Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32342d3234203d3e20313530343630.roa
File:                     3130332e34362e342e302f32342d3234203d3e20313530343630.roa (raw, json)
Hash identifier:          1TQlSvM9bM0BPJInGgS17LfSaiZ9EQP3P7+JjRlSEnE=
Subject key identifier:   97:B4:39:6A:AB:2B:32:6D:42:C6:C3:CD:07:90:09:5D:02:7F:8D:3A
Certificate issuer:       /CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D
Certificate serial:       270A8E97D32BE7D029C6761EFAC21A46FFAD26B5
Authority key identifier: 4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32342d3234203d3e20313530343630.roa
Signing time:             Sun 03 May 2026 02:31:33 +0000
ROA not before:           Sun 03 May 2026 02:26:33 +0000
ROA not after:            Sun 02 May 2027 02:31:33 +0000
asID:                     150460
IP address blocks:        103.46.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl
                          rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0a:8e:97:d3:2b:e7:d0:29:c6:76:1e:fa:c2:1a:46:ff:ad:26:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D
        Validity
            Not Before: May  3 02:26:33 2026 GMT
            Not After : May  2 02:31:33 2027 GMT
        Subject: CN=97B4396AAB2B326D42C6C3CD0790095D027F8D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ed:4f:1c:82:6c:82:91:44:de:11:b1:91:5f:
                    7e:a3:6a:88:83:a4:3f:73:9f:6c:7f:43:ca:cb:22:
                    b1:21:60:6f:ad:a2:17:e0:80:8a:4e:99:2d:ef:c8:
                    5d:b5:92:df:81:54:34:54:c2:6b:96:da:a1:27:b3:
                    27:ff:16:90:32:15:2a:99:80:85:44:28:3b:4d:e7:
                    64:ab:4f:bf:46:73:3d:09:b1:bf:d1:16:c0:e1:2a:
                    88:e6:01:4c:6a:35:d3:15:b2:74:57:4d:23:ef:78:
                    d6:84:14:a8:97:88:ea:19:d8:46:30:a4:04:4e:a2:
                    a3:d5:71:26:d2:2c:09:7f:44:ea:2d:c5:5b:a9:8f:
                    65:19:2d:36:85:1d:6c:ab:cc:22:e2:c3:5f:de:b4:
                    70:32:c6:8b:fa:e5:81:80:05:8d:6f:ff:7a:59:2e:
                    32:ac:a2:fd:b2:01:5c:d2:38:7f:00:05:62:93:a0:
                    2c:49:5d:ca:18:58:9e:0e:dd:9c:a5:25:52:6e:8f:
                    bb:66:e9:d0:0e:c0:4d:bf:6a:61:fe:6f:7b:4a:0d:
                    0d:19:cc:81:01:f7:f7:59:89:32:fa:2c:f8:5e:23:
                    11:bf:bc:86:4e:d8:6b:ec:a4:f1:db:8c:a2:7a:a5:
                    91:04:da:f2:ee:41:fe:a6:a3:14:ad:08:dd:f4:cd:
                    8a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B4:39:6A:AB:2B:32:6D:42:C6:C3:CD:07:90:09:5D:02:7F:8D:3A
            X509v3 Authority Key Identifier:
                keyid:4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32342d3234203d3e20313530343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:18:fe:57:6f:2e:28:6b:fe:f2:90:94:ad:55:e6:8e:27:45:
         15:e9:06:02:76:24:9c:9f:16:89:28:86:56:c4:df:15:cd:65:
         cc:48:6a:e4:08:86:0e:47:54:d5:13:20:3a:a1:70:4e:4d:2c:
         e4:88:51:ab:e8:6e:5c:98:ee:32:81:41:48:20:bb:86:0f:dc:
         43:64:14:14:7f:cd:14:c2:f6:a6:e0:6d:6e:99:5c:56:11:9a:
         8a:a0:0d:cd:8a:05:bc:ab:ef:28:06:4b:1d:66:f3:5b:1e:cc:
         6d:c7:27:7f:af:18:6f:d7:39:6b:68:60:a8:99:b4:05:46:63:
         fb:08:a1:00:49:3f:0a:20:dc:49:8d:99:7f:7c:24:18:03:a7:
         9c:5d:d1:1e:f6:a9:d1:b5:33:7c:df:4e:ce:e2:a8:ea:e1:70:
         4b:bf:5f:09:03:96:f9:2e:7d:37:79:a3:ec:76:57:68:b9:27:
         77:e1:49:78:d0:26:82:f2:d6:41:1f:ad:30:15:f3:06:86:52:
         a8:ab:6e:28:2e:54:d6:d7:f3:7c:c3:e0:d1:ba:c2:4d:2f:d1:
         a6:39:59:02:75:8f:be:78:65:91:59:01:40:6f:3a:ff:6f:3b:
         99:71:98:70:8c:0d:3a:03:3f:53:37:e9:ce:df:bc:dd:b5:ca:
         0a:66:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:05 2026 by rpki-client