Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35372e302f32342d3234203d3e20313334363339.roa
File:                     3130332e3230352e35372e302f32342d3234203d3e20313334363339.roa (raw, json)
Hash identifier:          KyauDRXI/e9uJGW0xrnbNJyN8/VxkRrMwmrqJNQgRJo=
Subject key identifier:   A3:B2:BD:63:AF:EF:EB:30:87:77:EB:8B:D9:20:03:6D:ED:A0:CB:49
Certificate issuer:       /CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912
Certificate serial:       6BA51601E06068A801989E764A2EAD55FCB7001C
Authority key identifier: 01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35372e302f32342d3234203d3e20313334363339.roa
Signing time:             Wed 30 Sep 2026 09:35:16 +0000
ROA not before:           Wed 30 Sep 2026 09:30:16 +0000
ROA not after:            Wed 29 Sep 2027 09:35:16 +0000
asID:                     134639
IP address blocks:        103.205.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl
                          rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 04:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a5:16:01:e0:60:68:a8:01:98:9e:76:4a:2e:ad:55:fc:b7:00:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912
        Validity
            Not Before: Sep 30 09:30:16 2026 GMT
            Not After : Sep 29 09:35:16 2027 GMT
        Subject: CN=A3B2BD63AFEFEB308777EB8BD920036DEDA0CB49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f7:f0:7d:26:4a:b3:6f:51:56:99:dd:29:b5:
                    df:4a:bd:10:e5:f9:20:60:ed:99:aa:b4:16:1f:f8:
                    2d:e4:9d:3b:71:d4:9b:fd:58:f5:ec:4b:27:f7:31:
                    db:1d:66:32:65:aa:1e:bb:8e:7b:b0:f3:69:f1:d8:
                    86:d4:67:0d:db:7d:c4:e5:f5:ef:b7:1e:da:c9:6a:
                    f4:f1:f1:9f:1c:64:e0:5c:dd:6b:f7:52:ab:f8:fd:
                    93:3b:b9:37:fe:d8:47:53:82:ce:40:81:7a:49:95:
                    64:2b:e2:2f:05:2b:95:a8:1e:8c:45:3d:a9:77:14:
                    85:f2:af:6b:eb:b4:0e:69:c5:ee:a6:76:b3:b3:70:
                    2b:ce:f7:54:b8:19:40:ec:86:bf:12:4a:fa:d4:4f:
                    ac:04:c5:e7:b5:73:75:55:56:9a:d6:92:6f:59:fa:
                    a0:fd:33:1b:02:76:b8:5f:a7:cd:74:12:a5:4f:8d:
                    8c:20:78:91:60:90:72:21:22:76:0c:0a:b7:6d:c0:
                    06:f7:6b:a1:16:0c:0e:b1:fa:1a:10:a2:3d:9a:ac:
                    29:5e:1f:98:3c:f7:ea:d0:c8:7d:2f:7d:c6:54:b0:
                    4f:42:9f:fe:b0:ed:59:19:3f:88:27:4f:70:82:63:
                    29:af:c2:8d:e7:e2:df:97:f8:2e:64:f0:c0:b5:04:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B2:BD:63:AF:EF:EB:30:87:77:EB:8B:D9:20:03:6D:ED:A0:CB:49
            X509v3 Authority Key Identifier:
                keyid:01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35372e302f32342d3234203d3e20313334363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:18:c4:b4:8f:99:24:e8:77:6b:e1:5a:fd:ad:28:a6:50:1a:
         20:ed:20:61:d8:61:77:05:94:fc:09:2c:bb:c1:9e:99:e9:dc:
         bd:fd:8b:f9:58:73:9e:ba:59:49:76:18:03:68:83:15:d3:f6:
         a6:48:70:b9:0b:cf:10:01:77:63:68:83:0a:75:e7:18:bf:d1:
         22:ba:9a:d3:c1:d4:f2:c2:d8:df:48:2d:7f:48:1a:c3:0d:14:
         46:c0:61:51:83:f6:40:b9:a2:8a:f4:42:da:56:1f:f3:35:27:
         04:4e:8f:19:40:5e:03:5b:35:44:16:f3:98:f0:ae:cc:ee:72:
         17:18:0a:cc:a9:55:f8:f9:9d:f2:4b:4c:cb:4d:89:80:c5:17:
         9e:78:41:dc:1d:20:d9:40:9d:a0:79:13:1f:56:2d:f3:a6:85:
         fa:68:f4:83:81:5e:6f:09:8f:56:b9:b5:d2:19:11:be:80:7a:
         e9:5f:cf:ba:d5:c8:3d:b4:80:d7:45:b8:78:54:e3:12:98:5e:
         72:85:40:5c:6e:a1:58:9b:73:02:7a:9a:75:b9:9a:e5:50:7c:
         22:e8:e9:ed:8e:d7:4c:e6:f9:ae:15:a8:c5:28:6f:4a:d4:d0:
         14:68:85:03:eb:83:06:f6:96:ba:d5:b1:27:10:d0:07:1c:44:
         10:0d:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 22:36:49 2026 by rpki-client