Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa
File:                     3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (raw, json)
Hash identifier:          IoDA8uRnuH2Y6CGJmD83Fs8xZFkU0MuwdHuMYgo3MNI=
Subject key identifier:   C9:C6:0B:3F:4A:4D:48:2A:A0:7B:00:27:4A:32:A1:A7:69:68:80:E1
Certificate issuer:       /CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E
Certificate serial:       5B848104002E5B880E380755B8AF7207820852FD
Authority key identifier: 24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa
Signing time:             Sun 03 May 2026 02:37:46 +0000
ROA not before:           Sun 03 May 2026 02:32:46 +0000
ROA not after:            Sun 02 May 2027 02:37:46 +0000
asID:                     139995
IP address blocks:        103.148.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl
                          rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:84:81:04:00:2e:5b:88:0e:38:07:55:b8:af:72:07:82:08:52:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E
        Validity
            Not Before: May  3 02:32:46 2026 GMT
            Not After : May  2 02:37:46 2027 GMT
        Subject: CN=C9C60B3F4A4D482AA07B00274A32A1A7696880E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:70:27:67:12:ba:78:34:78:f2:9f:3c:4d:
                    98:86:10:fb:82:db:48:a8:45:c3:38:32:8b:90:ea:
                    a6:fe:d4:a5:87:34:02:b6:3f:31:59:35:ec:29:98:
                    fa:fa:b8:5e:87:95:be:6d:1f:88:5b:3e:3b:ed:e6:
                    9f:ec:82:69:69:5d:d6:8a:96:7c:fe:35:ac:73:c0:
                    3b:b2:37:1e:91:26:2e:1b:ac:e3:5d:c7:68:d8:4e:
                    02:5d:c1:8f:e7:a3:e1:d0:fe:fc:29:0e:d4:80:57:
                    d6:e1:d9:1c:63:d7:85:ee:b4:af:d0:2f:28:60:14:
                    1b:2e:22:d3:e3:1b:ec:98:c9:95:5c:dc:fc:f9:88:
                    05:dc:d2:af:8f:a6:f8:5b:e8:31:38:8b:b8:31:48:
                    1b:6e:66:07:a8:15:23:62:43:e2:1e:77:6a:76:77:
                    23:67:79:22:11:8c:5a:2a:4f:b0:d3:76:b5:41:eb:
                    f0:ce:8d:c3:0a:75:0a:9f:5c:e6:a1:69:0b:01:5d:
                    53:3d:d3:75:13:d9:1d:2d:c8:6a:cd:ea:ec:3c:a1:
                    89:63:35:d8:c9:48:bd:61:78:d5:be:e0:e2:41:d7:
                    5a:a0:f0:0c:fb:36:be:0b:5d:5e:8e:75:ac:9c:f8:
                    1f:65:aa:40:ef:5b:ef:ee:0e:0e:0e:eb:85:ce:bd:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C6:0B:3F:4A:4D:48:2A:A0:7B:00:27:4A:32:A1:A7:69:68:80:E1
            X509v3 Authority Key Identifier:
                keyid:24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:47:b3:e7:4e:fe:0c:92:8b:07:33:f1:a1:93:23:0c:b4:37:
         b9:4d:01:00:23:1b:90:fb:a0:b3:e8:cd:e5:f9:1e:b5:ff:08:
         56:88:8f:57:5f:88:53:2a:00:56:bc:32:11:fd:6e:f0:4e:33:
         01:0b:95:be:87:a8:7d:90:46:74:cb:66:04:b4:20:95:4c:88:
         c9:a9:ec:cf:be:dd:1c:7f:95:ab:49:0d:30:c1:e9:6e:eb:ba:
         e8:5f:a9:e0:d1:1f:15:85:3f:d3:0a:aa:db:cc:9e:34:8e:50:
         e9:45:67:0e:c7:6c:be:d3:fb:39:0e:2d:4a:63:ff:9c:8d:98:
         b2:55:f6:3b:48:8b:83:f4:14:ae:83:19:a8:a0:77:73:4e:f9:
         fc:50:92:99:ad:ff:85:b2:a7:4d:07:1d:a4:70:00:b6:dd:5c:
         de:ae:54:7c:75:0b:2a:a7:76:ab:0f:79:eb:8f:fc:d2:65:0a:
         dc:5e:03:85:59:f7:78:03:eb:b4:53:3a:11:be:31:90:4c:56:
         ae:88:e7:12:df:e7:30:33:fd:de:19:22:94:1b:5f:0e:75:74:
         7e:fe:de:a7:92:d9:a2:92:d9:bd:6c:d5:31:de:22:67:be:6b:
         d5:81:09:10:8b:b5:b2:7d:ea:ef:82:bd:a8:ca:cb:cf:1b:e2:
         05:69:a5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:49 2026 by rpki-client