Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa
File:                     3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (raw, json)
Hash identifier:          PrnOvop5MQlI3Bsjow/Ci5R1laOpI/zKBTh7ZhHcVKA=
Subject key identifier:   E2:2B:A7:30:6B:2C:58:C8:56:BA:CA:AE:D1:30:7F:DD:71:5E:B8:2C
Certificate issuer:       /CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9
Certificate serial:       0AA50F708FD89D1DF9E6E5F2F3694EE4B5D790E1
Authority key identifier: E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa
Signing time:             Sun 03 May 2026 03:00:58 +0000
ROA not before:           Sun 03 May 2026 02:55:58 +0000
ROA not after:            Sun 02 May 2027 03:00:58 +0000
asID:                     150513
IP address blocks:        103.139.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl
                          rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a5:0f:70:8f:d8:9d:1d:f9:e6:e5:f2:f3:69:4e:e4:b5:d7:90:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9
        Validity
            Not Before: May  3 02:55:58 2026 GMT
            Not After : May  2 03:00:58 2027 GMT
        Subject: CN=E22BA7306B2C58C856BACAAED1307FDD715EB82C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:38:63:d1:83:84:60:0a:09:bb:8e:dc:ec:
                    f1:e5:89:69:cf:97:4f:86:e5:a3:b3:2c:02:5b:47:
                    4a:de:0d:ca:c7:cb:a1:29:20:dc:40:3e:2b:f1:d3:
                    08:06:b1:90:ec:26:f5:4b:3a:a3:f9:a8:17:95:70:
                    34:a5:5f:76:96:08:a0:6c:e4:cb:5b:c5:ee:ba:09:
                    1a:fe:ce:cb:89:80:e4:42:f9:63:c4:ee:fd:3f:9e:
                    e9:7d:81:f3:b5:85:e0:60:ff:e9:0f:fb:83:85:21:
                    a6:02:2e:4f:39:db:d3:ad:cd:69:ed:f7:ff:14:a2:
                    cd:45:25:2a:22:cb:84:d7:26:88:2d:1f:1a:49:20:
                    fd:2c:6f:87:b1:49:c7:2c:c4:76:fa:34:f5:70:32:
                    66:2c:c0:bd:80:7e:70:33:71:ba:db:5a:09:39:f9:
                    20:fc:80:d9:df:fa:21:7b:ee:79:07:d9:68:af:70:
                    fc:d6:ff:af:2b:46:62:3c:e1:79:9b:89:19:3c:b0:
                    eb:bb:68:37:1e:1c:43:8c:d9:80:c9:ff:04:33:c4:
                    19:45:db:f8:9e:e8:10:e2:62:52:8b:56:3b:1a:d6:
                    06:cf:4b:03:39:14:b1:82:95:79:3d:29:c2:a3:d7:
                    e1:47:c7:f2:af:41:3a:17:3d:cc:a5:98:9f:ef:da:
                    15:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2B:A7:30:6B:2C:58:C8:56:BA:CA:AE:D1:30:7F:DD:71:5E:B8:2C
            X509v3 Authority Key Identifier:
                keyid:E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:19:39:9c:8c:b3:87:f8:4b:4d:6c:90:15:26:8f:2b:06:6c:
         f9:f9:85:72:29:c2:7f:a7:95:93:e1:1e:12:3e:3d:2b:22:01:
         74:92:49:66:cc:42:dd:60:2a:4b:ba:0d:4f:68:5e:12:be:a3:
         cd:54:3f:b1:38:b3:36:ca:25:70:a3:dd:1f:7e:00:3d:b6:72:
         cc:05:88:2f:af:14:ca:9f:3d:f4:14:b6:d1:ca:72:94:2e:44:
         dd:48:a0:56:2e:a4:ea:6c:b0:c7:4e:03:d7:19:a1:61:8e:5f:
         3d:ef:d6:66:7a:e5:9c:a3:ea:e0:9c:4f:b6:dc:b8:69:05:a1:
         a4:94:95:e7:55:3f:fa:21:76:8d:15:a1:a6:6d:e1:33:88:33:
         44:de:9e:46:b9:da:1d:26:71:73:94:8d:dd:5d:13:ce:9c:52:
         8b:27:f8:a6:5a:de:c3:13:f3:5e:41:35:ac:4c:5f:fb:53:c2:
         24:79:4d:89:2c:d6:07:48:42:07:3f:76:65:69:17:1f:7c:30:
         ff:12:b8:4b:9e:6b:19:49:1c:81:0c:81:73:78:ab:8c:ef:6b:
         96:49:3b:95:1c:79:a1:42:0d:e9:cd:d5:84:ee:1d:73:08:62:
         62:98:50:2b:ea:27:c0:53:c6:0f:8e:0c:91:6a:f7:16:44:bc:
         dd:11:e6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:20 2026 by rpki-client