Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa
File:                     3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=
Subject key identifier:   F0:B0:7C:07:FC:0D:EF:47:9C:A5:9A:84:8E:0A:AA:B5:3E:84:72:95
Certificate issuer:       /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2
Certificate serial:       65C1F5AA72ACEB0B144556138DC282F7043AD6E3
Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 03:05:44 +0000
ROA not before:           Sun 03 May 2026 03:00:44 +0000
ROA not after:            Sun 02 May 2027 03:05:44 +0000
asID:                     154410
IP address blocks:        103.147.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl
                          rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c1:f5:aa:72:ac:eb:0b:14:45:56:13:8d:c2:82:f7:04:3a:d6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2
        Validity
            Not Before: May  3 03:00:44 2026 GMT
            Not After : May  2 03:05:44 2027 GMT
        Subject: CN=F0B07C07FC0DEF479CA59A848E0AAAB53E847295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:8e:3f:7a:23:34:ab:28:07:4c:6d:f1:88:
                    5b:29:17:65:24:00:f2:2c:4a:1f:d5:e3:6a:c7:72:
                    21:d7:ec:63:2b:0e:32:f5:39:ec:1b:5f:ff:29:e3:
                    cf:24:20:2b:c5:b7:1d:67:3a:86:d5:0f:d5:9e:8a:
                    ad:36:5f:07:d8:a6:1d:92:3c:b5:33:48:41:1c:cd:
                    24:a7:f3:1c:25:25:9a:86:a1:75:21:c5:1c:80:35:
                    fd:0c:7f:e6:7a:b0:0d:b8:fa:19:9f:ee:49:d9:09:
                    a1:ef:e8:d6:1d:1f:44:7e:b8:87:a7:35:18:dd:eb:
                    e6:0f:e7:05:42:01:a5:8d:38:05:37:d6:8d:d0:26:
                    9c:f0:b4:fc:97:88:4c:ae:58:15:56:43:6b:fc:e0:
                    67:42:3d:92:4d:50:f2:08:df:92:e4:75:8c:e2:b5:
                    c1:76:5f:4a:b9:92:22:93:5d:a0:b2:7b:92:98:31:
                    b6:76:d6:c7:fd:32:26:d8:79:71:90:a3:be:29:e8:
                    b8:b2:c0:2f:18:a9:c7:de:f7:73:54:81:bb:f4:41:
                    46:1a:5d:ce:eb:26:a2:b5:12:e0:60:2a:3a:67:b6:
                    6f:e9:f6:f7:fa:81:a8:0e:67:c1:a4:42:38:35:aa:
                    e1:1a:25:1f:ad:4e:25:23:dd:ad:ad:62:aa:78:87:
                    85:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B0:7C:07:FC:0D:EF:47:9C:A5:9A:84:8E:0A:AA:B5:3E:84:72:95
            X509v3 Authority Key Identifier:
                keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:1d:88:e1:b0:eb:1f:4a:27:b0:6f:65:22:6e:a2:7d:d1:
         68:5f:57:81:b4:b7:1d:29:5b:84:ed:7f:57:84:e9:b1:b0:00:
         b1:b5:5f:f9:37:cb:92:41:0d:7a:5c:50:42:b8:81:91:1d:fd:
         a5:64:77:8c:32:65:57:5c:e9:c5:ea:a2:5d:70:90:d9:bf:2c:
         f1:45:05:25:9b:61:70:f4:b9:f1:20:7a:cf:2c:69:ee:1e:a4:
         c9:5a:55:6f:0b:07:b7:d9:29:50:ec:1d:28:46:59:47:9d:42:
         4e:8d:8e:e2:18:43:d3:f7:07:90:b9:6d:f4:04:2e:aa:88:54:
         52:ac:f8:a6:54:6d:c1:4d:ec:14:d4:d5:dd:f2:2f:e7:1e:14:
         2c:10:bd:9a:80:6e:34:39:a7:1b:64:b3:80:55:eb:93:28:41:
         15:27:ad:7b:c2:a6:a6:d0:f3:6d:6f:f8:6b:8c:cc:49:a8:9a:
         2a:71:84:b1:eb:c5:f5:29:bd:d3:5e:51:18:25:0d:92:d4:b8:
         a1:39:a9:78:b9:ea:8a:f4:7a:60:ed:e8:cc:d4:08:96:a9:1f:
         56:4e:b1:25:c1:64:54:8c:72:66:ba:0c:8f:11:68:f4:18:22:
         42:e5:bb:74:cc:c6:b0:c6:33:9e:6e:ad:e0:0a:34:d5:57:ff:
         5a:ee:0a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:57 2026 by rpki-client