Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa
File:                     3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (raw, json)
Hash identifier:          dc+32akDqD+whWWKGoW6auMBb4nmyq1TxJGgB+DF/Mw=
Subject key identifier:   DD:F9:A4:03:7E:61:83:C2:FF:14:32:79:F4:5A:4A:0E:39:AE:09:C4
Certificate issuer:       /CN=65177A3236E4CDE9DEABA6D24D81798C0342B359
Certificate serial:       24D5B00CED1CA582B25C0B642135FB2B2B1A0EE4
Authority key identifier: 65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa
Signing time:             Sun 03 May 2026 02:28:53 +0000
ROA not before:           Sun 03 May 2026 02:23:53 +0000
ROA not after:            Sun 02 May 2027 02:28:53 +0000
asID:                     150186
IP address blocks:        103.146.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl
                          rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d5:b0:0c:ed:1c:a5:82:b2:5c:0b:64:21:35:fb:2b:2b:1a:0e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65177A3236E4CDE9DEABA6D24D81798C0342B359
        Validity
            Not Before: May  3 02:23:53 2026 GMT
            Not After : May  2 02:28:53 2027 GMT
        Subject: CN=DDF9A4037E6183C2FF143279F45A4A0E39AE09C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:ce:ae:99:3e:45:f3:25:1a:ae:e4:be:a5:
                    55:84:ae:30:97:e6:91:aa:9d:8e:56:d5:a2:f0:54:
                    87:1a:bd:31:d4:68:5a:06:07:45:a9:55:ca:5b:ce:
                    ad:32:91:40:b6:29:29:c9:23:b8:e3:54:31:43:3c:
                    8f:d6:91:4d:d2:12:a8:dc:07:c0:36:e7:03:35:a9:
                    f1:ef:30:bc:c7:13:ce:3c:72:92:0d:f8:83:47:07:
                    43:9c:ff:ff:6c:61:f1:69:2e:d1:c7:79:5e:04:ae:
                    64:ee:7d:ff:86:d5:f2:95:dc:ab:ba:0f:06:bd:89:
                    57:dc:e5:7b:e4:3e:16:e3:79:7f:e5:6c:06:1b:dc:
                    3f:e1:2d:ec:ea:61:8f:db:2c:45:9a:47:43:d9:7c:
                    3d:be:ea:ad:2f:f5:c5:25:af:84:76:73:15:cf:8e:
                    82:d0:86:62:30:0b:c7:b5:c0:2c:e8:fb:35:af:43:
                    6c:dd:94:85:ae:6f:11:b4:c8:9c:b8:3c:c5:ac:ea:
                    52:5b:b4:27:1b:53:07:64:da:a7:0b:73:91:f9:97:
                    d8:7c:09:4b:11:e3:de:f7:80:78:a3:12:48:cb:cb:
                    f2:de:2c:8d:e3:45:83:37:dd:6b:94:cc:49:66:44:
                    e3:ef:c1:3b:c1:7f:43:7d:b0:bc:a4:0f:82:ae:dd:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F9:A4:03:7E:61:83:C2:FF:14:32:79:F4:5A:4A:0E:39:AE:09:C4
            X509v3 Authority Key Identifier:
                keyid:65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:83:1a:19:41:be:90:35:17:0e:1a:1d:ad:ab:ab:ca:b6:b2:
         04:09:b0:a2:fe:02:48:58:91:8b:b7:46:d0:78:d1:bb:0a:2f:
         6d:47:c4:6a:85:01:28:f8:1d:3f:9c:59:d6:f3:92:85:51:26:
         68:1f:ae:a7:4e:02:61:d0:23:07:72:58:09:71:35:fd:63:3a:
         d7:9a:bf:b5:cb:aa:ea:fc:64:fd:0e:7d:d6:64:e4:ea:13:68:
         cf:ea:89:07:e7:83:3a:03:d3:cf:1f:fc:bf:30:c2:36:c8:65:
         87:19:5f:e5:17:de:a0:17:8d:1f:8b:85:c0:c4:4a:ba:47:eb:
         6e:31:f5:87:ca:34:57:15:c7:a9:40:d1:0f:d9:be:7e:b5:ba:
         76:ea:98:24:0f:b7:a8:7a:7f:97:1a:0c:b4:b2:c8:4d:f5:1e:
         d6:aa:e2:97:29:40:67:ea:e4:fe:b8:5a:9f:a9:2d:18:4b:93:
         ac:7d:9a:7d:c3:1d:89:5e:95:a0:fc:a8:94:d2:03:2d:ae:ff:
         88:48:42:2c:63:59:3b:0a:c9:78:2e:80:bb:b4:45:c5:ec:b6:
         b3:c4:2d:2c:6a:3a:28:90:5d:0d:51:10:b1:a9:c0:8a:7a:fd:
         9a:ba:95:c5:20:bf:b8:92:fe:e9:40:91:1e:4e:97:3e:98:ef:
         5b:b5:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:02 2026 by rpki-client