Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa
File:                     3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (raw, json)
Hash identifier:          AshFHMTEwPhxf5xh/Gotw2t8Qbj3ZjVgpz1z6r2Wkk0=
Subject key identifier:   6E:9D:7E:43:A0:AF:BC:97:B6:80:74:E1:83:61:20:54:DA:02:84:8A
Certificate issuer:       /CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC
Certificate serial:       4EBBBFE566EE6B27D2227B0D2DDA5C7B4FB8CAAD
Authority key identifier: F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa
Signing time:             Sun 03 May 2026 02:14:16 +0000
ROA not before:           Sun 03 May 2026 02:09:16 +0000
ROA not after:            Sun 02 May 2027 02:14:16 +0000
asID:                     136861
IP address blocks:        103.103.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl
                          rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bb:bf:e5:66:ee:6b:27:d2:22:7b:0d:2d:da:5c:7b:4f:b8:ca:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC
        Validity
            Not Before: May  3 02:09:16 2026 GMT
            Not After : May  2 02:14:16 2027 GMT
        Subject: CN=6E9D7E43A0AFBC97B68074E183612054DA02848A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:61:e2:5c:84:d2:99:c4:17:f8:82:b6:a4:
                    1d:0d:b7:95:46:e5:3c:9f:ce:9a:a1:15:de:72:17:
                    54:8d:15:1b:73:3a:ca:6c:eb:3b:31:fa:f7:6f:3c:
                    4d:b9:fb:f1:d0:50:50:81:a1:c0:6d:e4:92:ce:f5:
                    dd:ce:ed:61:f5:86:17:ad:46:e7:16:5e:f1:ae:21:
                    9e:66:b8:89:62:bb:5e:e0:8f:a3:dc:ce:a1:69:bc:
                    bb:29:39:a3:c2:9d:54:83:df:81:09:ce:58:7e:77:
                    1b:f9:13:3b:cf:9e:a5:c5:0e:73:be:a6:23:d7:e4:
                    53:1e:37:a5:72:42:ae:af:6d:79:f4:31:fc:18:36:
                    ce:06:52:44:b1:0d:2b:b6:5a:3b:b8:dd:9a:da:35:
                    80:b3:1d:a8:73:1f:28:5b:fb:2d:1a:ef:2a:1e:55:
                    fd:db:bd:3a:b6:7c:56:9d:8b:7c:cb:8d:4d:99:85:
                    70:3f:2e:b5:d0:2f:ab:67:1a:6f:d1:ea:57:f1:24:
                    cf:83:8a:57:cb:08:1b:c5:17:85:ee:96:12:eb:57:
                    06:92:40:77:56:bf:af:57:24:24:ab:c5:26:06:51:
                    19:66:59:d5:1a:48:b9:58:a6:3b:44:08:a2:eb:d9:
                    f9:4e:e2:78:1a:05:81:a4:b5:bb:58:c5:24:19:e5:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9D:7E:43:A0:AF:BC:97:B6:80:74:E1:83:61:20:54:DA:02:84:8A
            X509v3 Authority Key Identifier:
                keyid:F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0a:82:15:a3:da:3a:03:96:6d:d1:f0:27:a9:f3:d2:bb:d4:
         3d:eb:89:53:aa:17:1c:f4:31:3d:c5:d4:af:8c:b0:c1:45:5f:
         46:69:cc:e1:d5:d0:90:81:e8:ac:33:a3:6e:60:3e:57:4e:dc:
         b6:30:94:da:0d:7a:3d:30:0c:ef:3a:fa:a1:e6:a9:86:a9:92:
         5e:9d:3d:73:bb:72:ed:2b:45:7d:d1:09:ff:66:0b:2e:90:df:
         ad:e7:fd:a6:6a:65:df:5c:d7:21:ce:24:80:9f:56:16:26:22:
         57:34:61:df:34:ec:d4:8c:ac:62:d0:f0:84:fc:ad:40:df:ad:
         e8:08:73:ed:4d:25:c0:99:34:60:d3:8e:9e:4c:4b:b0:65:e1:
         d5:4a:1b:48:7d:ce:60:6a:96:de:31:62:c6:2a:5e:1f:92:65:
         c8:1b:1f:ab:a9:5c:96:cd:71:5c:20:6c:5f:49:96:6e:b1:0f:
         50:84:02:1e:61:8a:64:2f:41:c4:03:45:da:18:83:dd:c5:75:
         22:1c:6a:69:0f:22:08:b8:34:63:28:09:f5:8e:77:f3:10:8f:
         2a:07:63:6d:a4:2e:3b:05:13:2c:03:04:0f:b0:61:63:da:91:
         30:bf:ef:34:67:ce:7e:38:46:64:07:19:1d:5c:64:a5:80:2a:
         7e:14:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:12 2026 by rpki-client