Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa
File:                     3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (raw, json)
Hash identifier:          6BOi9a4QIn+pGYzRIaW0daSfHvcVflYv5ZBX0t+b6I0=
Subject key identifier:   AD:A2:64:C7:B6:37:CE:49:6B:93:05:69:EE:79:E0:93:96:B8:FC:A7
Certificate issuer:       /CN=098D1D612D535CED249CDB01EC5565063EBACEEF
Certificate serial:       7FA18078795E6B70F19D2E1C63847365EE911B6A
Authority key identifier: 09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa
Signing time:             Sun 03 May 2026 03:18:36 +0000
ROA not before:           Sun 03 May 2026 03:13:36 +0000
ROA not after:            Sun 02 May 2027 03:18:36 +0000
asID:                     141077
IP address blocks:        103.156.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl
                          rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a1:80:78:79:5e:6b:70:f1:9d:2e:1c:63:84:73:65:ee:91:1b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D1D612D535CED249CDB01EC5565063EBACEEF
        Validity
            Not Before: May  3 03:13:36 2026 GMT
            Not After : May  2 03:18:36 2027 GMT
        Subject: CN=ADA264C7B637CE496B930569EE79E09396B8FCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4e:2b:54:ad:71:28:44:c5:3c:ba:52:97:4c:
                    52:c1:24:cf:43:41:a6:d3:a7:14:c6:63:9e:fe:a4:
                    46:95:0b:e2:70:d7:42:bf:33:a0:70:6e:6e:f9:c0:
                    0c:03:65:e7:c4:fd:ef:63:28:29:47:d7:3a:20:e8:
                    52:3d:8d:c0:94:23:77:a3:c5:68:cc:6b:08:83:47:
                    3c:a4:ae:8f:cd:31:3a:19:b4:50:e0:98:eb:95:b2:
                    f8:59:e4:1b:9f:b4:c5:13:b3:9c:1a:81:fd:49:df:
                    74:48:9d:6c:c2:9c:05:e7:ac:54:0f:df:30:15:11:
                    6d:31:e4:6a:b8:bc:3f:04:b1:b4:36:41:91:54:b1:
                    7c:6c:75:b8:b0:a4:d2:18:d3:25:5f:6d:e6:cd:c7:
                    da:1e:9c:c2:9f:af:e4:e2:dd:23:ba:c2:8c:24:10:
                    35:4b:71:eb:8e:cb:12:5c:d8:b6:b9:55:11:a6:ad:
                    2b:5f:88:00:4c:c1:8f:b9:48:1a:8f:21:e3:21:82:
                    c2:27:d8:66:55:5f:65:3b:4a:cc:d9:82:4a:ad:b3:
                    b2:70:35:b0:d6:3f:ae:96:a6:f7:db:2b:c8:c8:e5:
                    44:a4:5c:24:b7:85:0c:51:f2:2d:a5:30:38:d8:a6:
                    e1:2a:18:77:33:d6:5f:3b:59:b5:53:ea:bc:7d:c1:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A2:64:C7:B6:37:CE:49:6B:93:05:69:EE:79:E0:93:96:B8:FC:A7
            X509v3 Authority Key Identifier:
                keyid:09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:ce:ff:dd:52:e4:0e:f7:f3:30:a7:60:5d:a7:01:a7:d0:f3:
         97:fd:47:3b:d4:cf:6e:1a:6d:23:d2:4c:7f:29:5d:d9:77:f5:
         dd:f5:33:f5:18:df:f1:4a:d3:ca:15:28:86:c6:da:5a:f3:c1:
         20:4a:25:60:ea:da:df:85:8f:b7:c2:7d:ba:57:62:9a:2d:cf:
         2b:1f:ef:e3:40:f5:6c:42:f9:72:cb:74:8b:3d:00:7f:51:6f:
         4a:87:9c:bd:b7:0d:1f:e8:23:4c:ad:6d:c9:4a:0e:df:69:4e:
         ac:78:a3:cc:f3:2f:73:6b:66:6c:ba:74:40:d4:b1:f0:f6:93:
         da:f4:93:13:97:71:e5:d3:57:8c:11:84:98:5d:2c:38:2f:8a:
         8f:2d:85:12:2f:2f:38:a5:bb:5e:d9:ba:9d:b1:3e:68:87:85:
         01:6e:22:bf:27:9b:2b:29:62:0d:65:29:7e:20:1f:c4:ce:22:
         27:af:53:3f:3b:b4:5c:02:8a:c8:03:ff:92:9e:36:27:7e:3f:
         23:6e:14:9b:12:81:8b:ec:44:b5:2b:95:6c:f9:e5:27:2c:fd:
         e9:ae:12:95:b2:f3:d5:47:47:0d:28:a3:90:9a:63:f7:ae:0d:
         3e:5a:73:34:4a:2e:44:36:0b:f8:45:97:73:43:d0:58:80:82:
         9f:62:28:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:22 2026 by rpki-client