Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa
File:                     3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (raw, json)
Hash identifier:          rAfzEZvuHRI/Kzt1SmKQHwBtPJb8jdNpuP/cvt9qX+w=
Subject key identifier:   DC:14:7E:BC:B8:7A:2D:5F:9B:1F:FB:F1:2C:22:08:2B:8B:DB:7F:68
Certificate issuer:       /CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37
Certificate serial:       59CCEB0B1DC19BBE3C57CAA801484D0D692A97ED
Authority key identifier: 19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa
Signing time:             Sun 03 May 2026 02:38:58 +0000
ROA not before:           Sun 03 May 2026 02:33:58 +0000
ROA not after:            Sun 02 May 2027 02:38:58 +0000
asID:                     149395
IP address blocks:        103.181.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl
                          rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cc:eb:0b:1d:c1:9b:be:3c:57:ca:a8:01:48:4d:0d:69:2a:97:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37
        Validity
            Not Before: May  3 02:33:58 2026 GMT
            Not After : May  2 02:38:58 2027 GMT
        Subject: CN=DC147EBCB87A2D5F9B1FFBF12C22082B8BDB7F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:2d:05:06:cd:b4:9a:1c:df:fe:4d:b2:6c:e1:
                    e4:c8:91:05:a0:7b:0e:39:a9:b1:db:95:d4:d6:76:
                    89:44:01:ff:e8:09:42:cd:93:f7:0d:0a:a7:05:cf:
                    dd:cd:08:cd:4b:0f:60:28:ca:42:04:1e:46:c3:e6:
                    2f:7f:ca:2b:f1:7b:56:de:12:30:b6:15:e5:6a:81:
                    75:14:1d:c4:ce:f6:4f:bc:55:06:7b:7c:32:da:aa:
                    0a:36:84:46:42:23:c6:74:94:b7:c0:4c:a9:42:cd:
                    ee:78:24:0b:e0:3c:ff:63:8b:2d:d3:d6:94:68:2d:
                    16:41:22:00:2d:5c:91:66:e6:c2:a2:9f:73:06:df:
                    ca:76:20:6a:e6:9e:30:f6:01:0b:4f:a7:54:7c:2b:
                    0e:6f:ab:f5:28:a2:98:d2:20:84:ad:2e:88:6e:09:
                    8a:e3:16:2b:19:8b:3e:ee:79:8a:fc:58:80:e8:53:
                    90:79:e3:3a:3b:40:11:da:f7:17:51:39:9a:c3:db:
                    c8:72:31:a5:08:fe:a2:e7:d9:85:47:92:5d:d4:b7:
                    cc:ed:ae:f9:e3:bb:64:21:c5:2b:36:70:1d:02:86:
                    19:ab:62:50:e1:18:cf:60:30:36:a1:a8:99:b3:3a:
                    d4:46:2f:ba:f1:40:71:c1:25:7d:c7:35:90:57:36:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:14:7E:BC:B8:7A:2D:5F:9B:1F:FB:F1:2C:22:08:2B:8B:DB:7F:68
            X509v3 Authority Key Identifier:
                keyid:19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:42:2f:4e:fc:b7:02:fc:09:26:2b:34:75:e8:70:34:23:
         cd:0b:a5:63:4c:9b:38:18:15:eb:40:fd:1a:37:01:f1:47:51:
         92:df:d9:c6:9b:bd:de:60:f6:d8:60:37:c3:38:d0:c1:27:e3:
         80:34:4f:67:17:81:1f:0a:85:ed:34:5e:b3:e8:21:7e:f0:e9:
         2d:37:aa:cd:b7:9b:ac:17:34:12:9e:ac:eb:c0:bf:2e:a9:6c:
         9d:01:92:f6:28:2c:32:26:87:2b:06:d8:e6:1c:3d:5a:7b:24:
         d7:0e:55:ee:19:a3:5d:e6:bd:57:b4:8a:34:df:8f:06:e0:33:
         ea:50:c7:39:7f:8d:ba:44:80:20:6a:48:07:6c:24:68:d9:db:
         b7:47:c8:25:0b:6c:50:f3:bf:73:be:e2:ac:55:41:8d:5a:4b:
         1b:d0:58:3f:05:e4:84:b7:b9:d5:e4:b1:87:57:ff:a3:44:e2:
         5a:6e:5e:16:b5:48:a3:1f:eb:07:97:61:31:03:66:a2:1f:53:
         51:c0:7a:dd:a6:ec:fc:63:24:1c:13:6f:15:94:f8:a1:bf:71:
         a7:35:28:7f:15:6b:d1:73:c5:28:be:da:54:9f:50:d2:ad:48:
         1b:bb:44:80:a1:ab:24:9b:a6:d5:25:aa:10:83:d4:43:b9:81:
         99:84:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:25 2026 by rpki-client