Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa
File:                     3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          WTtSNSnNo9oz9/i7rHt1jxuFUkS6d/teW8M9wk46Nik=
Subject key identifier:   73:5F:19:2D:70:87:3D:D5:44:72:5E:0B:30:05:E8:57:E0:75:08:ED
Certificate issuer:       /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial:       6FC65F0D40239A029E1946FD3FA1CE0B0FA5F1B5
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 02:17:40 +0000
ROA not before:           Sun 03 May 2026 02:12:40 +0000
ROA not after:            Sun 02 May 2027 02:17:40 +0000
asID:                     45305
IP address blocks:        103.142.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
                          rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c6:5f:0d:40:23:9a:02:9e:19:46:fd:3f:a1:ce:0b:0f:a5:f1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
        Validity
            Not Before: May  3 02:12:40 2026 GMT
            Not After : May  2 02:17:40 2027 GMT
        Subject: CN=735F192D70873DD544725E0B3005E857E07508ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:d4:e8:ba:3f:b8:d7:ed:cc:7c:3f:ab:0a:
                    0d:ad:4e:60:6c:cf:02:40:23:02:69:df:e6:ff:a7:
                    ae:ff:37:ef:e7:76:57:1c:5b:95:29:2f:54:ac:d1:
                    ad:1c:93:c5:f2:7f:0b:c9:c5:35:25:ba:62:d1:da:
                    31:16:ca:6a:f4:d8:70:56:dd:42:2c:2c:02:13:a1:
                    1f:3c:cf:59:3c:e7:ed:53:f6:06:ff:24:a3:7a:3b:
                    57:5a:80:11:8b:52:13:67:60:3d:6d:2d:c7:9f:c4:
                    b6:d5:58:2e:07:5d:dc:23:6c:f1:3b:67:de:ea:a0:
                    c0:17:0b:2b:b9:45:b7:b8:2e:53:a3:7f:d0:b4:26:
                    27:8f:45:4a:bd:49:d4:bc:94:d2:59:23:11:58:86:
                    97:7a:07:17:34:cf:e9:fc:ce:4f:85:28:57:69:c4:
                    4c:6d:f7:c8:0c:91:98:8e:65:43:01:af:b9:9b:b3:
                    b4:e6:53:1a:a6:60:47:b2:6f:5b:60:52:fd:0f:9a:
                    cf:96:4b:15:09:19:d8:69:65:da:a6:1b:1a:30:23:
                    97:b2:21:fa:12:59:ea:09:1e:16:ca:76:3e:8f:fe:
                    73:13:aa:02:d8:58:4f:0f:8b:fd:e8:e6:c0:9f:b0:
                    b7:5c:27:a5:a2:2f:c7:0c:1e:41:32:e3:40:41:4b:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5F:19:2D:70:87:3D:D5:44:72:5E:0B:30:05:E8:57:E0:75:08:ED
            X509v3 Authority Key Identifier:
                keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:5f:61:ec:19:4f:d3:78:2e:25:39:66:e3:e8:ae:3a:e3:72:
         bc:88:ed:97:6e:8d:fc:99:9c:a0:a6:93:4c:2c:a6:e1:19:77:
         ce:92:ca:bd:7b:b1:e1:82:4c:fc:dd:01:42:2f:dc:04:76:80:
         61:04:8b:29:82:95:6e:a9:5c:e0:d7:a7:f6:a3:e9:f1:66:e0:
         57:53:e1:02:db:30:25:8c:de:45:87:07:9d:a8:cd:6e:36:ac:
         cc:49:22:cc:ef:48:7a:16:3b:89:6a:09:23:3d:af:02:94:ce:
         f8:59:e6:d8:fa:81:8f:eb:fd:f9:3f:19:c2:b1:58:e0:78:80:
         8e:43:d3:a9:ac:a8:fd:47:d6:7c:4c:ea:50:c1:72:50:fb:b3:
         51:05:a0:21:bd:42:b7:3a:ca:fa:40:03:0d:cf:5e:cf:49:61:
         a5:07:26:e3:0f:8a:90:40:8a:45:c1:89:1f:ff:e0:c8:6b:a0:
         b5:14:8a:38:9f:0d:9c:35:cd:38:b5:04:6e:82:ce:f0:37:24:
         70:e8:34:00:36:1e:22:14:0e:04:fa:ff:75:21:62:b4:88:b5:
         eb:dd:b6:64:35:a8:67:fa:cf:f1:5c:16:74:21:81:96:4a:1c:
         87:72:c7:e1:20:23:b0:9c:fd:d1:56:d7:07:c4:84:55:0b:35:
         90:e3:7e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:49 2026 by rpki-client