Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa
File:                     3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (raw, json)
Hash identifier:          Q/fuqQjoEFdToVhIku7pv1Bt2HRCRBa60zPNNAr2glo=
Subject key identifier:   65:5A:E9:64:AC:1F:DF:F5:3D:FA:BC:6F:99:F1:56:B2:6A:76:EF:41
Certificate issuer:       /CN=498FC3DB03528A64214589740CA13E84E4775306
Certificate serial:       3D5E5FFDEE82CC6C3832F6A6FE45E5434FAAC8A3
Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa
Signing time:             Sun 03 May 2026 02:14:04 +0000
ROA not before:           Sun 03 May 2026 02:09:04 +0000
ROA not after:            Sun 02 May 2027 02:14:04 +0000
asID:                     142339
IP address blocks:        103.169.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl
                          rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5e:5f:fd:ee:82:cc:6c:38:32:f6:a6:fe:45:e5:43:4f:aa:c8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306
        Validity
            Not Before: May  3 02:09:04 2026 GMT
            Not After : May  2 02:14:04 2027 GMT
        Subject: CN=655AE964AC1FDFF53DFABC6F99F156B26A76EF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:ab:4c:f5:f3:eb:89:89:a2:31:f5:1f:1a:
                    12:fb:8e:5b:a8:ed:02:74:9d:60:9e:c2:42:98:2f:
                    77:6f:59:f7:f0:08:66:cb:2d:51:2b:68:f6:05:51:
                    d7:03:f0:40:8c:13:5d:de:46:30:e3:a3:07:15:96:
                    4c:dd:f9:08:04:53:cf:3f:be:04:c7:8b:f0:56:dd:
                    32:d9:31:6e:f7:9d:d4:53:0a:bb:50:5e:c8:b9:df:
                    cf:bb:6e:97:56:06:24:c9:75:2c:7e:b0:cd:40:8f:
                    d0:2d:3f:e5:d4:a9:83:70:e0:20:7b:a3:f3:40:6e:
                    d2:b7:4b:2c:a5:14:ed:90:e4:5f:4d:b3:37:bf:7a:
                    9d:55:79:26:fa:3b:7c:98:03:dc:d1:89:17:c2:00:
                    ec:02:54:1d:ba:35:a5:b7:f3:cd:c6:6c:7d:5a:03:
                    e9:f7:d6:aa:1c:63:62:8c:ff:65:20:44:8e:e0:a7:
                    b1:a0:db:f5:b6:46:c3:dd:a5:be:29:8d:eb:34:4d:
                    2b:55:8d:fd:09:4d:86:c7:cd:ca:89:05:16:e2:b9:
                    1c:17:75:6c:c3:89:61:33:f2:64:21:ac:e6:d7:18:
                    c3:e4:00:d6:e9:7b:28:d7:21:89:1e:80:ec:77:cb:
                    a5:36:6c:f1:2f:50:35:6b:93:f0:b0:8e:6d:51:f3:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5A:E9:64:AC:1F:DF:F5:3D:FA:BC:6F:99:F1:56:B2:6A:76:EF:41
            X509v3 Authority Key Identifier:
                keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a5:d9:b4:fa:9e:5f:72:b8:8c:cc:0e:48:c9:62:0c:a3:59:
         3a:3d:47:52:ba:d1:24:05:e1:22:77:3a:62:98:89:4d:1d:ca:
         3b:0a:55:18:4d:25:74:73:b0:30:d9:e1:a2:37:9e:08:08:6c:
         f8:bc:57:49:4e:e9:60:dc:24:48:5c:1d:18:10:91:e6:8f:19:
         b4:cf:10:b1:c0:74:9a:c8:39:ce:c3:13:fb:07:ea:fe:a8:4b:
         c9:70:04:73:1c:95:c9:42:2f:71:ac:9b:0e:d5:10:de:3a:17:
         6d:4d:59:63:39:49:55:7e:3b:43:53:13:e9:68:45:bf:af:6e:
         c2:04:98:ab:a8:b2:b4:f5:8f:95:e8:aa:11:1f:d7:a0:4a:6f:
         d5:1c:92:bf:f1:d5:6c:b9:30:29:f2:30:2e:4a:39:ba:8d:d1:
         74:ce:80:86:ae:de:f8:d4:93:a3:96:0d:eb:4d:40:33:86:6f:
         aa:97:cc:e3:7c:9a:b6:54:88:8b:14:e7:ce:d6:56:9f:5a:a7:
         0c:86:db:5c:60:f4:b6:2e:7a:f3:85:6e:0c:47:a7:c0:92:44:
         a0:a4:d1:da:a0:7a:db:bf:04:53:bf:55:ec:53:7b:7e:ea:f7:
         95:52:a5:cc:64:e0:97:75:c5:f6:62:08:50:45:73:7e:93:19:
         35:2b:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:20 2026 by rpki-client