Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa
File:                     3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (raw, json)
Hash identifier:          esc3McyAl6hUlG4d1U+cxH9phLSFNKnapu2B7Ix2aTI=
Subject key identifier:   8C:78:B4:93:7D:3C:8B:A8:26:D9:9F:07:DD:0C:4C:3E:D5:84:DD:AC
Certificate issuer:       /CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4
Certificate serial:       684F3A9825C760E4DDB97F4271F26C01CFCF300E
Authority key identifier: 4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa
Signing time:             Sun 03 May 2026 03:14:59 +0000
ROA not before:           Sun 03 May 2026 03:09:59 +0000
ROA not after:            Sun 02 May 2027 03:14:59 +0000
asID:                     140463
IP address blocks:        103.153.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl
                          rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4f:3a:98:25:c7:60:e4:dd:b9:7f:42:71:f2:6c:01:cf:cf:30:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4
        Validity
            Not Before: May  3 03:09:59 2026 GMT
            Not After : May  2 03:14:59 2027 GMT
        Subject: CN=8C78B4937D3C8BA826D99F07DD0C4C3ED584DDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:5f:49:dd:fd:a9:bc:ee:22:71:c5:eb:4e:
                    3e:58:dd:ad:1e:0d:8b:19:f8:20:6d:5e:58:e7:c2:
                    02:f4:b5:eb:ec:d6:d3:45:37:e2:74:ba:4b:ff:37:
                    ff:51:ac:32:ba:85:d2:3c:ac:f9:02:67:94:7e:28:
                    db:7f:35:3a:1c:32:ab:7c:2a:d0:49:69:ce:34:21:
                    e7:ad:28:ab:51:23:95:bc:7b:a2:65:eb:90:c6:ee:
                    78:7f:23:69:0c:e6:4d:63:20:ce:98:97:6c:cc:db:
                    55:dc:83:74:61:b4:24:2e:80:0f:94:7f:f8:47:5f:
                    26:81:81:a1:c3:69:92:94:9a:d9:da:ad:56:19:c8:
                    8a:c3:b9:f0:e2:8a:a0:83:89:ad:1a:95:f6:48:4b:
                    b2:59:98:f7:ec:d1:09:c7:4f:69:40:fe:82:ea:5b:
                    d0:3e:c7:f4:b1:64:3a:a1:ab:5c:ce:03:82:df:1d:
                    2c:31:45:4a:37:84:58:15:4a:ad:7b:c0:1f:31:4e:
                    da:7a:8f:1b:c4:af:fd:d5:04:67:67:dd:af:b1:ec:
                    99:69:8e:48:6b:af:6b:4f:40:95:02:b7:46:1f:8c:
                    e6:c8:a8:d5:d0:5b:19:a0:37:44:29:9d:d6:44:cb:
                    94:b8:c4:68:b2:4c:2f:f7:cc:db:c9:0d:0b:78:ae:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:78:B4:93:7D:3C:8B:A8:26:D9:9F:07:DD:0C:4C:3E:D5:84:DD:AC
            X509v3 Authority Key Identifier:
                keyid:4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:63:43:56:41:90:d6:5a:5c:5b:fa:67:19:d9:20:13:4c:d9:
         39:0a:82:f6:f7:6d:ff:27:7d:30:a3:bb:28:b3:22:31:ec:ee:
         9b:69:2e:0a:e3:56:8a:e6:a5:3d:e7:59:cd:b3:5a:6d:c0:c2:
         46:22:a9:9a:21:1d:4f:1f:27:1b:a1:a7:4c:1c:06:62:99:6b:
         e5:07:cd:51:f5:6b:a8:5e:f4:2f:9e:bc:f7:72:64:84:57:d4:
         b6:54:ed:c8:e8:73:c2:f3:f2:3c:24:58:6a:97:a4:e1:45:f7:
         54:ce:7a:9d:4c:82:c9:d8:85:48:ee:03:47:d7:0e:ed:a1:ba:
         21:d3:e1:ae:ca:a1:13:c8:b1:c5:95:56:bf:44:a1:2a:38:66:
         d8:54:cf:07:f8:5e:a0:1d:7d:16:fd:dd:10:93:eb:c2:07:53:
         ea:84:25:70:4c:bb:82:bf:e3:3e:c9:0b:97:2f:72:68:70:a5:
         f5:00:9d:39:1e:3d:e1:59:3c:fc:b3:2f:92:f8:4c:7a:6c:fd:
         38:74:78:40:63:e7:ed:27:cf:4a:0c:6f:b6:46:28:f2:e8:a3:
         1e:96:8a:0d:69:bb:12:37:86:12:b3:6f:74:fc:37:3c:e4:74:
         79:46:1e:94:6d:e4:46:53:d4:f4:c6:c3:8a:27:4d:4e:b8:cd:
         71:da:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:18 2026 by rpki-client