Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa
File:                     3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (raw, json)
Hash identifier:          oRViKlwXLb62v1XHH/P9v9PE35BuLaTpbEgB9nVLGXo=
Subject key identifier:   35:4F:EA:BC:86:FC:C3:7D:0D:B2:19:94:05:EB:3B:59:5B:B1:48:11
Certificate issuer:       /CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14
Certificate serial:       4A4E51377B025574B86CAACAEC2FBD3B7B928B1C
Authority key identifier: C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa
Signing time:             Sun 03 May 2026 02:20:30 +0000
ROA not before:           Sun 03 May 2026 02:15:30 +0000
ROA not after:            Sun 02 May 2027 02:20:30 +0000
asID:                     149315
IP address blocks:        103.184.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl
                          rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4e:51:37:7b:02:55:74:b8:6c:aa:ca:ec:2f:bd:3b:7b:92:8b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14
        Validity
            Not Before: May  3 02:15:30 2026 GMT
            Not After : May  2 02:20:30 2027 GMT
        Subject: CN=354FEABC86FCC37D0DB2199405EB3B595BB14811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0d:db:62:7c:64:99:a7:7b:9b:fb:4f:04:cc:
                    39:0d:4a:4f:17:4f:a8:c5:9a:e0:6c:c7:e7:2a:68:
                    02:cb:dc:0f:91:d7:3c:e5:ef:20:b4:92:af:90:b9:
                    c4:2f:54:69:0f:7b:78:f2:48:13:c9:dd:88:9a:d3:
                    3d:b8:9b:77:e0:e6:0f:e5:8d:65:6f:71:c4:c6:bf:
                    e0:70:b6:ee:44:08:7c:56:f4:55:18:ee:b2:9e:00:
                    38:65:eb:ee:20:11:a8:fe:f0:76:77:53:8a:39:0b:
                    28:c2:9a:23:22:f5:b3:ec:14:51:bc:e7:41:cc:6d:
                    b8:29:4f:7b:9a:e4:17:f4:86:f5:ac:79:18:e2:00:
                    80:50:90:89:a3:ad:50:63:8a:c3:65:ca:b2:17:cc:
                    dd:c2:78:18:b5:e9:33:1b:c7:61:06:46:72:03:9c:
                    73:10:88:70:4e:aa:3b:9b:78:6d:de:a7:cd:92:cc:
                    d9:b3:7e:20:32:d3:e0:80:b3:32:e5:fa:47:b1:69:
                    c9:9f:19:18:47:f0:f7:db:6e:6f:31:7e:da:a2:2b:
                    84:37:15:75:1a:a9:83:6a:32:cd:53:03:ec:76:d1:
                    a1:1f:92:28:f9:17:b8:d4:02:fc:69:29:73:8b:ba:
                    8a:64:c6:a5:14:0d:14:1c:72:dc:44:97:b9:94:24:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4F:EA:BC:86:FC:C3:7D:0D:B2:19:94:05:EB:3B:59:5B:B1:48:11
            X509v3 Authority Key Identifier:
                keyid:C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:1a:01:b8:19:a6:fd:5e:76:89:29:36:63:71:47:68:e4:
         e9:25:92:5f:3b:8f:5a:22:9b:2b:3d:43:59:6c:35:c7:74:6b:
         db:37:bc:d9:f3:0c:9e:73:62:25:7f:7b:77:35:44:9b:2f:ca:
         30:2e:b9:d7:e6:f6:bf:d5:7f:d5:2c:85:9a:e7:d9:19:10:db:
         6b:09:2c:d8:a8:f1:81:6b:f0:5e:60:f8:e9:f0:0e:1b:06:a3:
         5e:4f:61:84:41:5e:e2:be:88:d2:ff:4a:6e:3e:03:28:ce:f7:
         15:b9:dd:8d:ab:5e:eb:0f:cb:2f:12:5c:ff:be:76:84:a3:84:
         b3:f9:7d:9f:73:a8:2e:7e:ff:0e:13:cc:6a:aa:ed:f3:ad:d8:
         34:7e:0b:f3:78:5e:44:62:c0:5f:3b:44:1a:ae:75:85:1a:b4:
         24:8c:80:36:f7:97:8c:ef:61:12:4d:bf:2b:14:45:8b:0e:b0:
         40:eb:ce:e6:a4:05:15:64:68:30:74:93:02:b8:40:75:d1:94:
         8b:87:1f:ec:a6:f1:5e:2a:31:eb:e9:7c:6a:6d:61:be:00:7a:
         01:14:c9:9e:a1:25:12:5a:ce:c4:77:45:3a:b5:1d:c7:28:17:
         61:01:f2:9b:e8:70:eb:39:16:1d:db:76:06:4b:0f:62:d4:03:
         e7:a6:35:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:41 2026 by rpki-client