Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa
File:                     3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          8IXeZT2nMIplDuKAy9sTdwidwLtl6QHRFLk7GQI0XlE=
Subject key identifier:   79:9C:A9:E4:7E:2B:45:96:B5:10:2C:2C:9E:D8:2C:91:B9:BD:46:2F
Certificate issuer:       /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial:       6B799E17772C9E7C42C14B7B54D69635A763846E
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 02:17:40 +0000
ROA not before:           Sun 03 May 2026 02:12:40 +0000
ROA not after:            Sun 02 May 2027 02:17:40 +0000
asID:                     45305
IP address blocks:        103.142.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
                          rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:79:9e:17:77:2c:9e:7c:42:c1:4b:7b:54:d6:96:35:a7:63:84:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
        Validity
            Not Before: May  3 02:12:40 2026 GMT
            Not After : May  2 02:17:40 2027 GMT
        Subject: CN=799CA9E47E2B4596B5102C2C9ED82C91B9BD462F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:6b:4b:a7:3d:b3:b4:26:f7:29:3f:0f:da:
                    33:f1:66:5c:d1:63:c0:21:eb:6d:18:6c:42:1b:87:
                    23:48:7a:3f:91:7f:40:22:c8:eb:e9:01:d1:ca:e1:
                    df:28:a0:2d:e3:a1:0b:90:cc:51:7b:53:71:d6:41:
                    6a:45:79:96:30:3d:10:65:f3:de:0f:b1:8d:65:f8:
                    67:65:1e:e8:c9:84:1c:8e:c5:54:bc:78:f5:5c:9d:
                    11:f9:b7:77:ea:7c:dc:03:22:2e:b1:f2:70:6c:a5:
                    94:89:c7:26:c8:21:51:1d:80:10:b2:bf:a0:08:72:
                    f7:47:7b:7c:00:dc:47:f0:3a:a7:5a:4e:a1:6f:cb:
                    f4:10:45:e8:c2:e2:65:32:da:6a:83:1d:9a:0b:29:
                    35:cd:3e:96:34:71:9d:a7:c6:79:c7:b7:e1:fa:ae:
                    76:fd:22:87:22:be:41:29:80:05:50:ae:90:30:ef:
                    0a:ae:06:38:ea:20:e6:02:f1:9c:cb:e1:fe:19:22:
                    e8:61:47:51:2e:b4:28:d8:03:3c:c3:d5:97:36:9d:
                    4c:d0:e0:22:3a:5a:d7:9e:b0:ed:ea:3c:d2:28:c3:
                    f7:53:04:f5:2f:0d:13:40:b5:22:b1:3d:e4:bd:d8:
                    12:04:7d:95:3d:c4:95:51:51:15:78:63:e1:7a:1a:
                    65:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9C:A9:E4:7E:2B:45:96:B5:10:2C:2C:9E:D8:2C:91:B9:BD:46:2F
            X509v3 Authority Key Identifier:
                keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:61:f2:5c:f9:4a:de:cc:14:79:f2:ee:31:73:70:49:51:
         b9:19:dd:1d:48:ce:6b:fd:7a:12:b6:91:f4:33:b5:c6:a9:e8:
         71:06:e1:6d:ad:82:ac:f0:5d:f1:21:61:c1:6c:2c:0a:57:f5:
         81:82:56:85:62:f9:25:b0:82:4e:3c:7f:ab:48:b5:91:b1:90:
         6a:15:84:eb:f8:e1:10:36:d2:da:86:0c:72:b9:17:8f:cd:f9:
         65:c3:1a:62:a6:5a:4c:03:4a:f4:2e:96:f0:2c:ea:3e:00:2c:
         15:71:5c:d7:25:76:9c:90:83:37:96:67:25:d2:b2:cb:2f:a7:
         4d:40:03:8c:31:8e:b3:31:85:04:bf:a2:6b:82:8d:18:99:71:
         b8:3f:77:a0:8e:a3:8f:5c:b2:eb:c2:6d:12:14:e4:2d:be:f3:
         f7:b5:9c:d5:52:7e:78:23:c7:6b:f7:3f:98:86:be:82:d4:69:
         82:0f:71:18:15:79:b3:cc:69:59:d9:3c:3c:f2:6b:a2:c3:23:
         f9:22:a0:ad:94:e5:1a:96:c9:c6:81:28:a7:6a:06:53:34:9e:
         56:99:e5:57:e4:db:61:46:60:87:c3:d4:df:4e:24:a6:c1:95:
         7d:7a:12:fa:f7:5f:e9:ae:b2:a5:86:d7:c9:9d:79:5a:b7:8d:
         43:fc:6f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:56 2026 by rpki-client