Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32332d3233203d3e20313530343630.roa
File:                     3130332e34362e342e302f32332d3233203d3e20313530343630.roa (raw, json)
Hash identifier:          Zw4QmhGoJFSvupLpsnKhkJ+LH7pcQWGQYF42nA48zgM=
Subject key identifier:   BD:EF:9B:C2:BC:20:A8:A3:C0:B1:86:62:A9:61:24:A4:46:0C:AD:38
Certificate issuer:       /CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D
Certificate serial:       61F8D6E89300885C385C439A8510A10C87793BD4
Authority key identifier: 4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32332d3233203d3e20313530343630.roa
Signing time:             Sun 03 May 2026 02:31:33 +0000
ROA not before:           Sun 03 May 2026 02:26:33 +0000
ROA not after:            Sun 02 May 2027 02:31:33 +0000
asID:                     150460
IP address blocks:        103.46.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl
                          rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f8:d6:e8:93:00:88:5c:38:5c:43:9a:85:10:a1:0c:87:79:3b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D
        Validity
            Not Before: May  3 02:26:33 2026 GMT
            Not After : May  2 02:31:33 2027 GMT
        Subject: CN=BDEF9BC2BC20A8A3C0B18662A96124A4460CAD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:16:df:2c:a0:40:70:3b:56:56:79:8f:94:
                    97:11:7c:e2:c3:d1:91:a8:8a:96:95:96:a5:4a:da:
                    ad:db:cd:85:90:a6:12:88:e0:55:eb:1e:4f:ef:bd:
                    22:79:19:c7:27:a8:4b:bd:8c:d1:53:b3:a4:27:50:
                    bc:96:e0:67:ed:f3:f1:6f:f4:59:dd:f4:1b:02:7b:
                    93:ef:6e:6b:b5:9a:d1:54:a3:33:03:7b:46:3d:67:
                    0d:35:6f:ce:39:15:6a:2b:ee:88:a9:9c:b2:cc:96:
                    9b:81:da:7b:e6:7b:46:a9:13:88:2f:51:37:3b:55:
                    49:06:14:9a:83:3c:e5:7e:d4:12:59:04:63:39:67:
                    d4:8b:84:4b:f5:49:39:03:df:7e:dd:1f:bc:ae:b1:
                    d9:83:89:33:d9:23:11:ac:b1:20:23:68:cc:fd:01:
                    fa:6e:16:e2:7b:e3:4b:97:6b:7c:01:20:ce:02:d5:
                    bd:91:12:8a:73:7d:bd:ca:40:36:3d:96:3b:86:e1:
                    5f:c5:b5:c0:9a:db:44:ef:23:9a:cf:b5:fb:47:b8:
                    1e:08:c2:2b:c1:cf:65:d0:2a:63:77:c7:8d:09:ff:
                    08:0e:92:9c:16:79:06:d8:07:1d:06:d8:07:05:13:
                    58:aa:64:11:ca:12:76:14:1f:65:8f:7c:69:e2:79:
                    07:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EF:9B:C2:BC:20:A8:A3:C0:B1:86:62:A9:61:24:A4:46:0C:AD:38
            X509v3 Authority Key Identifier:
                keyid:4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32332d3233203d3e20313530343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:b3:82:1a:02:93:28:52:98:77:75:fe:ac:31:ee:17:d4:4d:
         64:cb:9d:75:b0:f2:d9:5c:b7:90:88:80:bb:10:8d:5a:60:f6:
         21:f6:65:1b:a7:0e:45:5e:43:1b:a3:f9:45:d6:67:29:b7:4b:
         d9:fe:44:54:42:fd:d0:57:b3:a8:c9:0a:33:bc:d7:63:4a:af:
         c3:1f:f1:63:c5:ea:e2:72:2c:7b:4e:6a:88:f5:d9:d1:77:61:
         1e:a3:83:e3:a9:35:18:9e:1c:5c:ba:4c:cf:de:f9:50:48:4a:
         68:43:6b:6c:cc:41:8a:9c:b6:31:f0:61:b9:c8:89:f8:bf:26:
         e1:52:fd:64:5b:9c:cf:f1:e6:ba:dd:be:52:65:64:9d:25:24:
         3a:f6:72:90:25:71:fe:31:ba:45:96:cc:5f:56:b9:fe:28:12:
         c0:12:48:e5:fa:85:f6:e6:93:8c:1d:f0:08:6a:cb:80:1d:83:
         26:38:23:21:b8:46:46:4a:f3:e7:9f:fb:c3:6b:ba:bc:27:ee:
         4e:f8:77:c0:58:db:b9:82:5c:f9:0d:36:a6:c2:67:2d:b9:35:
         22:a2:ad:a9:08:f2:2c:a6:eb:a9:2b:dd:af:dd:88:7d:ad:a2:
         2c:8e:6a:84:ce:90:d0:91:b6:17:5f:7e:b0:26:89:0e:ee:10:
         3f:44:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:00:58 2026 by rpki-client