Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa
File:                     3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (raw, json)
Hash identifier:          s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=
Subject key identifier:   15:4A:88:79:3F:D5:DB:2F:04:3A:E8:9E:3D:73:A3:4B:4A:CA:98:72
Certificate issuer:       /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519
Certificate serial:       2E95A58EAFDE3130E7E59B7ED8CF1078F6858741
Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa
Signing time:             Sun 03 May 2026 03:02:15 +0000
ROA not before:           Sun 03 May 2026 02:57:15 +0000
ROA not after:            Sun 02 May 2027 03:02:15 +0000
asID:                     131706
IP address blocks:        103.102.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl
                          rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:95:a5:8e:af:de:31:30:e7:e5:9b:7e:d8:cf:10:78:f6:85:87:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519
        Validity
            Not Before: May  3 02:57:15 2026 GMT
            Not After : May  2 03:02:15 2027 GMT
        Subject: CN=154A88793FD5DB2F043AE89E3D73A34B4ACA9872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:54:45:f2:5a:26:3d:73:a6:33:02:50:01:
                    25:77:6b:12:66:a6:bd:f6:7d:7b:b8:19:53:45:56:
                    de:b8:53:f1:ab:b7:fe:80:8a:03:ea:8a:63:25:a7:
                    6a:26:04:c2:77:17:66:af:9f:71:0b:f9:74:e1:e5:
                    86:af:92:8d:37:4d:df:1d:90:9e:16:28:48:fa:4e:
                    99:be:0d:38:4e:45:8c:cd:fa:8e:ec:e1:39:a9:ae:
                    aa:d5:4f:1e:c3:5c:1b:db:6d:44:c2:f5:1f:dd:3b:
                    7d:01:f5:87:e7:b5:32:af:6b:06:d4:d4:02:33:5e:
                    3a:8f:2a:e3:38:fa:f7:d6:7b:fa:07:d2:6b:92:1f:
                    22:2c:03:38:9d:8a:12:eb:c0:63:d6:e8:ed:02:6a:
                    50:1d:a9:b2:ca:5e:76:fc:c2:4c:fc:14:7f:bf:02:
                    35:b6:4d:ea:70:3a:34:ad:b3:32:97:7e:a0:6c:4d:
                    4f:40:c1:a2:3f:48:18:9b:49:d2:b8:e8:a1:08:85:
                    3e:c2:35:63:48:9f:c1:6f:bd:c7:02:3b:e7:19:2c:
                    0d:3d:a4:ac:14:35:a7:6a:40:6f:9a:5e:8f:08:d7:
                    7d:7e:a5:df:e4:10:8f:4f:76:71:90:62:9c:c7:e3:
                    e5:48:7a:c7:b5:5d:56:bf:a1:fd:b1:80:31:86:d8:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4A:88:79:3F:D5:DB:2F:04:3A:E8:9E:3D:73:A3:4B:4A:CA:98:72
            X509v3 Authority Key Identifier:
                keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:b2:d8:94:1d:23:bd:cc:11:78:76:b1:5d:0c:d6:9e:f3:d8:
         32:73:82:45:12:8b:b6:35:f8:a3:1c:f0:c6:04:98:a9:f8:23:
         de:e1:1d:15:57:34:66:b4:a4:1a:fd:b1:44:1c:f2:8c:00:31:
         a9:67:1e:40:32:b6:8b:6d:21:6d:84:a8:b5:07:7c:76:eb:2c:
         8d:7d:88:7a:b0:fd:c4:9e:00:6b:b7:03:a2:b5:b0:3e:73:9b:
         ae:aa:7e:82:d6:50:6c:52:e9:1d:0b:4c:52:76:31:fe:69:f9:
         8e:b4:e3:1b:ba:e4:28:8a:79:83:b3:e5:fa:ec:c3:b5:56:d9:
         b1:00:6d:d0:46:e4:3e:be:7d:e5:01:2d:ad:98:07:62:1a:aa:
         48:71:fb:80:c5:2f:2a:3a:0b:7b:2b:46:01:2d:1d:a1:f8:20:
         1c:d2:24:d3:d1:21:58:37:4d:b0:c8:9f:8c:f3:7a:9d:03:b4:
         72:e1:b1:5f:4f:7b:cd:5a:3d:a2:6e:e1:09:13:9b:a5:9d:0d:
         82:66:00:36:67:75:0f:01:43:23:39:44:da:85:3f:90:8c:77:
         1f:9c:b9:5a:30:2d:08:bb:b8:ed:17:69:4c:a2:f1:83:f6:01:
         6a:9d:2d:a1:03:b9:c2:93:a6:04:7b:54:36:80:86:34:9b:28:
         2e:f8:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:57:54 2026 by rpki-client