Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa
File:                     3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier:          NpxuTMED+KkFsvGBsqYNwDD7Wr7ndBd2FBb62eDZGAI=
Subject key identifier:   7D:5F:C9:AE:7A:E2:35:65:99:E3:CE:8A:D2:B0:D7:10:97:B8:B8:96
Certificate issuer:       /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial:       53220C6D889E0BA8989044464259A97749945531
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 02:17:39 +0000
ROA not before:           Sun 03 May 2026 02:12:39 +0000
ROA not after:            Sun 02 May 2027 02:17:39 +0000
asID:                     45305
IP address blocks:        103.142.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
                          rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:22:0c:6d:88:9e:0b:a8:98:90:44:46:42:59:a9:77:49:94:55:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
        Validity
            Not Before: May  3 02:12:39 2026 GMT
            Not After : May  2 02:17:39 2027 GMT
        Subject: CN=7D5FC9AE7AE2356599E3CE8AD2B0D71097B8B896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:e8:54:59:eb:9b:f1:30:89:1c:fa:f4:5b:
                    da:6a:46:ec:0f:07:d9:27:d3:1a:64:d6:1b:09:9d:
                    e4:5d:29:86:01:8a:d8:03:1b:33:c1:35:dc:a3:89:
                    36:4c:21:11:e4:22:e1:7e:a0:8e:98:cc:4b:e3:3e:
                    f8:82:1b:4c:f9:4f:3a:ce:70:b7:49:50:ac:50:50:
                    d4:a9:c7:3d:ed:a7:ce:07:3a:92:d2:5f:f5:5e:ec:
                    be:a6:77:39:1d:6f:b1:8c:f4:24:1b:fa:e7:e3:c9:
                    41:8a:19:fc:b4:41:59:82:47:5a:45:a5:25:9d:3d:
                    9a:1e:53:ff:4f:3f:28:94:a3:d6:2f:2a:e2:74:c7:
                    71:bc:b3:5f:3b:e2:95:5f:66:c9:1f:9c:d2:fe:f7:
                    45:9e:6f:bc:ac:5e:55:8f:4c:82:31:f7:2b:51:a0:
                    01:e2:ed:82:64:b5:3a:dc:10:78:39:df:84:91:47:
                    12:7d:09:c3:3d:4c:f1:26:84:bb:1a:68:bf:c2:54:
                    70:03:58:68:56:09:52:a0:2f:87:74:3c:ee:a5:2a:
                    85:40:03:f0:6b:cc:b7:d1:f5:a1:6f:72:a5:eb:90:
                    d5:44:0d:f2:c1:24:43:1d:b0:5c:ef:5e:68:7c:88:
                    fa:8c:36:48:4f:fc:55:02:00:4e:63:20:e3:80:43:
                    54:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5F:C9:AE:7A:E2:35:65:99:E3:CE:8A:D2:B0:D7:10:97:B8:B8:96
            X509v3 Authority Key Identifier:
                keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:be:50:f3:64:fa:a3:02:73:4c:79:4c:56:c5:67:d3:4a:f2:
         09:37:c6:8a:82:08:d0:a2:26:9b:77:fa:4f:ec:10:39:22:0a:
         4b:62:6e:56:48:19:88:66:9f:61:24:5c:e5:bd:36:04:8c:2b:
         7a:70:15:29:76:66:3a:13:bb:d1:9a:63:5e:7f:c8:93:67:b6:
         58:f9:bf:3f:16:1e:5b:7a:a1:88:81:45:3e:6d:84:d9:ae:4a:
         a2:45:cd:40:e5:9d:18:99:8d:85:04:e5:a5:39:6f:3a:36:b9:
         f1:e0:05:e0:16:c4:b0:4d:ee:63:8b:52:96:8b:38:49:ac:c6:
         ea:78:9e:2a:e0:08:b9:74:0a:97:a2:4a:18:a7:27:23:27:6e:
         f1:9c:f2:3a:8b:ce:79:97:9e:17:07:eb:fe:cf:87:01:75:d9:
         8b:0a:86:36:35:9f:c0:74:33:8f:62:c3:44:5e:55:90:a9:2b:
         60:b8:1d:18:2f:00:07:f9:05:fc:7b:91:36:fd:be:5e:6b:87:
         c9:65:5f:f0:81:f0:39:8c:7c:c9:45:fa:aa:e7:9f:71:71:d9:
         b5:4a:2c:ea:0f:dd:76:4a:99:92:50:1c:0a:78:0d:69:01:64:
         1a:b0:91:59:dd:ef:25:f3:7f:bb:1e:0e:a0:e0:8c:bd:08:ad:
         93:44:e2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:34 2026 by rpki-client