Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31312e302f32342d3234203d3e203539323733.roa
File:                     3130332e34372e31312e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          i7xKoh7QIZf/wi1EOh2BtN5rz2lc5CUAErnYSBr7+OA=
Subject key identifier:   43:E0:95:9D:EB:F8:C4:98:1F:BB:D5:05:9B:7D:4D:1D:3D:A4:9F:14
Certificate issuer:       /CN=B7A0E7998A9F266F3882F19118691CB225356F5D
Certificate serial:       7E4953C2CD707A16697EAC29D06085776FAACA11
Authority key identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31312e302f32342d3234203d3e203539323733.roa
Signing time:             Sun 03 May 2026 02:20:28 +0000
ROA not before:           Sun 03 May 2026 02:15:28 +0000
ROA not after:            Sun 02 May 2027 02:20:28 +0000
asID:                     59273
IP address blocks:        103.47.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl
                          rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:49:53:c2:cd:70:7a:16:69:7e:ac:29:d0:60:85:77:6f:aa:ca:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A0E7998A9F266F3882F19118691CB225356F5D
        Validity
            Not Before: May  3 02:15:28 2026 GMT
            Not After : May  2 02:20:28 2027 GMT
        Subject: CN=43E0959DEBF8C4981FBBD5059B7D4D1D3DA49F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:91:96:0f:f6:44:63:93:83:21:d0:42:26:
                    a1:90:da:e0:71:b9:70:15:45:40:8c:54:2c:e6:38:
                    40:31:ef:8e:71:bc:10:4e:30:f9:1f:2d:f4:71:c7:
                    2d:cf:5a:e0:e3:06:a3:5f:b4:ff:22:ab:db:93:b1:
                    e6:47:5d:cc:02:cf:27:83:70:a5:a9:fb:fd:59:af:
                    ef:c3:34:bd:75:00:02:64:dc:23:82:9a:cb:1d:a6:
                    84:4a:6a:24:f6:12:94:29:79:f4:03:56:98:29:a7:
                    ed:40:af:20:da:8b:8e:d5:10:45:c3:cf:44:ae:92:
                    bb:62:e8:7c:5d:df:61:d2:d0:d7:b9:be:06:5a:4b:
                    2e:bd:7c:48:8b:26:c1:e3:53:f1:d4:10:92:be:f8:
                    8c:af:86:be:72:94:53:39:ac:3a:68:09:3a:0c:ac:
                    61:f6:75:fb:57:82:5d:26:9f:53:00:ac:c1:10:97:
                    a0:1a:84:bb:23:18:63:ec:a9:49:e3:39:26:f0:5a:
                    11:4d:27:d9:d6:a8:7f:8f:dc:29:30:67:c4:de:2b:
                    1d:e2:a9:4a:95:1c:bc:98:ae:ff:dd:06:ad:e0:76:
                    d7:50:d1:30:c2:f3:af:af:3b:8f:a4:2f:c9:ac:a5:
                    f6:18:3d:cc:bf:74:69:e0:c3:70:2f:9b:74:59:da:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E0:95:9D:EB:F8:C4:98:1F:BB:D5:05:9B:7D:4D:1D:3D:A4:9F:14
            X509v3 Authority Key Identifier:
                keyid:B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31312e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e9:bb:e7:b3:d8:57:2a:57:22:36:4a:16:a2:76:f9:63:7f:
         ef:cb:f1:d6:80:45:80:a8:b8:97:0e:20:2d:7a:69:de:c5:5c:
         c9:b9:8f:b7:d5:78:9a:ab:78:ba:21:60:d3:a1:e9:33:21:9d:
         8c:fd:aa:1c:fd:ec:59:9d:c2:59:3b:81:6c:2f:9e:e9:63:65:
         a2:2e:1f:ea:e1:95:2e:1d:a0:ca:93:78:be:34:7a:65:c9:3d:
         e7:f7:78:b7:5b:f2:03:70:7a:6c:38:f6:70:a6:b9:18:fd:61:
         75:32:2a:50:36:7d:49:75:09:14:0f:ee:3f:b4:ef:fa:68:c2:
         51:5c:04:d7:7c:81:3a:32:57:c5:4e:5f:91:22:42:5d:13:6d:
         2f:40:8d:80:0e:ec:de:86:82:b6:59:d0:2e:1e:57:37:0d:3d:
         af:0e:28:b7:5b:40:b4:95:51:20:88:cf:9d:41:8d:28:12:aa:
         ba:34:46:10:18:3d:9d:84:d4:60:7b:51:df:2e:7d:44:84:cc:
         fd:71:2a:1e:71:ce:35:f0:f8:b0:b5:60:02:90:dd:9e:32:8a:
         c4:77:05:0d:6f:e2:cb:fb:30:51:98:e7:d9:d1:de:29:67:4b:
         b2:90:82:80:0b:32:7b:89:fc:a7:a1:a2:16:5c:aa:d7:d2:3e:
         fc:28:70:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:50 2026 by rpki-client