Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa
File:                     3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (raw, json)
Hash identifier:          d3fL4T6FzL/T0DkQ+Ng+5zSK+zJSGTl7uPkkzl2dqNM=
Subject key identifier:   09:58:16:CC:E4:CE:D2:EE:F9:69:09:E5:18:74:1B:B4:88:C6:2F:9D
Certificate issuer:       /CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450
Certificate serial:       19FD0B068B1B424A79CF1B3189568C3ED1DDBC18
Authority key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa
Signing time:             Sun 03 May 2026 02:15:15 +0000
ROA not before:           Sun 03 May 2026 02:10:15 +0000
ROA not after:            Sun 02 May 2027 02:15:15 +0000
asID:                     149972
IP address blocks:        103.147.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl
                          rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fd:0b:06:8b:1b:42:4a:79:cf:1b:31:89:56:8c:3e:d1:dd:bc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450
        Validity
            Not Before: May  3 02:10:15 2026 GMT
            Not After : May  2 02:15:15 2027 GMT
        Subject: CN=095816CCE4CED2EEF96909E518741BB488C62F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:69:71:7e:90:f9:72:00:86:c2:04:bc:42:
                    1f:d7:b3:a1:69:58:16:00:66:90:95:fb:28:bd:d1:
                    c0:fd:0a:38:b7:88:11:8d:c2:f2:77:f7:a8:7f:19:
                    74:1a:75:1e:55:2e:ae:33:b8:56:44:3e:8f:9e:81:
                    c1:ab:44:b8:76:12:7d:17:c3:aa:f2:ee:a8:9c:ff:
                    d1:c5:56:95:99:f6:df:5e:8a:7f:33:fc:a0:c7:30:
                    7c:00:0c:4a:a2:65:56:70:f9:05:10:3a:eb:a1:ab:
                    1e:e9:e8:34:68:06:ad:df:87:a4:bb:d1:21:eb:14:
                    5c:83:ab:60:fb:ef:22:99:2d:d4:33:4d:b6:8d:81:
                    95:ac:aa:48:91:7c:6c:eb:38:9c:74:b3:68:ac:a3:
                    c6:57:a5:28:ce:8b:66:c1:a5:97:25:2c:0c:8d:0b:
                    e4:51:5f:c3:71:33:8f:97:4f:1f:7b:9a:fa:00:56:
                    af:59:c6:26:bd:74:b4:5d:74:2f:47:7e:87:f0:34:
                    04:55:10:39:a6:a7:2f:e7:3f:ff:8e:1b:f3:c8:b7:
                    28:ab:66:13:2d:21:cf:d4:f4:8d:48:3a:e7:c6:c2:
                    82:d7:81:c6:8a:45:7a:88:a0:ad:22:5a:69:e8:cd:
                    b7:c1:de:00:19:1c:55:8b:35:0d:93:54:ad:8e:c3:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:58:16:CC:E4:CE:D2:EE:F9:69:09:E5:18:74:1B:B4:88:C6:2F:9D
            X509v3 Authority Key Identifier:
                keyid:A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:31:d7:96:16:12:a5:35:b1:98:7e:6f:ca:bf:d1:5d:2f:
         58:a1:09:50:40:25:2d:13:67:90:11:69:ea:94:b4:f4:b0:8f:
         c8:2b:08:a4:f9:66:9d:96:f5:ab:db:a3:39:f7:85:ce:04:56:
         02:56:02:c9:2f:a3:78:62:e9:48:da:84:10:52:b5:24:7a:b2:
         c4:e3:e6:02:fd:07:40:88:f0:fd:0d:9f:11:7b:6e:45:6f:76:
         15:9c:da:dc:07:df:38:86:91:66:6f:99:4c:10:38:ed:31:ab:
         7b:3a:61:11:36:f9:7c:4f:e7:ec:49:b7:61:24:66:c3:d7:ad:
         65:24:71:92:4b:94:0f:0f:0a:89:11:ea:24:c4:d5:cb:89:28:
         bd:06:9b:85:76:30:60:cc:3a:92:34:09:06:11:bf:6f:8d:05:
         2f:f5:bc:ef:4a:6f:b9:a5:3b:2b:61:15:96:06:e2:3b:eb:ab:
         04:87:75:71:b5:d7:d0:24:4c:6b:82:0a:b4:02:7e:a0:21:39:
         7c:d5:4d:e4:4d:2d:25:a7:d5:9c:75:5f:65:0f:2a:ff:21:48:
         fc:38:7d:e5:5f:61:4d:79:11:1b:52:bb:69:a5:1c:36:f5:28:
         1f:a0:e2:9c:1a:01:4f:2e:c9:c3:3b:b1:70:e5:4b:cc:e7:63:
         c3:0d:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:38 2026 by rpki-client