Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa
File:                     3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (raw, json)
Hash identifier:          qJeB9IbjX5ag+QxaHUzr5lUIsrKHS9OTMwiaemsfQJ0=
Subject key identifier:   F8:1B:6B:F8:B6:F2:E9:93:9C:8A:1D:35:D3:F0:C8:BA:06:0C:FB:43
Certificate issuer:       /CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C
Certificate serial:       4A535B696BFB5FB65F99F5B12B1DF17A257E4746
Authority key identifier: D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa
Signing time:             Sun 03 May 2026 03:16:56 +0000
ROA not before:           Sun 03 May 2026 03:11:56 +0000
ROA not after:            Sun 02 May 2027 03:16:56 +0000
asID:                     141098
IP address blocks:        103.156.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl
                          rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:53:5b:69:6b:fb:5f:b6:5f:99:f5:b1:2b:1d:f1:7a:25:7e:47:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C
        Validity
            Not Before: May  3 03:11:56 2026 GMT
            Not After : May  2 03:16:56 2027 GMT
        Subject: CN=F81B6BF8B6F2E9939C8A1D35D3F0C8BA060CFB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:64:5c:3c:dc:7a:22:c2:b0:7f:3d:b4:1e:
                    d3:d5:b7:92:a7:15:f3:da:f2:64:65:d4:22:1e:53:
                    54:1c:72:ed:10:8b:e3:0a:a4:d4:e8:f8:2a:83:f9:
                    ce:a6:f2:b3:7f:5b:af:6b:0d:30:ef:95:04:45:22:
                    f4:77:f0:79:28:53:2d:05:38:63:0b:c9:e4:a8:c2:
                    57:73:a4:56:26:a9:e7:5d:6d:fd:11:da:db:0d:71:
                    6a:6d:95:c6:ec:19:6e:e8:f9:b8:f3:38:3e:1d:19:
                    34:fc:ae:7e:cd:1c:a0:f9:5d:1e:ca:91:be:64:9c:
                    71:63:76:df:c9:78:ff:92:b0:06:19:33:dc:c6:97:
                    3c:bb:d8:e1:5a:29:8e:ea:b7:27:8d:a5:8f:c2:e8:
                    cf:b3:3b:e4:d5:55:17:85:20:c1:cb:78:66:7e:58:
                    dc:57:fe:e3:1c:2a:23:b4:57:22:38:f0:e4:1f:ee:
                    ae:99:0c:60:18:e5:6e:1b:35:9f:cd:7b:2c:5a:2a:
                    b1:18:4f:d6:1f:2c:23:3e:51:da:82:7c:fc:8a:05:
                    db:16:7e:f6:c0:76:a4:95:0d:1b:8c:0a:b7:e5:92:
                    e8:b0:10:48:0c:3f:27:13:be:f4:ed:d6:88:9a:59:
                    05:79:aa:b5:dd:c0:f7:3f:3f:16:9c:f5:95:40:f9:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:6B:F8:B6:F2:E9:93:9C:8A:1D:35:D3:F0:C8:BA:06:0C:FB:43
            X509v3 Authority Key Identifier:
                keyid:D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:a6:3f:b0:97:f7:f2:79:9d:7d:64:f3:87:c1:0c:7d:d6:a0:
         a2:ba:c8:c9:35:e6:5b:94:47:21:5b:10:c8:f3:27:f1:f1:2e:
         58:d4:60:14:5b:8a:e2:cb:ce:c2:44:bc:04:6f:5e:73:9e:d3:
         2f:12:d2:2e:30:32:59:17:69:2b:e8:f8:e5:7f:27:a5:f6:c9:
         fe:68:a1:a6:db:04:d0:83:07:21:be:98:49:9b:7e:4a:ed:99:
         d7:4a:cb:ab:d9:db:21:6c:b6:04:ff:53:d7:3b:e8:92:f3:ac:
         d9:49:70:31:ab:ba:73:b5:e7:32:1f:31:00:f4:c3:ec:da:93:
         e3:99:83:6f:2e:a2:f9:f5:b0:6d:71:1d:b0:dd:60:5f:9f:ef:
         50:25:a6:d7:6f:48:14:39:33:04:8d:69:0f:94:3f:3b:53:f0:
         84:90:94:80:82:b5:62:d3:26:ed:39:04:84:fd:4a:8e:81:37:
         1c:81:57:4f:e7:99:f1:9f:4e:53:bf:94:c6:47:42:aa:9c:be:
         3b:9e:1a:2f:88:b8:58:49:20:c2:f5:0a:54:db:59:95:de:be:
         7d:63:c5:79:da:e8:9c:2c:d2:99:e2:fc:70:b6:0c:17:da:9b:
         86:94:bf:88:97:54:85:ad:3d:35:c3:dc:e8:81:41:24:9b:00:
         6c:90:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:31 2026 by rpki-client