Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa
File:                     3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (raw, json)
Hash identifier:          qMA2mvuDFglgzD+HOLkg38KkeE2E7iG0DYOT5BZeHio=
Subject key identifier:   32:95:EA:ED:FA:84:15:C2:AA:26:39:23:C7:6B:4D:3F:9C:95:87:8A
Certificate issuer:       /CN=0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958
Certificate serial:       616E0C8360FFF387F65CE3015F6D1865D20E33ED
Authority key identifier: 0F:74:5B:0D:4D:2F:7E:AF:8F:AF:5D:92:00:EE:EC:8E:E1:03:69:58
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa
Signing time:             Sun 03 May 2026 02:33:55 +0000
ROA not before:           Sun 03 May 2026 02:28:55 +0000
ROA not after:            Sun 02 May 2027 02:33:55 +0000
asID:                     139971
IP address blocks:        103.147.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl
                          rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6e:0c:83:60:ff:f3:87:f6:5c:e3:01:5f:6d:18:65:d2:0e:33:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958
        Validity
            Not Before: May  3 02:28:55 2026 GMT
            Not After : May  2 02:33:55 2027 GMT
        Subject: CN=3295EAEDFA8415C2AA263923C76B4D3F9C95878A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:82:59:59:75:89:4a:02:14:bb:f1:a0:c0:
                    f9:26:aa:cf:78:90:ec:3b:58:bd:f3:a9:60:c7:85:
                    26:ea:74:eb:f6:a0:a0:7e:f3:71:7b:2e:bf:bd:d4:
                    e2:03:e2:9b:f2:a0:4e:7c:1c:ea:18:c8:62:38:e1:
                    5a:1d:19:08:a9:87:e2:b6:86:f7:57:59:26:d4:2f:
                    cf:32:d0:e4:6b:2f:cf:97:a1:c9:36:46:b3:6f:3a:
                    61:3f:17:a1:3e:0b:f6:03:37:ca:94:83:29:43:98:
                    0a:2a:24:63:fa:92:b6:cf:71:78:0d:f1:cb:fb:d6:
                    5a:f4:df:65:0d:17:d8:64:ec:a0:56:69:09:42:08:
                    33:6d:95:dd:d5:36:96:03:bc:7a:d7:0e:3a:8f:42:
                    12:68:8d:1e:a2:b7:8d:8d:9c:23:57:43:12:d1:6e:
                    60:1d:4a:c8:74:91:3b:e6:a7:d0:d6:ad:c3:bc:62:
                    29:a6:80:c3:7d:83:ea:60:2b:f7:2c:0f:97:9d:f2:
                    85:2e:26:cc:a7:47:a7:89:3a:94:b6:1e:82:16:fe:
                    d0:e3:32:83:d6:4d:06:5e:4e:60:04:e5:86:17:a3:
                    1b:54:fd:2e:ee:69:94:bc:52:cd:f1:2e:f4:d9:94:
                    d2:2c:ed:84:43:6b:c3:ec:61:62:07:16:69:b7:bf:
                    c6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:95:EA:ED:FA:84:15:C2:AA:26:39:23:C7:6B:4D:3F:9C:95:87:8A
            X509v3 Authority Key Identifier:
                keyid:0F:74:5B:0D:4D:2F:7E:AF:8F:AF:5D:92:00:EE:EC:8E:E1:03:69:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:18:b8:f8:8b:3f:34:63:36:95:25:fd:63:2c:ef:54:19:e8:
         07:d3:a6:1c:e9:f7:e2:e1:7c:c1:08:16:e0:79:df:bf:55:0f:
         7c:30:69:ed:f3:85:08:97:7e:54:98:16:2f:52:23:cf:a0:90:
         e5:84:ec:7e:bc:a6:d8:cd:28:68:8d:a4:e2:c3:45:77:84:87:
         a5:ca:8e:19:3a:80:bc:b0:af:52:72:de:1d:ef:c5:1d:53:4e:
         f8:0a:dc:97:9e:61:bc:86:ae:3b:e9:d7:ed:72:b3:b3:7f:57:
         52:4b:ae:a0:67:60:b1:b1:1e:b1:f7:40:2b:50:5a:3f:3c:ce:
         d9:04:06:86:db:5e:12:e5:db:4d:a0:d9:96:87:69:02:ca:6e:
         34:4b:6f:c7:02:9d:d0:ad:d7:2a:ad:0f:a0:db:57:56:c8:03:
         c2:dd:83:69:43:95:f5:af:73:d5:c4:72:67:84:d4:fd:f1:fb:
         16:55:e0:a6:20:5f:24:de:6d:ae:1b:6c:f5:6f:fe:1a:3a:30:
         27:f3:f0:27:59:f8:98:d3:d0:be:f0:f0:4c:02:91:2b:18:cd:
         97:d6:6b:2b:14:68:38:82:12:a5:83:fa:26:85:10:df:88:d7:
         71:1a:e4:f0:15:db:17:71:d6:c9:f2:da:2f:1c:5e:92:5c:99:
         ee:b3:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:09 2026 by rpki-client