Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e332e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          h7oJXK+AgIlPZVwTrPckQLETitJhhEg1pMAjxm6/Vyw=
Subject key identifier:   E9:30:54:C6:BF:37:90:AF:57:85:C6:98:EE:AE:FC:FD:54:85:78:3F
Certificate issuer:       /CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007
Certificate serial:       7120AE88FAE54FF1931358F409F8222E7AB4EEE0
Authority key identifier: E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e332e302f32342d3234203d3e20313430333839.roa
Signing time:             Sun 03 May 2026 03:15:33 +0000
ROA not before:           Sun 03 May 2026 03:10:33 +0000
ROA not after:            Sun 02 May 2027 03:15:33 +0000
asID:                     140389
IP address blocks:        103.153.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl
                          rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:20:ae:88:fa:e5:4f:f1:93:13:58:f4:09:f8:22:2e:7a:b4:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007
        Validity
            Not Before: May  3 03:10:33 2026 GMT
            Not After : May  2 03:15:33 2027 GMT
        Subject: CN=E93054C6BF3790AF5785C698EEAEFCFD5485783F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:59:54:c8:ed:1d:f5:90:6f:bb:15:e2:ce:
                    c0:00:d0:06:be:bf:d9:47:fd:71:e3:44:94:e7:39:
                    6e:98:e8:90:df:28:1c:4c:2b:99:1c:87:c9:bc:59:
                    9e:b8:c5:bf:54:f7:72:b0:ef:fd:1e:18:96:54:50:
                    ff:f6:69:24:6d:9b:62:91:09:4c:06:90:27:78:7b:
                    e3:e5:f9:fc:2c:44:c9:5c:bd:eb:bd:33:63:42:c8:
                    c7:0d:f4:15:80:a4:b3:49:17:9c:fe:3d:8e:da:44:
                    f8:0d:d4:22:8a:86:40:53:bc:d4:91:b1:19:a9:6f:
                    a0:e3:b5:ac:95:3d:4b:22:f0:12:b2:10:36:5e:0f:
                    dc:2f:11:54:a7:19:c4:6a:68:46:1c:46:09:c9:22:
                    4d:d7:27:00:df:b5:10:77:21:37:5e:69:8c:8d:07:
                    26:b5:7a:2e:5f:98:60:05:c9:bd:34:b6:66:4a:40:
                    37:5b:49:9f:ab:f2:a1:a1:4a:67:84:be:f3:e9:a0:
                    8b:98:65:55:14:ed:e7:73:28:a5:c8:58:55:79:9f:
                    14:c7:f3:c6:b3:3c:5b:a6:4a:b7:e1:4c:81:cf:4c:
                    19:69:f1:70:02:f8:65:07:4e:90:bb:1b:b2:aa:4e:
                    f2:e0:11:b3:1b:58:c8:f4:2e:c4:64:0a:6a:23:41:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:54:C6:BF:37:90:AF:57:85:C6:98:EE:AE:FC:FD:54:85:78:3F
            X509v3 Authority Key Identifier:
                keyid:E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e332e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:4a:5a:a2:f6:5b:15:85:61:2f:b8:dc:e0:4f:81:94:dd:59:
         8e:12:fc:58:07:6f:3d:49:04:f9:32:f2:cc:15:bb:32:9d:89:
         ff:05:88:d7:f9:88:53:3a:f9:1f:d1:06:f0:ed:e1:8c:05:fe:
         84:32:a2:41:16:6b:4d:40:18:15:ca:7e:88:ed:be:e0:43:44:
         ae:66:33:2e:15:6c:36:1d:42:c1:6f:fe:2d:b5:61:69:73:08:
         f1:b2:4d:cc:89:b0:f5:c3:d2:f2:1b:50:00:40:6a:cb:dc:62:
         38:91:fa:c4:0d:a4:db:3a:58:a9:e1:fa:ed:fc:33:02:43:c1:
         3e:b1:e2:73:6f:d4:d4:8a:1b:8a:57:e4:83:da:d8:d8:8f:0a:
         8a:b6:fd:5b:28:79:48:3b:ea:15:f6:3b:33:35:b8:65:f8:c8:
         a1:a7:60:46:3b:21:0c:ff:33:86:b3:bc:61:c5:f7:53:88:c7:
         16:4c:06:59:bf:26:28:62:1e:32:ea:f3:01:41:d8:dc:2d:47:
         12:3a:02:f3:b3:f3:36:e5:f5:d5:02:13:04:e8:64:be:1e:bc:
         b3:fe:27:7b:10:4b:90:2f:60:1d:9c:7c:d7:3f:68:04:b0:d0:
         74:f1:fa:30:82:5e:4b:0a:c1:1f:6d:dd:46:0f:c1:aa:19:9a:
         f2:7d:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:47 2026 by rpki-client