Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e352e302f32342d3234203d3e20313530343630.roa
File:                     3130332e34362e352e302f32342d3234203d3e20313530343630.roa (raw, json)
Hash identifier:          6Yw4zWSLXh3EP0vz7URtYM2sAyDkZxqfeg6Oy1ZSbCU=
Subject key identifier:   9A:59:E3:E8:91:0E:95:33:AC:03:FF:15:5A:D9:B9:D5:2A:7E:45:EF
Certificate issuer:       /CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D
Certificate serial:       01FD525D472328BDEEF7743486F1A5C63B12A545
Authority key identifier: 4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e352e302f32342d3234203d3e20313530343630.roa
Signing time:             Sun 03 May 2026 02:31:33 +0000
ROA not before:           Sun 03 May 2026 02:26:33 +0000
ROA not after:            Sun 02 May 2027 02:31:33 +0000
asID:                     150460
IP address blocks:        103.46.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl
                          rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fd:52:5d:47:23:28:bd:ee:f7:74:34:86:f1:a5:c6:3b:12:a5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D
        Validity
            Not Before: May  3 02:26:33 2026 GMT
            Not After : May  2 02:31:33 2027 GMT
        Subject: CN=9A59E3E8910E9533AC03FF155AD9B9D52A7E45EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:df:a9:80:38:eb:a3:2c:35:61:df:8e:03:
                    61:54:27:5b:03:18:7a:9c:9d:40:a3:a2:d4:1c:27:
                    62:28:66:8b:e6:ee:38:fc:f0:e2:74:44:09:cc:55:
                    4b:8c:22:98:35:20:3b:d4:38:68:69:9f:74:ed:fd:
                    b2:44:5d:59:b1:e5:b5:a2:4a:76:94:b3:95:93:b4:
                    b7:f9:5d:b2:bb:0e:4d:da:30:19:86:d5:e9:d9:9f:
                    90:a2:66:21:4c:32:33:27:a9:7a:57:e8:97:15:d6:
                    f5:fe:b7:aa:44:2a:c7:18:f1:0a:82:cb:13:f0:fe:
                    f7:a8:37:1f:55:d7:d2:06:04:4d:1c:e5:59:e0:0a:
                    7b:c1:38:31:13:ff:97:05:a7:56:50:fd:a4:df:75:
                    9b:2c:c9:48:5f:0e:96:90:96:3e:5e:d9:b5:16:93:
                    6a:ba:2e:4b:47:6c:40:7d:03:03:91:2e:6f:28:c1:
                    ca:01:63:13:85:8f:ae:de:f9:a6:8b:64:d9:f3:d6:
                    2d:d7:4d:fb:1b:f1:b1:b8:94:87:1a:13:6d:ee:90:
                    ab:24:2e:0f:9e:2d:68:2f:62:8d:81:a5:18:01:e7:
                    4b:9a:31:16:6a:dc:38:1b:63:bb:c7:e1:02:58:e2:
                    c1:8a:02:b4:19:44:36:91:92:ce:f4:a0:7c:2d:58:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:59:E3:E8:91:0E:95:33:AC:03:FF:15:5A:D9:B9:D5:2A:7E:45:EF
            X509v3 Authority Key Identifier:
                keyid:4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e352e302f32342d3234203d3e20313530343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b3:42:e9:69:e7:b2:64:fe:c4:d0:83:39:39:df:c2:6a:8c:
         04:6d:80:90:b6:8d:3b:c2:73:23:05:f6:ff:55:9f:9a:81:3a:
         40:71:b2:d0:df:09:30:31:d2:7b:e0:a5:8b:6a:25:fc:72:18:
         2d:48:81:de:ff:12:b0:09:4e:4c:84:51:fc:60:20:a8:8f:d6:
         7e:32:ed:e2:0a:90:a6:65:e5:70:e5:eb:02:7e:9d:28:ba:79:
         1c:39:fa:11:cc:a3:cd:6a:64:c4:89:fb:f8:10:6a:c1:db:4c:
         26:e9:23:d1:99:3e:65:28:c8:6f:9e:fb:4f:8c:a7:3e:03:4f:
         e3:42:98:17:83:f4:f1:6a:7b:59:68:82:ea:50:60:6b:dc:c1:
         82:70:98:c2:de:7a:36:c2:eb:91:7c:59:27:b8:4b:c1:7c:a9:
         91:48:27:45:55:15:74:64:61:3b:b6:14:f9:54:81:5d:e5:cc:
         66:5f:9b:1d:45:eb:ab:8e:83:5a:40:91:a7:06:ff:5d:29:8f:
         d1:33:d2:6e:22:84:67:14:08:d5:1c:4f:ef:4c:38:8a:de:e4:
         79:7a:06:46:c1:da:6c:f4:74:dd:2e:bf:42:f3:4b:30:0b:94:
         62:16:0e:1d:1d:79:93:13:44:be:ed:f8:fb:f2:b5:87:6b:16:
         d3:da:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:31 2026 by rpki-client