Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/3130332e32322e39382e302f32342d3234203d3e20313530323433.roa
File:                     3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (raw, json)
Hash identifier:          u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=
Subject key identifier:   03:4A:24:78:5D:FD:D5:7E:38:3C:44:51:25:C8:55:C7:92:F8:7E:03
Certificate issuer:       /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE
Certificate serial:       3B6130A8837AB520C5BCED3C16DD80169590908D
Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/3130332e32322e39382e302f32342d3234203d3e20313530323433.roa
Signing time:             Sun 03 May 2026 03:10:02 +0000
ROA not before:           Sun 03 May 2026 03:05:02 +0000
ROA not after:            Sun 02 May 2027 03:10:02 +0000
asID:                     150243
IP address blocks:        103.22.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl
                          rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:61:30:a8:83:7a:b5:20:c5:bc:ed:3c:16:dd:80:16:95:90:90:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE
        Validity
            Not Before: May  3 03:05:02 2026 GMT
            Not After : May  2 03:10:02 2027 GMT
        Subject: CN=034A24785DFDD57E383C445125C855C792F87E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:1d:37:84:d5:92:e2:ef:9b:30:80:b3:cc:
                    7d:db:a2:46:e6:9b:23:30:7e:a3:02:8b:48:3f:8b:
                    51:5f:d4:c3:d3:87:c4:5b:6d:e4:a4:05:c7:2a:99:
                    39:7b:e3:d7:b0:c7:73:99:10:eb:7c:df:38:0e:0c:
                    6d:ba:ea:a9:2c:fd:be:46:d8:1d:68:73:48:4e:85:
                    c2:0c:7c:f1:94:da:63:d3:80:26:e2:c4:9f:ce:9b:
                    c8:13:cd:77:ea:34:0c:df:2f:ca:36:a5:2e:98:54:
                    59:6c:7f:55:85:b8:b1:07:47:5d:0f:76:c2:a7:d0:
                    00:7e:64:21:e8:5f:23:6b:42:83:13:29:c4:cc:26:
                    b4:2c:89:d0:11:b0:17:b1:35:b3:7a:4a:55:81:5c:
                    ea:70:03:b2:6d:fe:4d:12:c8:de:49:2b:3c:66:2a:
                    df:18:a3:c8:0c:c5:d7:9a:a6:fd:6a:57:d3:21:51:
                    17:8a:ad:bb:d4:fc:44:38:d2:62:43:16:64:52:db:
                    84:b4:0f:24:98:f1:88:e1:8a:a8:e0:98:4c:db:6a:
                    bc:99:00:93:42:02:4e:a7:e6:c2:6c:59:43:31:c7:
                    29:1b:99:c8:b5:eb:74:e5:4f:17:39:20:98:99:2b:
                    75:46:c6:cc:f5:31:6b:a2:ea:42:a9:1e:33:f9:68:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4A:24:78:5D:FD:D5:7E:38:3C:44:51:25:C8:55:C7:92:F8:7E:03
            X509v3 Authority Key Identifier:
                keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/3130332e32322e39382e302f32342d3234203d3e20313530323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f7:30:b1:d2:51:47:67:40:f4:49:63:50:ce:b2:cf:a0:af:
         d5:a2:2b:c9:17:17:8b:3a:40:c9:af:35:aa:f7:75:6a:90:77:
         a6:c4:f9:e0:11:d8:84:18:24:17:5b:c4:3a:b0:d5:88:44:20:
         9f:1d:2f:fc:74:3d:2a:2c:28:6f:bd:1b:a1:1d:e0:45:64:ae:
         fe:34:19:c7:5f:e6:67:38:35:33:7c:9c:63:ff:f2:f0:73:03:
         ed:d6:72:ea:ff:39:52:b8:2e:be:c6:cd:a0:a3:b0:e2:17:6f:
         7e:8d:01:03:02:d1:94:a2:ec:e3:7f:43:61:6d:94:61:3a:6b:
         d1:8a:55:c6:36:cc:93:be:4a:50:4b:df:cc:35:ef:f6:dc:35:
         d2:f3:27:22:90:22:1f:54:87:aa:24:d2:16:0b:e7:06:9d:af:
         67:81:12:84:9a:3b:4a:f2:6a:b3:41:85:f2:bc:47:6b:af:93:
         54:fa:7f:31:6b:12:b5:fb:0b:df:21:74:46:59:b3:b1:47:8b:
         ad:1a:26:3b:bf:cc:05:c2:a7:b7:93:a5:67:63:f8:55:13:34:
         ec:9c:3b:8f:0b:5d:1a:65:11:f1:0a:d1:e6:81:81:32:7d:21:
         1c:61:c1:4d:1d:dc:b8:7a:e3:53:28:42:c1:e5:03:e2:fe:a7:
         71:5c:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:27 2026 by rpki-client