36:ae:e5:e0:1a:78:9f:22:4c:a8:bf:cc:63:91:
                    e3:a1:de:94:d7:de:54:bd:97:0e:79:df:b1:ab:40:
                    7b:4b:85:15:3a:12:69:8e:4c:51:3f:7e:71:ce:72:
                    21:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A8:4F:57:4E:51:F4:6C:8C:72:7F:69:BF:FB:12:47:78:D9:F9:9C
            X509v3 Authority Key Identifier:
                keyid:B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:ed:62:51:97:37:73:65:3c:31:6b:96:f9:bd:be:65:95:
         7c:f8:4f:ae:9c:4d:25:b0:4f:21:42:4b:74:8d:7f:37:b9:ed:
         33:e0:e7:83:b9:20:3a:3b:58:e5:fa:cf:fb:7d:07:a5:d6:76:
         c1:55:39:6f:ab:84:76:02:7a:52:f9:76:af:cc:89:67:9b:c0:
         fe:e3:4d:e2:4d:5d:91:d4:e1:6a:ca:6e:69:7f:23:23:d2:00:
         20:89:3f:c8:ff:b7:da:13:db:a9:42:cc:c3:69:f3:a6:5e:9d:
         ed:a9:43:f8:6f:45:af:31:42:13:ed:e8:ff:c1:65:6a:d4:6b:
         3c:59:58:c8:5c:8b:15:0b:ad:8d:cf:06:12:5b:48:df:67:6a:
         f9:24:1b:90:79:cd:1f:97:dd:0a:b7:de:d7:18:f4:50:0d:c1:
         01:3d:5c:96:6c:16:cc:58:9e:19:ef:76:c8:3d:d2:1d:0f:91:
         94:ce:e7:fb:fa:f4:3a:3b:b0:a4:58:e8:33:74:30:b5:30:5c:
         68:45:2e:43:32:39:d6:28:ec:00:c8:62:ef:0c:f1:04:51:71:
         82:ec:41:72:e2:45:47:2f:4a:3a:ac:3a:e9:41:de:67:1a:da:
         79:1b:66:2d:32:2a:ec:78:96:dd:ac:39:5e:53:eb:78:a3:2c:
         83:15:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:30 2026 by rpki-client