Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa
File:                     3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (raw, json)
Hash identifier:          yjf0/JJFQABhzT0gnDsCQ/oag0HSQ3URmpUm4ciNYx4=
Subject key identifier:   3A:32:B6:A2:50:31:53:AF:66:85:31:52:50:D0:08:0E:D2:AF:0F:18
Certificate issuer:       /CN=872439399C3ADEB5FD342E7B6286CED219899CA2
Certificate serial:       5D3F46F99C7EBB03B4D687A4FB4316C3666FEDAE
Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa
Signing time:             Sun 03 May 2026 02:31:53 +0000
ROA not before:           Sun 03 May 2026 02:26:53 +0000
ROA not after:            Sun 02 May 2027 02:31:53 +0000
asID:                     141078
IP address blocks:        103.155.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl
                          rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3f:46:f9:9c:7e:bb:03:b4:d6:87:a4:fb:43:16:c3:66:6f:ed:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2
        Validity
            Not Before: May  3 02:26:53 2026 GMT
            Not After : May  2 02:31:53 2027 GMT
        Subject: CN=3A32B6A2503153AF6685315250D0080ED2AF0F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:45:1b:9a:32:59:f4:53:0f:00:4f:05:0d:
                    1f:d6:fd:d5:7c:11:94:81:25:4e:24:d2:aa:8b:11:
                    1b:18:79:3b:cb:bf:68:b3:50:a9:8e:ef:ff:c9:54:
                    97:98:46:c4:0c:cc:9b:2d:2b:a9:73:8d:ca:f4:dc:
                    70:3b:3b:04:94:55:35:e4:18:9d:de:b5:68:90:c4:
                    09:ed:5c:10:f1:4f:d0:65:f9:77:1e:5c:d6:6b:27:
                    9e:7b:be:21:b7:52:ab:e6:a6:b7:e2:25:65:55:cb:
                    a4:19:39:c0:74:89:4c:21:35:9a:ba:75:f6:3b:a0:
                    5a:7b:bc:bb:1a:1c:5e:23:cb:db:be:18:86:4a:7c:
                    a2:d9:b6:66:7e:9e:f6:ab:d8:b0:20:99:8e:4b:95:
                    3f:2b:09:79:da:2e:db:cb:0f:9e:82:58:7f:3d:f4:
                    a5:ed:b5:09:7f:df:46:85:a1:0f:e6:ec:11:20:61:
                    3b:68:28:ca:0d:6c:b9:54:26:27:b2:b4:47:83:ff:
                    32:c6:c2:3b:4e:75:33:19:6b:75:df:55:7c:72:eb:
                    ac:63:7b:e6:bf:9b:ee:75:53:43:cf:0c:a8:14:56:
                    1c:f8:4f:dc:fc:f2:a8:79:99:c4:f2:1e:93:ee:db:
                    0f:a3:80:33:24:70:6c:96:40:f9:ed:92:df:b8:a4:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:32:B6:A2:50:31:53:AF:66:85:31:52:50:D0:08:0E:D2:AF:0F:18
            X509v3 Authority Key Identifier:
                keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:01:f8:da:9c:62:4e:67:df:7f:db:e4:bd:c1:09:bc:f3:eb:
         4a:76:1e:3e:4b:b2:ea:2c:33:f4:27:15:18:b3:d6:9c:8b:2f:
         6a:a8:08:d3:5c:08:c8:16:2b:40:03:d4:b4:76:e3:1c:3e:c3:
         ed:21:06:2b:18:d2:0f:60:7c:f1:57:a7:64:d8:d8:a4:a0:d9:
         33:c3:ae:20:18:73:49:4f:a2:01:03:b0:f3:26:b9:cc:c9:17:
         b7:7a:25:59:06:fe:bd:c4:89:2c:c1:30:40:b7:6f:d5:99:fc:
         85:ff:81:12:ee:e5:7d:f7:f2:65:bd:39:22:2e:ff:80:0d:f6:
         bf:b0:79:5a:27:58:6f:fe:5f:c5:49:af:4d:e4:b9:2e:14:9d:
         9a:ca:fe:9b:08:40:79:b9:af:78:16:54:10:5f:73:f4:f3:34:
         15:a6:e1:d5:69:14:5a:e5:40:70:a6:23:20:c8:9b:77:24:bd:
         63:2e:98:6b:6a:de:d2:7d:36:2f:0e:d4:22:c3:76:0c:70:c2:
         68:c4:10:37:90:1c:1d:a1:63:49:ad:2e:fc:69:55:c9:e1:2a:
         71:f6:2c:57:e0:3a:6a:ac:7b:74:6e:38:46:1c:04:e0:d6:8a:
         30:89:4c:70:61:58:04:c4:f3:08:e1:34:15:49:0f:d8:83:bb:
         3e:74:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:59 2026 by rpki-client