Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          K3OLubUlACzscrRuEaqGQ8Mg86bkVIp+TswVbW3m0Us=
Subject key identifier:   20:D9:1E:14:6B:B1:93:A0:85:D0:F0:EB:F3:1D:17:D6:2A:CA:1C:B1
Certificate issuer:       /CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE
Certificate serial:       1C7CDA63CB8EE522963C7DC65E81FF567A548CE5
Authority key identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 02:30:47 +0000
ROA not before:           Sun 03 May 2026 02:25:47 +0000
ROA not after:            Sun 02 May 2027 02:30:47 +0000
asID:                     135478
IP address blocks:        103.129.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl
                          rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7c:da:63:cb:8e:e5:22:96:3c:7d:c6:5e:81:ff:56:7a:54:8c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE
        Validity
            Not Before: May  3 02:25:47 2026 GMT
            Not After : May  2 02:30:47 2027 GMT
        Subject: CN=20D91E146BB193A085D0F0EBF31D17D62ACA1CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:b4:55:eb:70:da:54:f9:df:bb:e1:c1:0c:
                    ef:65:11:d5:7a:05:be:0c:9d:90:f3:e1:39:82:70:
                    f5:65:93:b2:9c:d9:fa:e3:57:d4:8a:17:6d:39:3e:
                    9c:e9:cd:d4:47:b7:d4:e7:6d:9d:6c:84:49:17:2f:
                    09:50:4d:c1:77:6f:98:b4:87:2a:4e:bf:ee:50:00:
                    2a:d1:d7:da:92:8e:40:96:92:11:64:6c:32:eb:c4:
                    44:9e:86:43:bd:8e:1f:55:f2:67:f0:2b:0e:50:98:
                    35:5c:bb:f2:09:b8:f8:70:63:2e:9e:35:e6:b7:f7:
                    d9:1e:ba:64:27:39:14:9e:e0:ec:7f:49:e4:ae:81:
                    c7:01:34:ff:0b:30:bd:98:b6:2e:6d:bd:8e:82:22:
                    96:7a:32:c1:d9:48:e1:cf:34:a4:c8:b3:26:f8:41:
                    43:01:3d:29:e4:fe:30:b6:f3:90:c7:f6:e5:80:6d:
                    69:db:98:d1:e7:30:de:06:65:8c:7c:f3:35:3e:c1:
                    74:b2:b2:ba:39:52:9f:de:43:0e:1c:a9:9f:63:2a:
                    b7:b1:87:5f:3d:ff:5b:45:2d:a1:b1:d2:4c:35:eb:
                    6d:ee:c0:2e:ad:2b:2b:27:37:cb:b4:09:cf:69:ac:
                    46:c8:9c:da:ee:a7:92:fa:55:c8:d1:e2:e5:2f:cc:
                    10:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D9:1E:14:6B:B1:93:A0:85:D0:F0:EB:F3:1D:17:D6:2A:CA:1C:B1
            X509v3 Authority Key Identifier:
                keyid:A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:0c:c6:ec:68:41:7a:40:b6:45:af:c6:da:92:a3:0a:8e:
         29:43:b2:14:6d:2e:24:61:15:a7:c5:4f:d4:8a:70:fa:b1:02:
         a3:f3:51:0f:62:f4:bd:72:64:e1:08:30:e7:c6:8d:2f:ac:af:
         a3:42:5a:22:22:4c:05:a1:f7:1c:87:98:6e:ec:f8:48:c1:10:
         40:9b:ca:c6:55:c6:37:22:b6:f8:61:bf:9c:e7:33:f5:60:c1:
         41:42:4b:61:f4:79:3a:a2:66:fa:89:84:d3:34:21:63:55:45:
         d1:02:f3:46:8b:f6:d7:09:b4:03:0b:19:a3:3b:5a:c7:ad:24:
         a7:5a:5f:e9:8e:c2:df:80:70:30:f2:8d:49:a0:ee:ab:69:bf:
         6c:05:3d:fe:3f:fd:b1:9e:f4:28:79:c8:e8:be:32:4f:7a:6c:
         e8:a2:f7:c1:ff:66:48:94:d0:45:ad:0e:de:f2:e4:49:8c:38:
         32:9b:50:c3:86:73:60:7b:01:6b:03:1c:19:1d:3c:52:b7:a2:
         a9:1c:d5:93:30:04:0b:ec:0e:6c:9e:2f:08:93:bf:21:24:4c:
         b1:4a:0e:a5:9d:d8:81:28:b7:ff:e7:85:74:36:73:9b:fe:26:
         67:75:25:71:d4:ac:cb:19:25:7e:5f:04:48:ed:6f:30:9b:2e:
         f7:a6:e2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:10 2026 by rpki-client