Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa
File:                     3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (raw, json)
Hash identifier:          NkKjSf90ElcdssnMG0/v4I3k9N6YTsqapPAgxV9RP+E=
Subject key identifier:   A5:75:7F:F9:F5:A0:04:5C:71:08:C3:DF:D4:59:3D:A1:D5:84:27:18
Certificate issuer:       /CN=CA270F1FD051B3CD65DB930972A99335C45615EC
Certificate serial:       13DCA58546B19C9CC12C5EAAAC3BD4008FBBF224
Authority key identifier: CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa
Signing time:             Sun 03 May 2026 02:59:38 +0000
ROA not before:           Sun 03 May 2026 02:54:38 +0000
ROA not after:            Sun 02 May 2027 02:59:38 +0000
asID:                     141656
IP address blocks:        103.162.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl
                          rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:dc:a5:85:46:b1:9c:9c:c1:2c:5e:aa:ac:3b:d4:00:8f:bb:f2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA270F1FD051B3CD65DB930972A99335C45615EC
        Validity
            Not Before: May  3 02:54:38 2026 GMT
            Not After : May  2 02:59:38 2027 GMT
        Subject: CN=A5757FF9F5A0045C7108C3DFD4593DA1D5842718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:b2:d8:75:cf:ed:e8:68:d4:a4:d8:61:7f:
                    46:f6:8d:d7:81:b5:ee:80:49:1a:3b:bd:24:02:c3:
                    f2:d3:37:33:75:71:1b:f7:53:ca:35:a5:41:75:fb:
                    b0:9f:c2:06:30:1b:11:b5:0e:56:4f:e9:bb:c4:d6:
                    98:9f:e9:02:f0:b7:da:aa:1d:e3:f5:e0:9b:dd:9c:
                    d6:4e:5b:e6:56:26:a1:9d:31:82:74:3e:dd:5e:d3:
                    5a:a9:d2:fc:7d:b8:f9:4c:21:83:ff:e6:81:cb:3e:
                    25:7e:ff:92:15:c6:33:70:de:43:04:87:50:31:c3:
                    c8:50:88:81:5f:e0:14:61:e1:81:0e:e2:ba:a6:cc:
                    5f:e9:35:27:70:4b:53:b6:fc:80:8f:10:e3:ce:bb:
                    38:37:cc:ea:b5:2a:a3:34:1c:ba:86:58:6d:86:cd:
                    bd:8d:4d:fb:15:22:68:e9:79:ac:79:ce:a6:97:1b:
                    6c:33:28:0d:8d:57:0f:c2:27:fe:09:5e:de:bf:da:
                    e7:57:5b:58:1a:b2:1f:9b:a1:83:cf:b6:d3:b1:16:
                    d4:0e:61:fb:f2:07:df:9c:e3:27:ab:19:cb:14:16:
                    31:37:03:d3:cd:9e:f1:a5:40:ff:9b:52:81:36:98:
                    5a:d1:2d:9d:78:7e:ad:f5:9d:cc:c0:cb:f9:5c:47:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:75:7F:F9:F5:A0:04:5C:71:08:C3:DF:D4:59:3D:A1:D5:84:27:18
            X509v3 Authority Key Identifier:
                keyid:CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d8:b6:cb:fd:4d:c7:76:df:3a:28:a2:b6:63:b2:c9:02:06:
         2b:51:57:ea:98:b4:90:3a:cf:45:f5:8a:4e:22:1b:c1:30:f1:
         7b:28:51:de:cf:b7:20:c4:fe:13:36:94:19:a8:4b:c5:20:f4:
         97:eb:a1:a2:00:34:65:ab:73:04:3b:d1:b2:69:cd:67:b7:37:
         4a:84:3b:31:d6:f1:f5:53:4e:b6:a7:b0:cb:8f:1e:f2:af:3b:
         b9:08:03:96:ec:ac:62:33:c0:bb:da:fd:77:e4:95:6d:d4:98:
         c8:45:f2:4f:44:01:9b:6b:16:e3:76:15:95:2d:7e:75:54:b8:
         67:44:31:cc:43:1e:52:7d:63:1c:5f:67:db:9f:bb:41:f7:40:
         c1:46:00:bf:8c:91:7f:d7:1a:2e:ce:f2:b2:85:95:aa:0e:da:
         63:ee:94:d6:af:59:e7:d3:be:82:c0:2b:c8:41:67:80:8a:ef:
         08:1a:45:d1:8b:46:59:c5:18:fb:a0:e8:f5:6c:e9:4e:89:a4:
         b0:0b:a3:ad:11:f1:ed:b2:f3:21:67:7a:89:93:f1:40:cf:7e:
         04:b8:66:41:d6:c6:13:00:d3:c6:a1:ca:ae:9b:de:b1:a0:b9:
         ee:dd:2c:f3:55:68:9a:01:d3:dd:44:f1:0d:8c:05:62:c7:8a:
         f5:6a:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:41 2026 by rpki-client