Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa
File:                     3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier:          hHEDiD3x1jCZU7rbFxON3QBOnaHax4YzsCxjk1ivhKM=
Subject key identifier:   1D:15:48:BB:22:7A:D1:DD:86:EC:24:BD:A8:E0:94:D7:88:19:37:0A
Certificate issuer:       /CN=530B657BC2C884CC14953B48E6700F4395D4AE66
Certificate serial:       2A374721E2C7E6EB5E0566798420A02C8A7F55B8
Authority key identifier: 53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa
Signing time:             Sun 03 May 2026 03:09:12 +0000
ROA not before:           Sun 03 May 2026 03:04:12 +0000
ROA not after:            Sun 02 May 2027 03:09:12 +0000
asID:                     139967
IP address blocks:        103.91.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl
                          rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:37:47:21:e2:c7:e6:eb:5e:05:66:79:84:20:a0:2c:8a:7f:55:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530B657BC2C884CC14953B48E6700F4395D4AE66
        Validity
            Not Before: May  3 03:04:12 2026 GMT
            Not After : May  2 03:09:12 2027 GMT
        Subject: CN=1D1548BB227AD1DD86EC24BDA8E094D78819370A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:67:58:d7:c2:46:b0:4d:31:0a:9b:2f:de:
                    00:9d:d3:3e:68:0d:19:09:4f:11:eb:08:4f:20:0b:
                    c9:a4:f4:1c:93:9d:f7:f9:e6:2e:14:33:5b:bb:09:
                    33:51:e2:ca:90:ce:0f:8a:22:6c:1d:c6:8c:45:31:
                    19:07:50:ff:5f:4e:3d:95:d2:16:52:22:27:1f:80:
                    35:77:8f:81:c2:6e:15:a0:72:ba:60:3d:65:98:be:
                    78:92:09:53:7f:90:52:9f:90:df:1e:c5:53:d2:eb:
                    3c:27:0d:8c:bc:48:95:c3:04:d6:17:0e:fa:5f:3e:
                    16:a7:ae:c7:65:60:da:af:b4:57:b1:1a:60:38:4e:
                    d8:51:91:d8:14:dc:fd:36:f6:87:22:af:90:6d:5d:
                    57:91:d8:42:44:27:e3:c7:d6:56:f4:6f:a6:4b:f5:
                    36:ae:7e:3a:64:dd:5d:d4:99:13:89:a3:51:cd:34:
                    75:9b:e5:47:73:56:7e:51:49:9e:32:84:3f:ec:cf:
                    95:50:d1:21:10:a1:c2:31:69:c2:bd:17:e8:ee:b2:
                    c7:dc:16:97:58:42:0b:dc:5c:51:33:24:05:f5:ec:
                    a6:f2:76:1c:78:6f:17:f8:80:5a:1e:0a:b7:fd:05:
                    ef:48:12:75:62:9e:7f:db:10:38:de:93:5b:f5:45:
                    4b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:15:48:BB:22:7A:D1:DD:86:EC:24:BD:A8:E0:94:D7:88:19:37:0A
            X509v3 Authority Key Identifier:
                keyid:53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:0a:53:20:2b:93:10:62:f9:69:99:63:70:21:48:db:48:
         62:be:32:98:dd:f7:5e:f9:4e:88:86:5c:f1:af:9c:c4:3e:f4:
         df:00:2f:a6:34:3a:e2:44:66:99:84:3b:ea:f1:39:26:54:e6:
         55:22:bc:5b:5a:a8:e5:4f:2b:0b:53:c8:af:42:7d:82:88:cf:
         91:d1:1e:07:cc:b2:6e:4a:f5:41:18:9e:ad:bd:ae:46:9d:ba:
         31:d4:93:45:a6:72:ae:e8:0d:bc:08:f1:fe:c7:1f:1f:ba:09:
         c7:0b:26:5e:c5:ef:f3:69:93:f0:8c:93:90:53:37:3c:5f:ef:
         4b:87:cc:cc:a2:92:4e:eb:38:17:49:5c:6f:d9:68:0f:16:29:
         50:74:e3:c1:b8:47:f7:08:3d:df:a8:89:60:4e:c4:0f:1b:f9:
         7d:98:9b:ec:fc:9a:ca:1e:42:58:79:31:ad:69:d4:8d:78:71:
         7a:5b:b9:2d:90:34:5a:ea:6a:f5:9a:2d:ac:09:77:dd:16:9d:
         53:d3:10:71:c2:aa:cb:f8:ed:0c:14:02:af:77:c6:b2:da:7b:
         8d:cd:19:30:09:d9:7a:c1:f8:03:19:3f:18:9f:c5:a0:8c:23:
         ea:3d:ff:04:fe:cf:a2:20:57:10:31:70:21:09:7e:95:f5:12:
         fc:b3:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:48 2026 by rpki-client