Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3130332e34372e3133332e302f32342d3234203d3e203633383539.roa
File:                     3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier:          HnFnN/gwcfh/Pmdxl8AW6aaxwuqBWxhzBe0aqoQ5fWA=
Subject key identifier:   67:72:0E:96:2E:7C:C6:D1:83:59:5B:42:43:88:14:0A:C5:08:51:37
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       4965339C27E0010D6794EB64FB8141A27D42B4E7
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3130332e34372e3133332e302f32342d3234203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:12 +0000
ROA not before:           Sun 03 May 2026 02:22:12 +0000
ROA not after:            Sun 02 May 2027 02:27:12 +0000
asID:                     63859
IP address blocks:        103.47.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:65:33:9c:27:e0:01:0d:67:94:eb:64:fb:81:41:a2:7d:42:b4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:12 2026 GMT
            Not After : May  2 02:27:12 2027 GMT
        Subject: CN=67720E962E7CC6D183595B424388140AC5085137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:45:20:0a:bd:84:99:08:1a:b0:27:36:35:
                    a8:6a:68:58:19:da:93:cb:fe:d2:e4:a4:ca:da:74:
                    16:ab:95:3b:a9:29:d5:08:f2:40:fc:01:9c:9a:14:
                    30:81:09:de:26:82:bf:11:63:12:be:42:f3:f3:62:
                    56:35:74:ef:82:55:f9:77:81:21:9c:2f:16:dd:d4:
                    70:66:08:d2:74:cd:a9:14:a5:76:12:50:11:47:a9:
                    82:79:14:a2:07:04:4c:1f:d0:db:d8:18:d4:c4:03:
                    0a:b5:7e:93:b4:5a:3d:e9:8a:5d:a8:fa:26:62:48:
                    79:15:fe:98:c3:8e:76:7a:cd:3e:a1:66:69:04:6b:
                    e4:1b:2b:51:b9:22:fc:7e:7a:0a:af:34:78:70:2d:
                    b4:66:51:af:60:d0:45:35:bd:17:86:7f:0f:c2:fc:
                    55:ad:7b:d4:57:19:19:29:90:8f:1d:65:33:11:92:
                    a0:97:dc:8f:48:a8:7f:7c:f2:8b:e0:77:7e:59:6e:
                    ad:4e:8a:4b:e6:71:4b:58:b7:ed:e9:b8:ba:79:d7:
                    53:ef:44:4b:0b:80:52:b6:22:ca:6f:de:56:b4:89:
                    0e:3a:cd:be:94:e4:07:ee:09:56:3c:0d:26:64:a7:
                    0f:fe:e3:86:da:4d:1b:05:a2:1c:1b:6c:17:bf:41:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:72:0E:96:2E:7C:C6:D1:83:59:5B:42:43:88:14:0A:C5:08:51:37
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3130332e34372e3133332e302f32342d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ca:ba:a9:f7:cf:02:44:35:9d:73:97:d5:bd:3d:9d:55:d8:
         59:66:d3:03:3b:25:e9:6b:40:65:ce:c4:1b:f7:6d:dd:aa:6e:
         2f:25:3a:e2:c2:0a:0c:db:d3:dc:3b:ea:dc:81:26:f4:98:1d:
         37:69:5f:0b:e3:c5:5b:be:68:a5:4c:c7:96:1d:3c:be:6f:bd:
         97:ff:78:e1:ea:28:55:af:f2:6b:b1:aa:f2:7f:5d:15:bc:dd:
         c9:a9:c3:fc:94:c2:97:a1:11:d4:db:f1:eb:e3:20:05:fd:8e:
         14:d2:6e:44:d5:6e:e5:4d:5a:c9:12:5a:cd:5a:5b:bc:d8:c3:
         7b:33:cd:16:f2:e2:97:fd:41:56:62:7b:12:b2:d0:39:5a:77:
         24:46:52:37:05:78:33:73:0a:c4:48:44:2f:ac:d4:49:64:61:
         d2:c1:12:35:4d:99:20:4b:fe:82:73:ed:41:b7:1c:3d:0c:7c:
         bd:0a:6c:d5:16:ef:ad:84:b6:e7:f4:a0:a4:d8:5a:ba:65:d5:
         78:e0:2f:27:42:96:5c:0c:9c:66:3b:f2:70:05:0b:44:fb:6b:
         c9:cd:c6:f8:be:d2:cd:13:5b:98:6c:36:5d:da:e2:67:1d:a7:
         9d:b1:c5:05:43:eb:2d:4d:65:b4:4d:b8:66:79:83:74:e4:3f:
         0c:9c:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:28 2026 by rpki-client