Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa
File:                     3130332e34372e31302e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          bqleVr/CtV0kID5GQzDKQocY8p72teKu2kr0m36+c90=
Subject key identifier:   DF:46:D8:61:0E:45:61:5C:D7:BD:E4:37:07:1C:8C:2F:78:72:8E:4C
Certificate issuer:       /CN=B7A0E7998A9F266F3882F19118691CB225356F5D
Certificate serial:       6A8E6B299A512F38478EE4429098FF30F1A91C88
Authority key identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa
Signing time:             Sun 03 May 2026 02:20:29 +0000
ROA not before:           Sun 03 May 2026 02:15:29 +0000
ROA not after:            Sun 02 May 2027 02:20:29 +0000
asID:                     59273
IP address blocks:        103.47.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl
                          rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8e:6b:29:9a:51:2f:38:47:8e:e4:42:90:98:ff:30:f1:a9:1c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A0E7998A9F266F3882F19118691CB225356F5D
        Validity
            Not Before: May  3 02:15:29 2026 GMT
            Not After : May  2 02:20:29 2027 GMT
        Subject: CN=DF46D8610E45615CD7BDE437071C8C2F78728E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:51:ff:e8:36:e5:3b:1e:af:d3:b7:f8:61:
                    b5:7d:cf:0d:d3:b5:9f:42:1e:ee:f2:b5:02:52:7a:
                    6e:62:02:9d:56:72:53:3b:11:b7:89:e4:bc:58:f3:
                    7d:46:21:87:46:32:46:11:2d:ca:7d:13:77:dd:7a:
                    80:fd:75:9a:83:f6:79:ff:6a:dc:58:ba:69:94:70:
                    37:f2:85:b4:eb:f3:96:5e:be:4f:20:94:ea:de:c3:
                    07:cc:75:ee:f5:77:2a:bf:1e:29:1d:3a:d1:b3:c3:
                    3c:a1:71:99:0c:13:4c:22:53:dd:9e:0c:ba:72:b1:
                    6c:2b:ab:37:eb:ad:8c:b0:b7:9b:d2:68:e3:42:56:
                    f0:6b:d0:bc:92:dd:f5:55:7a:cf:ad:e9:84:49:74:
                    26:18:54:df:2c:74:c8:81:01:40:a0:f7:34:21:70:
                    68:2a:aa:7f:ff:69:11:7c:85:70:b7:15:79:46:7e:
                    cc:8e:73:3d:06:85:4e:65:6a:81:35:f9:71:47:42:
                    22:2a:dd:6f:c5:17:4d:e4:30:80:2e:a5:84:89:8a:
                    25:00:6e:98:11:6f:f6:5c:7a:de:ef:1b:e5:3e:e9:
                    aa:9c:55:41:1f:7e:b2:86:d3:60:60:cc:42:19:51:
                    cc:e9:e7:f5:99:e6:2d:45:d5:97:ab:7f:d2:c8:ec:
                    f1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:46:D8:61:0E:45:61:5C:D7:BD:E4:37:07:1C:8C:2F:78:72:8E:4C
            X509v3 Authority Key Identifier:
                keyid:B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ce:ad:5a:5b:08:fe:ad:dc:e7:4e:eb:c7:60:c2:9a:eb:f2:
         54:e6:ea:27:03:4f:cb:1c:8c:a3:f4:58:47:c8:8b:f2:22:18:
         42:e1:8e:77:86:15:a4:38:75:7e:7c:77:63:2a:da:9b:fd:7f:
         ca:a3:13:7e:2b:11:f2:ab:5d:1c:1b:95:91:b4:39:12:cb:5d:
         1c:07:82:93:b5:bc:db:b3:e3:02:d7:f4:2d:61:0b:55:1b:59:
         84:71:36:d5:b4:ea:8b:0a:b5:33:48:97:4b:06:fb:d2:99:ed:
         dd:77:b7:0b:80:68:c6:ef:9d:59:95:ac:d8:8d:af:0a:db:75:
         a8:ed:10:3f:df:50:6c:53:7d:8c:38:f4:83:44:b4:8f:eb:6b:
         e0:79:83:06:ef:00:a8:49:95:57:7f:a0:82:2c:4d:77:e8:f7:
         84:64:33:b0:d2:ae:b0:b7:4d:90:a0:a5:78:d2:c2:9a:30:70:
         95:3e:7a:d4:c8:25:48:d8:e1:eb:58:ce:85:b8:c1:1e:c1:1a:
         aa:d5:cf:54:e9:8b:b9:3c:cd:70:30:59:3b:90:4c:34:16:35:
         61:cf:90:cf:52:06:b9:f7:d9:b2:15:5d:a1:82:d2:2e:54:4c:
         ec:3b:e6:3b:d6:aa:6e:75:a3:74:95:ac:1d:ff:48:8b:15:3e:
         e0:c1:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:03 2026 by rpki-client