Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa
File:                     3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (raw, json)
Hash identifier:          sVWZtsjpcpezFv1cmO31cy7yxR6Y49KAqemmha7HUbc=
Subject key identifier:   A8:E9:D9:AC:BB:8E:EB:E2:E8:1C:C9:CA:FA:BC:2E:65:41:87:A5:0E
Certificate issuer:       /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial:       5CFF9064BA5C16AABA325A1EB6E3BF76910A4591
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa
Signing time:             Sun 03 May 2026 03:09:37 +0000
ROA not before:           Sun 03 May 2026 03:04:37 +0000
ROA not after:            Sun 02 May 2027 03:09:37 +0000
asID:                     141675
IP address blocks:        103.158.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ff:90:64:ba:5c:16:aa:ba:32:5a:1e:b6:e3:bf:76:91:0a:45:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
        Validity
            Not Before: May  3 03:04:37 2026 GMT
            Not After : May  2 03:09:37 2027 GMT
        Subject: CN=A8E9D9ACBB8EEBE2E81CC9CAFABC2E654187A50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:93:11:2f:7d:0c:e4:a7:a6:64:52:eb:46:
                    f1:70:04:f2:b4:aa:ad:de:83:14:0a:4b:52:2b:5b:
                    88:87:b8:8c:23:a5:58:8b:38:40:5a:71:4c:b0:d5:
                    ea:ee:a1:65:38:94:9f:b8:dd:66:08:c4:fa:e2:c8:
                    af:e9:08:2b:90:f1:17:3e:a5:28:e2:56:3a:71:e2:
                    46:8f:83:04:31:29:48:28:b2:23:c3:26:f9:93:89:
                    10:64:73:87:c4:a8:c2:af:bb:60:a5:85:09:bf:ea:
                    0e:e7:9b:40:98:05:7a:f7:bb:ef:96:2e:f4:42:5d:
                    9f:b2:18:b6:9e:f7:29:f5:60:de:6d:1b:c4:17:1f:
                    7f:a9:24:6b:2a:4f:d5:d3:f0:ca:2b:26:12:42:0f:
                    14:38:7a:a1:6a:be:b7:72:02:e2:33:f0:ef:d9:8a:
                    a5:25:76:68:10:82:ed:b9:8a:96:b7:0a:1a:4a:03:
                    e5:cb:87:2d:ad:03:ea:35:f3:ee:1c:23:ae:92:bb:
                    77:ec:48:83:72:ae:21:8c:44:cd:5c:6a:f5:e0:0d:
                    d4:3b:f5:0a:f8:aa:48:2a:5b:a8:ae:cd:90:34:1d:
                    41:70:d7:cd:1a:de:ac:de:43:cc:e8:cd:45:24:b6:
                    58:09:69:9f:01:69:b3:b6:7d:0f:f6:7a:4c:90:a1:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E9:D9:AC:BB:8E:EB:E2:E8:1C:C9:CA:FA:BC:2E:65:41:87:A5:0E
            X509v3 Authority Key Identifier:
                keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:de:00:95:a0:7a:bd:5a:f9:64:eb:8d:ac:45:ba:2b:a8:2e:
         ba:23:55:d4:bc:9b:20:62:1f:c6:d8:a2:0c:0e:f8:f3:10:96:
         a2:df:1e:d1:1a:d5:b9:d8:09:71:c5:15:b8:2a:22:8f:2d:23:
         3d:06:e1:7d:41:3e:09:4e:09:7b:3d:80:b0:89:ad:b3:ce:f1:
         d5:e2:6a:b6:77:cf:9a:ec:be:3d:ba:01:9d:6d:95:7c:4d:42:
         97:8e:6d:81:38:bc:05:d1:59:de:74:21:5f:08:7e:48:b8:a7:
         46:2d:4b:e2:c4:f2:3c:c1:ee:dc:40:6e:8d:3c:ae:97:69:0d:
         ac:b1:07:83:15:90:a3:72:ed:ee:01:5c:73:a7:5a:91:2c:82:
         eb:49:bc:41:aa:e9:50:fa:98:0d:c3:a9:cf:9f:15:31:07:01:
         6d:e1:88:e9:d1:b1:c8:b6:43:0f:27:25:84:e3:08:b6:63:f4:
         e5:c9:d3:8f:f4:82:71:c0:6a:c5:c4:cb:f2:4a:89:0d:4c:e8:
         42:4f:a7:f6:51:77:9d:3d:6a:da:6e:a5:e4:04:63:da:98:41:
         ab:2e:a6:c4:28:28:38:a3:92:86:9c:74:42:5c:ac:72:99:0f:
         2a:3c:f1:55:ea:49:42:11:d7:4f:ad:1c:61:9a:d1:3b:21:db:
         8b:d0:77:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:11 2026 by rpki-client