Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa
File:                     3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa (raw, json)
Hash identifier:          j3C8JrVEuDWGDYTHo2d7ibn1ngIRwCbcuK1vWB38mfI=
Subject key identifier:   F6:51:62:79:68:78:5E:57:C7:17:F7:E7:12:98:07:50:1E:80:29:AA
Certificate issuer:       /CN=9970795F3B277481EE73EA3A16E4FA33964C92D3
Certificate serial:       72EABA7DEF60B1DC3EC81DE81112C401501160D7
Authority key identifier: 99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa
Signing time:             Sun 03 May 2026 03:02:04 +0000
ROA not before:           Sun 03 May 2026 02:57:04 +0000
ROA not after:            Sun 02 May 2027 03:02:04 +0000
asID:                     141093
IP address blocks:        103.156.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl
                          rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ea:ba:7d:ef:60:b1:dc:3e:c8:1d:e8:11:12:c4:01:50:11:60:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9970795F3B277481EE73EA3A16E4FA33964C92D3
        Validity
            Not Before: May  3 02:57:04 2026 GMT
            Not After : May  2 03:02:04 2027 GMT
        Subject: CN=F651627968785E57C717F7E7129807501E8029AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:67:cf:3b:2c:f1:89:04:77:3d:c4:d4:7f:
                    ee:cf:7f:d3:e6:11:39:0d:5e:2e:54:8b:a9:2f:cf:
                    d2:8e:66:7d:28:49:79:3c:9d:89:0c:8b:09:bc:2f:
                    7a:3d:83:8a:2a:4c:cd:2a:d2:ed:31:98:5d:fb:3f:
                    fe:e9:39:1d:ba:26:09:0d:66:8f:ec:49:f8:bc:30:
                    9a:03:df:6d:ba:c0:6d:14:03:71:f7:51:2b:d6:89:
                    cb:50:bd:81:95:2d:1a:8a:6d:29:c0:be:82:16:b7:
                    5e:d6:2e:01:45:71:f9:1c:9b:83:7f:39:4c:c3:c1:
                    b9:75:f7:28:b0:84:87:49:44:4e:8a:eb:4e:d2:6e:
                    90:1b:62:38:d1:96:74:5b:97:43:d0:73:81:b4:e9:
                    12:65:f0:ee:70:39:f8:51:9a:9b:2e:c9:59:ea:1d:
                    b6:b9:bc:b5:39:8f:fc:a5:f3:ac:c6:41:29:5c:41:
                    b1:1b:08:f5:8b:3e:d5:7f:16:66:cb:ba:3e:8c:fc:
                    45:6a:9f:73:ee:b3:05:81:8d:d0:c0:fb:8b:ce:76:
                    88:7d:e6:d5:be:92:f8:99:c1:49:25:12:d0:3b:af:
                    bb:99:20:e9:ba:01:19:1b:27:58:b1:22:64:74:74:
                    5b:62:8f:a5:19:32:a3:1f:ab:63:05:78:15:8d:29:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:51:62:79:68:78:5E:57:C7:17:F7:E7:12:98:07:50:1E:80:29:AA
            X509v3 Authority Key Identifier:
                keyid:99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:0d:3a:29:a6:22:37:bf:0f:4e:d7:ed:1c:fc:92:36:f9:
         90:59:7c:c4:56:fc:e8:3b:ad:da:37:2b:3c:de:9e:26:c3:a6:
         db:85:3e:d3:4c:e7:c8:d9:2a:0c:58:55:74:6c:00:6c:1d:39:
         ac:f4:b7:6c:08:74:5c:f4:06:26:d4:13:a5:92:50:00:f9:25:
         41:fc:0f:6f:e8:a9:d2:c2:76:e2:b2:89:41:41:89:3a:8f:20:
         0b:40:3d:36:6b:b6:23:f8:f2:53:e1:ab:63:c7:72:a1:da:ca:
         2d:76:da:31:03:7a:7b:ea:ad:c7:6b:61:b9:14:54:01:43:48:
         b2:33:65:ca:48:77:f6:ec:63:40:74:be:7f:7b:2f:c3:09:35:
         86:1d:68:ae:c4:91:8f:72:75:a5:03:22:fa:fd:72:11:06:e8:
         a6:63:24:69:7e:d9:cf:2f:5c:5b:17:64:20:73:a7:ac:a7:fc:
         d8:90:c4:9a:a9:38:1c:62:18:7e:ec:dd:df:ae:0f:46:0d:fa:
         56:78:11:cd:90:1a:3a:18:88:1e:15:20:67:1f:1a:a8:80:c0:
         75:4c:7f:9e:88:61:7b:ba:8a:04:a4:5e:20:54:01:e8:98:eb:
         3a:05:21:57:38:3b:cc:fb:b0:8d:79:8c:22:b6:65:69:79:e3:
         bd:41:19:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:02 2026 by rpki-client