Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32342d3234203d3e20313530393832.roa
File:                     3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (raw, json)
Hash identifier:          h/bTXRoKRlwmUHLhAGDVWkvVC1V8xs42wjGl9LBBkfM=
Subject key identifier:   93:5D:15:B7:20:91:C9:0B:B0:65:BA:AC:09:ED:2E:00:A6:3C:EA:F4
Certificate issuer:       /CN=0162FB1D75470A2F01326C3FB94D24AE036CD51B
Certificate serial:       2FB1EBB94FF1E43460DDBC4915610F9CD47E4190
Authority key identifier: 01:62:FB:1D:75:47:0A:2F:01:32:6C:3F:B9:4D:24:AE:03:6C:D5:1B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0162FB1D75470A2F01326C3FB94D24AE036CD51B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32342d3234203d3e20313530393832.roa
Signing time:             Sun 03 May 2026 03:05:42 +0000
ROA not before:           Sun 03 May 2026 03:00:42 +0000
ROA not after:            Sun 02 May 2027 03:05:42 +0000
asID:                     150982
IP address blocks:        103.21.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.crl
                          rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0162FB1D75470A2F01326C3FB94D24AE036CD51B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b1:eb:b9:4f:f1:e4:34:60:dd:bc:49:15:61:0f:9c:d4:7e:41:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0162FB1D75470A2F01326C3FB94D24AE036CD51B
        Validity
            Not Before: May  3 03:00:42 2026 GMT
            Not After : May  2 03:05:42 2027 GMT
        Subject: CN=935D15B72091C90BB065BAAC09ED2E00A63CEAF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b6:55:81:1f:5e:32:d8:8b:07:4a:5d:91:f1:
                    a1:da:f4:b4:c3:ba:d2:8b:ca:24:72:f9:a0:eb:b3:
                    0c:5b:44:c5:58:86:ee:ce:7d:ab:fe:25:4b:f4:88:
                    b9:00:dc:2e:d5:97:19:b8:47:49:2a:57:e8:e1:28:
                    4a:6b:f9:5b:d8:1f:b3:3c:19:53:dc:41:a9:05:da:
                    e0:27:5d:bc:93:7f:90:22:b3:92:82:f1:e9:50:6d:
                    b4:ff:e5:73:95:5e:02:45:9f:88:06:27:36:bc:86:
                    0d:1f:00:8f:cb:47:57:87:e2:af:55:d5:80:9c:28:
                    ff:29:aa:19:dd:6f:d8:c6:6f:91:be:ae:ff:05:89:
                    99:cb:14:3a:70:5c:e3:cc:64:0a:7a:36:33:aa:2f:
                    ef:1d:15:61:63:81:3b:77:d6:9c:ad:b0:b3:87:8d:
                    ae:e7:c4:ec:80:26:16:c1:43:88:39:e1:89:9f:fa:
                    d6:7e:f1:76:ca:1e:c7:0d:0b:f2:44:57:17:81:51:
                    0e:98:34:b8:b2:3c:5a:c8:e0:0f:29:75:c0:50:b1:
                    c7:e0:c3:78:a1:5a:0b:16:7b:75:66:7a:18:c4:52:
                    46:e3:98:71:8d:37:03:7e:97:7d:82:ea:39:0b:9f:
                    44:08:b1:77:dd:1e:c3:18:8d:d6:a8:d3:79:64:3a:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:15:B7:20:91:C9:0B:B0:65:BA:AC:09:ED:2E:00:A6:3C:EA:F4
            X509v3 Authority Key Identifier:
                keyid:01:62:FB:1D:75:47:0A:2F:01:32:6C:3F:B9:4D:24:AE:03:6C:D5:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0162FB1D75470A2F01326C3FB94D24AE036CD51B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32342d3234203d3e20313530393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:10:d5:10:9c:80:44:7e:dd:cc:3e:e7:05:ce:a3:37:0b:a2:
         b9:10:8f:da:57:c3:56:ea:70:77:95:f0:f6:bf:1c:d0:c0:91:
         ff:92:e6:54:f6:f5:2e:7f:23:26:17:00:24:90:66:87:e5:4a:
         a5:3d:5d:1e:17:c7:ec:00:29:c2:2a:9e:91:a6:60:7b:83:97:
         e0:d0:32:96:e7:3f:ac:c9:df:43:f6:a5:c5:02:f9:9b:39:77:
         e3:0f:9e:ec:d2:c2:42:42:e4:b8:7f:b4:f7:bc:f2:e6:9d:62:
         5c:60:be:85:21:f5:72:72:fd:e6:7a:70:c1:32:6d:67:6a:dc:
         ef:67:43:74:a4:3b:b5:07:bc:4d:77:df:45:84:ad:2a:95:02:
         ef:5e:1b:a2:f5:a9:7a:a6:51:40:1f:c5:06:ea:95:94:40:ca:
         f9:f7:d9:d0:39:89:20:0b:6c:c0:4b:04:a5:52:f9:d4:73:ae:
         ea:95:35:a7:2f:9c:c4:0b:3a:4f:89:ab:fb:cf:d1:54:c1:d2:
         46:54:79:13:9a:87:c2:a5:1d:1a:3d:cb:2c:c1:70:df:66:ca:
         d7:e8:e7:22:88:00:29:57:35:9e:86:7c:81:4f:f2:15:3e:c5:
         38:fb:65:ef:02:af:a6:19:2d:3c:eb:a6:1c:f8:72:28:5c:f1:
         02:23:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:10 2026 by rpki-client