Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39352e302f32342d3234203d3e203137353338.roa
File:                     3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (raw, json)
Hash identifier:          zJ5Jgen43BSfgth1+Wx2KQ4rMgZaYS8tSCDudAuawmM=
Subject key identifier:   E2:E8:8F:88:08:F6:2E:42:39:63:A0:B1:56:CC:D8:E3:40:11:6A:B1
Certificate issuer:       /CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC
Certificate serial:       279F7ED92167B3AC7CD5CBFE1798F9E17618A937
Authority key identifier: 43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39352e302f32342d3234203d3e203137353338.roa
Signing time:             Sun 03 May 2026 02:58:14 +0000
ROA not before:           Sun 03 May 2026 02:53:14 +0000
ROA not after:            Sun 02 May 2027 02:58:14 +0000
asID:                     17538
IP address blocks:        103.151.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl
                          rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9f:7e:d9:21:67:b3:ac:7c:d5:cb:fe:17:98:f9:e1:76:18:a9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC
        Validity
            Not Before: May  3 02:53:14 2026 GMT
            Not After : May  2 02:58:14 2027 GMT
        Subject: CN=E2E88F8808F62E423963A0B156CCD8E340116AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:73:04:c1:16:cf:13:db:3a:7d:15:05:5a:
                    08:0d:58:96:7f:f1:98:07:2f:f9:b3:6f:f7:2e:c3:
                    6e:3e:0b:4c:30:4e:6c:08:55:c3:1b:73:ac:55:5a:
                    9b:d7:51:00:54:82:50:28:83:34:bc:95:5a:e6:a0:
                    c8:67:76:49:86:ae:1e:74:c0:50:95:24:f1:8c:0a:
                    e2:6f:28:b9:93:7e:e3:cd:80:13:78:2b:9a:e3:30:
                    36:7c:6f:43:b9:53:f3:15:78:6a:9f:b6:fe:7b:94:
                    13:b7:8d:cd:7d:35:8a:44:4b:67:6d:f0:ee:8b:6d:
                    34:8e:aa:88:b5:cb:41:47:28:55:d9:40:ca:79:3d:
                    aa:40:e4:a1:c2:39:bf:07:ac:b1:37:15:99:82:57:
                    3e:d1:df:4a:8e:e5:8b:64:90:77:cf:11:15:1a:55:
                    eb:83:03:c8:e6:35:4a:5c:ce:f6:bd:75:74:0b:d5:
                    87:33:92:7a:dc:41:9d:7d:be:b3:b8:dc:34:87:89:
                    6f:4d:a6:da:fc:04:ff:98:b7:d1:02:8c:b5:9c:f2:
                    f7:44:72:b6:92:50:8e:d9:77:9d:c1:5b:48:57:5b:
                    f4:77:e8:ac:c2:79:39:c7:8c:b1:11:56:3f:87:c3:
                    aa:92:7e:b1:8e:0c:4c:71:26:4a:22:d9:07:7f:ab:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E8:8F:88:08:F6:2E:42:39:63:A0:B1:56:CC:D8:E3:40:11:6A:B1
            X509v3 Authority Key Identifier:
                keyid:43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39352e302f32342d3234203d3e203137353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:e4:d3:cc:c6:21:ad:cb:be:04:07:76:7e:ff:66:78:40:
         9c:c8:8e:ad:ad:cf:9d:a8:ff:07:4a:6d:3c:60:16:33:e6:d0:
         36:8a:cf:9b:3b:c6:26:62:df:ed:55:22:49:50:67:c0:b9:5d:
         8c:76:e4:bc:da:b0:07:a5:4a:b2:85:90:62:07:de:21:07:05:
         72:f1:59:3a:83:38:c1:81:fa:b2:9d:3f:7b:5f:3b:02:0c:35:
         26:75:a7:6b:23:c8:78:b6:db:3e:dc:f7:15:b9:83:97:a9:27:
         6e:2e:65:6e:fc:9c:94:4c:4f:4e:fa:cd:6b:d9:e2:79:92:d4:
         df:07:b8:50:88:9a:b5:a4:31:73:5f:8e:db:16:8b:18:15:4b:
         b5:27:cf:26:c5:e1:5c:ce:93:0b:33:8b:d5:d3:b7:77:b3:5f:
         a8:b1:da:c8:27:bf:f5:22:fc:3b:51:d9:22:1e:7d:a1:95:b5:
         cc:96:3a:47:c2:95:1e:f9:22:ff:a8:5f:4d:c5:33:53:ad:a0:
         eb:c6:6f:64:8e:82:52:40:fc:3e:69:b7:1a:17:a6:11:a2:59:
         cf:b9:0f:a7:95:d2:30:3a:d7:00:bb:fe:ea:6e:71:16:72:47:
         36:17:5d:7a:5d:54:e9:b5:a4:3f:c9:b7:63:ba:0b:6a:f6:0e:
         8a:c4:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:12 2026 by rpki-client