Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa
File:                     3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (raw, json)
Hash identifier:          Z0u7IGnQdxSwJ/3PUqshR32Mqm4mC19C1FEuu6LC8Ng=
Subject key identifier:   2C:6D:52:00:BA:5F:92:81:66:02:C2:C8:04:3E:09:88:83:81:AF:1D
Certificate issuer:       /CN=098D1D612D535CED249CDB01EC5565063EBACEEF
Certificate serial:       52D2356C2AD2FB08460C10FB69351FA12E269816
Authority key identifier: 09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa
Signing time:             Sun 03 May 2026 03:18:35 +0000
ROA not before:           Sun 03 May 2026 03:13:35 +0000
ROA not after:            Sun 02 May 2027 03:18:35 +0000
asID:                     141077
IP address blocks:        103.156.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl
                          rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d2:35:6c:2a:d2:fb:08:46:0c:10:fb:69:35:1f:a1:2e:26:98:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D1D612D535CED249CDB01EC5565063EBACEEF
        Validity
            Not Before: May  3 03:13:35 2026 GMT
            Not After : May  2 03:18:35 2027 GMT
        Subject: CN=2C6D5200BA5F92816602C2C8043E09888381AF1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:3f:0b:18:b3:a1:1d:2b:58:fe:dc:7f:86:
                    a0:68:d2:9a:6b:58:f8:76:44:81:da:2c:a2:03:15:
                    55:14:a4:70:a3:3b:75:51:39:96:91:53:29:3f:5c:
                    14:8a:06:3c:72:02:a2:ac:fc:08:66:19:9b:a2:90:
                    af:53:a9:af:57:62:05:27:6c:3e:d0:15:eb:b9:cb:
                    2d:27:c9:22:45:44:97:69:36:85:0b:e1:da:49:6a:
                    7a:30:f6:2e:a8:48:07:a3:88:ae:f4:7e:84:e9:d0:
                    67:af:e3:ee:ac:51:3f:0d:be:42:55:10:8f:06:9f:
                    1f:8e:72:f9:cf:15:2d:1d:37:03:91:ca:4f:5a:0e:
                    15:19:68:4b:82:de:bc:a3:d7:26:67:42:61:90:7e:
                    5b:ad:c5:40:ad:96:dd:e5:07:2b:38:0e:2a:41:b8:
                    73:98:dd:e4:56:d4:36:e3:66:95:d2:cb:7f:0b:cc:
                    33:3c:2b:a4:72:e9:41:97:d0:00:6f:36:07:18:a5:
                    4d:5d:5b:0b:bd:52:cb:a7:0f:b7:a7:8f:83:8d:5f:
                    3a:9c:a5:da:c8:06:f3:d0:47:b8:cd:a2:8e:44:09:
                    b3:17:a7:91:63:7e:19:3d:e4:68:b8:4e:8e:d8:c7:
                    9b:03:d9:11:2d:cf:0c:4a:d8:2f:bb:3a:3c:98:93:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6D:52:00:BA:5F:92:81:66:02:C2:C8:04:3E:09:88:83:81:AF:1D
            X509v3 Authority Key Identifier:
                keyid:09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:aa:0a:12:ac:42:6f:17:c2:56:cf:5c:d1:4b:34:e7:26:78:
         aa:db:60:1a:50:ea:ec:d6:5d:41:44:8a:a1:7d:ce:79:be:ec:
         d2:21:09:69:4d:ce:7e:c2:1f:5c:bc:82:94:55:69:40:50:66:
         fa:95:c0:b4:9b:a2:08:91:67:b2:e1:4d:e0:c0:b5:95:b8:a4:
         b0:26:01:35:97:6d:41:de:25:aa:22:f6:9a:63:39:a4:d9:a4:
         82:6c:b4:bd:c5:2a:0e:21:34:8e:ca:f0:37:25:06:75:43:0c:
         20:38:8b:ce:f1:de:e2:7b:d8:f1:57:38:f4:a6:e4:1a:b3:3d:
         87:28:56:08:5f:75:c9:5d:d5:26:51:36:7e:db:cd:01:ff:66:
         15:b7:52:18:40:2d:75:7c:30:cf:c2:2f:cb:51:0b:5b:17:bd:
         31:a8:90:9d:24:6a:39:0a:82:5b:56:98:0e:28:0a:bd:5e:76:
         e9:ca:42:cc:2e:df:ff:82:40:0c:7e:a0:3c:18:a4:93:d8:a1:
         a5:ab:83:bb:91:67:1b:1c:3c:7a:a6:5f:3a:5a:0f:c8:3c:8e:
         8f:5b:9b:7f:7c:55:d7:94:ba:e0:9e:81:e9:f5:05:f3:7d:84:
         3c:37:fc:83:4d:41:62:d6:5f:47:f1:7a:d0:3c:4f:74:80:59:
         3d:36:d7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:58 2026 by rpki-client