Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3130332e3134382e34362e302f32332d3234203d3e203234353237.roa
File:                     3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (raw, json)
Hash identifier:          150lIPhgbdhzp4Y24XpmsufR4h1DDzZZlk0gSQD8XZc=
Subject key identifier:   BD:F0:25:17:EA:33:75:73:42:3A:63:50:63:2D:D1:11:4A:6F:81:B6
Certificate issuer:       /CN=45E5895753396A59380E8B15A613362BDD0B9399
Certificate serial:       163C63DFE576D3A7E7CD8E75CA0FB47E7560E2C5
Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3130332e3134382e34362e302f32332d3234203d3e203234353237.roa
Signing time:             Sun 03 May 2026 02:40:08 +0000
ROA not before:           Sun 03 May 2026 02:35:08 +0000
ROA not after:            Sun 02 May 2027 02:40:08 +0000
asID:                     24527
IP address blocks:        103.148.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl
                          rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3c:63:df:e5:76:d3:a7:e7:cd:8e:75:ca:0f:b4:7e:75:60:e2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399
        Validity
            Not Before: May  3 02:35:08 2026 GMT
            Not After : May  2 02:40:08 2027 GMT
        Subject: CN=BDF02517EA337573423A6350632DD1114A6F81B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:81:92:e6:25:45:bc:a3:bc:e5:00:cd:aa:
                    6c:55:e0:ce:b0:0a:c2:7a:09:49:50:30:1e:ab:03:
                    76:05:fb:99:43:66:c1:5c:6d:1d:03:86:07:c9:9f:
                    4f:0c:9f:fb:c1:89:72:50:4b:7e:8b:ae:d9:9a:4a:
                    0b:d1:31:64:b0:c0:a6:13:47:b3:57:c6:ed:c5:4a:
                    31:6c:12:f5:07:10:56:85:5d:c0:85:d9:91:8b:a2:
                    f7:22:e9:ce:ce:32:a1:23:93:43:a4:cf:8e:cb:1a:
                    81:3f:bc:77:5f:75:cc:3c:ab:06:7d:c6:37:0c:a9:
                    f1:de:4c:be:a2:d5:68:12:d0:1b:0a:45:d6:74:82:
                    75:c5:a1:65:b3:1d:6a:b3:67:51:ba:6b:6b:19:e6:
                    53:e8:23:5c:c2:66:51:ab:cc:be:b2:24:da:db:e2:
                    3c:f2:42:31:92:de:a8:d8:39:21:e8:74:7d:f6:e1:
                    c0:08:d0:48:31:a8:b1:15:f4:a0:6f:25:a6:4a:f8:
                    99:f9:ec:7f:67:ee:71:92:df:b9:20:65:1d:d2:d8:
                    7a:db:ad:83:7c:95:4e:87:53:5e:7e:2b:b0:ff:8a:
                    50:8e:03:05:fb:24:2f:35:7c:08:e1:0d:0c:d2:d9:
                    1e:24:83:20:b6:97:ba:c5:72:f2:ca:6e:bd:a5:0b:
                    dc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F0:25:17:EA:33:75:73:42:3A:63:50:63:2D:D1:11:4A:6F:81:B6
            X509v3 Authority Key Identifier:
                keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3130332e3134382e34362e302f32332d3234203d3e203234353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:9c:6c:8e:6d:1f:dd:61:6c:45:fb:54:55:3a:dd:58:84:c2:
         cc:9b:b2:c0:06:49:57:ae:6e:42:34:df:33:21:05:c1:c2:02:
         92:a6:22:b4:8a:42:a4:e5:9d:2d:70:9f:29:96:c6:a1:f1:c7:
         60:3c:c4:80:3a:19:af:ea:a8:b0:b3:ec:a7:35:07:7c:f3:ed:
         8e:1c:36:b7:c3:3c:ce:ad:15:92:63:15:dc:a1:80:26:5b:f5:
         df:3c:68:07:a1:43:f1:20:11:84:ab:da:23:88:73:1a:ee:34:
         92:df:b8:ef:81:46:1b:3a:af:96:53:3c:57:40:9e:bd:be:66:
         63:9e:58:04:b6:27:95:a0:ec:c3:67:5c:74:da:25:0c:a3:1b:
         c5:83:cd:59:d4:c8:ff:7f:52:4a:96:6b:3f:70:17:e7:63:b1:
         8f:02:5d:7a:b9:5e:2a:cb:68:53:99:73:1e:9a:9b:e2:e9:ee:
         74:17:15:5b:c5:96:b8:b7:f9:a6:db:e5:3c:38:7d:9c:b3:d6:
         be:4d:1d:9b:d9:b4:01:0c:65:e0:86:6a:16:a8:c2:64:0a:49:
         6e:26:b9:c8:e7:33:c2:7f:24:bd:79:f8:91:91:63:25:25:2a:
         55:3f:5a:2e:57:3a:f3:7f:7a:cc:39:6e:ca:bd:aa:1e:21:4f:
         8f:7d:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:26 2026 by rpki-client