Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa
File:                     3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (raw, json)
Hash identifier:          4wuKptmllX2qoJ6OZ25xViRxXJ51FwJpwKiDHUyz+2g=
Subject key identifier:   7C:B0:70:A1:5D:94:D3:05:96:30:8A:B1:C9:0A:DB:94:64:6B:2E:4E
Certificate issuer:       /CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C
Certificate serial:       75BA6B2CBCE53D90EFCFF281B481FBA50A46B298
Authority key identifier: BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa
Signing time:             Sun 03 May 2026 03:16:07 +0000
ROA not before:           Sun 03 May 2026 03:11:07 +0000
ROA not after:            Sun 02 May 2027 03:16:07 +0000
asID:                     150257
IP address blocks:        103.30.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl
                          rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ba:6b:2c:bc:e5:3d:90:ef:cf:f2:81:b4:81:fb:a5:0a:46:b2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C
        Validity
            Not Before: May  3 03:11:07 2026 GMT
            Not After : May  2 03:16:07 2027 GMT
        Subject: CN=7CB070A15D94D30596308AB1C90ADB94646B2E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:2e:c1:ff:4e:fe:ba:61:d9:11:c8:7e:19:
                    ae:6d:4c:f6:fb:dd:dc:3f:8e:ad:07:96:7d:8a:73:
                    26:ec:a3:eb:1d:19:1a:0a:45:8c:d8:47:a1:b5:8c:
                    97:37:b6:26:c7:81:29:06:fe:bf:83:87:f8:85:98:
                    f8:71:84:9a:89:c7:43:93:6d:81:aa:20:b2:d6:cd:
                    e3:32:97:52:4f:0c:dd:1b:8c:dd:d3:35:47:de:e9:
                    72:01:6f:6c:0a:3a:f3:c6:c9:79:77:74:f4:9d:98:
                    be:ff:a0:e8:54:6f:67:3f:f7:d5:13:1e:e7:eb:92:
                    81:71:80:e8:28:c3:57:ad:3a:92:7d:20:00:6f:43:
                    e9:7b:49:ed:c6:17:bc:21:21:9d:0e:25:82:21:ef:
                    de:7d:0e:f1:0a:44:ad:03:69:f0:7e:9d:87:79:21:
                    b3:0c:22:4a:ff:f3:9d:32:a4:50:8b:f4:5a:05:62:
                    cc:3f:22:a5:62:89:e9:cf:54:d1:55:59:21:f0:2a:
                    63:62:7f:f8:46:06:07:fd:bb:0a:42:2f:73:40:07:
                    be:32:75:ce:e5:45:e5:89:17:c6:07:99:30:49:e5:
                    fc:e3:eb:09:57:49:e4:ae:e3:49:64:54:33:d7:ae:
                    0a:35:88:cd:40:cf:6f:8d:0c:78:db:0a:01:65:e0:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B0:70:A1:5D:94:D3:05:96:30:8A:B1:C9:0A:DB:94:64:6B:2E:4E
            X509v3 Authority Key Identifier:
                keyid:BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:b5:0a:12:e6:b6:fa:5a:c2:44:12:2d:7b:66:87:3e:d8:9f:
         1c:e1:0a:a7:f8:10:30:b9:ea:80:4d:7c:d2:15:0e:08:51:85:
         09:b2:ee:74:ac:a1:30:7a:80:89:f3:ad:0a:7b:4b:80:b2:14:
         66:12:28:4b:dd:d4:cf:20:33:f7:26:57:01:48:74:80:0d:7b:
         9e:60:27:2a:a0:c7:d8:05:f5:b5:18:7d:ae:d8:56:ad:a8:a0:
         69:85:2e:a1:fc:aa:a9:f8:6d:18:0d:c8:93:3a:11:11:91:74:
         b3:d3:8b:b7:5b:01:cd:f0:16:e1:f9:0a:75:af:20:10:55:54:
         6a:28:db:0b:7c:ea:f4:34:db:66:c2:9a:e7:59:93:10:12:40:
         ac:59:25:a9:4e:ad:a9:a4:03:26:d5:8b:e1:6f:6f:96:ce:ae:
         0b:e6:6b:03:20:fa:33:f7:8b:9e:51:8f:ac:65:ba:7d:83:5c:
         80:b9:24:a4:d9:a7:47:83:f0:4a:aa:b3:36:d0:58:38:30:85:
         ad:4c:b0:ef:f8:2d:c4:ed:16:69:c4:38:43:c1:71:63:48:44:
         ef:39:78:04:01:cd:81:9b:5e:33:18:2d:9f:5b:09:6a:a6:a3:
         28:3d:56:70:b4:60:68:27:2d:cc:19:ba:5f:52:3f:5a:79:95:
         74:ec:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:00 2026 by rpki-client