Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa
File:                     3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa (raw, json)
Hash identifier:          QkPPeMA8Un2oI7NOUy6EySATK1nS2aw0ZjUaFx+fneU=
Subject key identifier:   1D:49:74:48:80:8D:82:59:4A:B7:0C:E8:6F:1F:50:5F:ED:21:59:75
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       6C52DDD902F4BA3825ABD09B04145F404DE0A234
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:13 +0000
ROA not before:           Sun 03 May 2026 02:23:13 +0000
ROA not after:            Sun 02 May 2027 02:28:13 +0000
asID:                     139949
IP address blocks:        103.147.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:52:dd:d9:02:f4:ba:38:25:ab:d0:9b:04:14:5f:40:4d:e0:a2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:13 2026 GMT
            Not After : May  2 02:28:13 2027 GMT
        Subject: CN=1D497448808D82594AB70CE86F1F505FED215975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:9a:bc:3b:64:56:16:32:bc:ff:73:26:68:
                    c7:a9:bd:5e:af:44:59:34:ab:23:38:d1:57:f9:bd:
                    3d:e7:82:27:7e:a3:6a:ce:1c:69:2a:0e:fb:15:eb:
                    33:40:cb:ad:41:69:70:b9:db:7a:7d:f8:79:a6:a3:
                    7e:3a:82:36:1f:91:61:b7:96:95:d1:4d:d0:37:ca:
                    00:b5:84:01:e3:09:9b:6d:bc:5e:2c:db:dd:82:7d:
                    6a:f9:b8:7f:9e:b0:fb:8f:80:ea:63:1a:51:14:c3:
                    d5:47:ac:87:02:0b:69:eb:49:d1:73:6f:6f:3f:8f:
                    c1:5e:db:90:04:46:75:bc:52:93:5d:45:75:b4:e1:
                    04:61:1d:34:78:b5:23:4c:b6:3b:b2:f2:06:4f:6c:
                    71:99:08:43:45:56:09:f4:b4:eb:45:5a:3a:f0:29:
                    d3:eb:8b:fe:53:8d:a5:19:18:f4:30:49:15:e0:a0:
                    a6:65:ac:26:a2:b2:80:d4:b0:0a:80:cc:06:fe:8e:
                    0d:46:d7:fb:5d:8d:d8:ab:e1:4a:72:e7:24:cb:a6:
                    88:41:f5:f9:61:47:db:a7:56:5d:7f:3c:e5:05:d7:
                    32:fe:45:d7:3e:92:28:5f:17:03:d7:e5:45:09:6d:
                    47:84:3d:b2:7e:74:2b:80:94:00:0f:d3:62:c7:ab:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:49:74:48:80:8D:82:59:4A:B7:0C:E8:6F:1F:50:5F:ED:21:59:75
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:61:f8:c8:d5:18:2a:57:e5:0c:95:07:2b:98:15:f2:57:71:
         a8:b0:db:80:be:ff:86:56:00:34:a7:22:ab:97:83:39:ba:67:
         9c:2d:b0:a8:af:73:e4:d8:b8:fc:87:da:02:c0:6a:f7:8a:07:
         34:c9:86:a9:c3:77:1a:52:90:1c:f3:d7:3f:55:fd:7c:92:e3:
         9b:d2:65:4d:0e:78:59:9d:f3:be:de:1b:6e:70:6c:99:47:e7:
         71:e6:b3:41:79:e2:de:78:77:66:3c:cf:9e:93:6c:eb:62:fd:
         e7:72:94:2b:a4:a9:33:a7:76:fc:6e:3f:83:1d:7f:74:58:cd:
         68:aa:f1:27:c8:ac:a3:87:70:49:7a:14:ad:5f:0f:9e:fe:51:
         55:68:1e:f5:f3:65:92:78:50:91:80:a0:a2:ad:af:b5:36:07:
         0d:2f:31:9d:d6:7c:16:6d:ad:13:9c:dc:47:79:71:40:cd:80:
         d9:ca:05:98:12:14:af:4a:ed:db:71:b5:87:5d:5a:cb:81:02:
         bf:c4:70:d1:2b:97:98:e1:0f:c7:e4:87:c6:21:11:be:27:5d:
         c7:a5:a4:4e:cd:c1:6a:60:7a:8b:9a:7c:d4:83:25:07:62:b5:
         15:48:ad:dd:dd:13:ae:76:db:5f:e8:3f:fb:24:3f:ac:ce:a5:
         03:d0:ab:09
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbFLd2QL0ujglq9CbBBRfQE3gojQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2NjYxQUFBREUyQzYw
MUQwNjRGMDAeFw0yNjA1MDMwMjIzMTNaFw0yNzA1MDIwMjI4MTNaMDMxMTAvBgNV
BAMTKDFENDk3NDQ4ODA4RDgyNTk0QUI3MENFODZGMUY1MDVGRUQyMTU5NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tpq8O2RWFjK8/3MmaMepvV6v
RFk0qyM40Vf5vT3ngid+o2rOHGkqDvsV6zNAy61BaXC523p9+Hmmo346gjYfkWG3
lpXRTdA3ygC1hAHjCZttvF4s292CfWr5uH+esPuPgOpjGlEUw9VHrIcCC2nrSdFz
b28/j8Fe25AERnW8UpNdRXW04QRhHTR4tSNMtjuy8gZPbHGZCENFVgn0tOtFWjrw
KdPri/5TjaUZGPQwSRXgoKZlrCaisoDUsAqAzAb+jg1G1/tdjdir4Upy5yTLpohB
9flhR9unVl1/POUF1zL+Rdc+kihfFwPX5UUJbUeEPbJ+dCuAlAAP02LHq2FxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUHUl0SICNgllKtwzobx9QX+0hWXUwHwYDVR0j
BBgwFoAUCgJEYv/afibl02Zhqq3ixgHQZPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2RlZGMwMzMtY2Q0ZC00NjIwLTkzNzItZTZlMDM5ZmMwNmI5LzAvMEEwMjQ0NjJG
RkRBN0UyNkU1RDM2NjYxQUFBREUyQzYwMUQwNjRGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTAyNDQ2MkZGREE3RTI2RTVEMzY2NjFBQUFERTJDNjAxRDA2
NEYwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05
MzcyLWU2ZTAzOWZjMDZiOS8wLzMxMzAzMzJlMzEzNDM3MmUzNTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5M0MA0GCSqG
SIb3DQEBCwUAA4IBAQAAYfjI1RgqV+UMlQcrmBXyV3GosNuAvv+GVgA0pyKrl4M5
umecLbCor3Pk2Lj8h9oCwGr3igc0yYapw3caUpAc89c/Vf18kuOb0mVNDnhZnfO+
3htucGyZR+dx5rNBeeLeeHdmPM+ek2zrYv3ncpQrpKkzp3b8bj+DHX90WM1oqvEn
yKyjh3BJehStXw+e/lFVaB7182WSeFCRgKCira+1NgcNLzGd1nwWba0TnNxHeXFA
zYDZygWYEhSvSu3bcbWHXVrLgQK/xHDRK5eY4Q/H5IfGIRG+J13HpaROzcFqYHqL
mnzUgyUHYrUVSK3d3ROudttf6D/7JD+szqUD0KsJ
-----END CERTIFICATE-----
Generated at Wed May 13 02:59:28 2026 by rpki-client