Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa
File:                     3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (raw, json)
Hash identifier:          729mihHGdMx9/AKOob41I1TKRP4K3/svpHuBRoC4uAA=
Subject key identifier:   87:A5:D7:50:B3:DB:8B:A2:59:04:0E:62:D6:D9:0B:82:DA:2D:4E:63
Certificate issuer:       /CN=EC464ACDD6858B613E13B13344BB988E92418A08
Certificate serial:       157E56E121F903D71D83848D5D9AC564DC815918
Authority key identifier: EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa
Signing time:             Sun 03 May 2026 02:40:24 +0000
ROA not before:           Sun 03 May 2026 02:35:24 +0000
ROA not after:            Sun 02 May 2027 02:40:24 +0000
asID:                     134655
IP address blocks:        103.247.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
                          rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7e:56:e1:21:f9:03:d7:1d:83:84:8d:5d:9a:c5:64:dc:81:59:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC464ACDD6858B613E13B13344BB988E92418A08
        Validity
            Not Before: May  3 02:35:24 2026 GMT
            Not After : May  2 02:40:24 2027 GMT
        Subject: CN=87A5D750B3DB8BA259040E62D6D90B82DA2D4E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:aa:7c:97:70:df:ed:c2:95:51:61:e5:9c:
                    a4:36:4a:d9:da:4c:1f:58:16:84:2e:61:92:b0:e1:
                    be:63:57:ca:4a:b2:c3:2e:be:f7:b7:7a:16:5c:22:
                    a3:53:2a:53:8e:58:5b:15:fc:9c:fe:fd:e7:37:cf:
                    dc:45:85:10:f5:ac:d9:0b:90:c4:fb:61:be:0c:da:
                    13:94:17:1a:14:b9:11:42:d2:6e:de:36:5e:97:3f:
                    2c:07:04:4a:d4:78:8a:90:c3:c1:22:17:d7:c3:d1:
                    a5:e4:38:aa:92:3b:87:85:b5:64:14:47:9b:ba:8d:
                    09:93:31:07:fd:b8:55:0c:27:13:af:04:db:5f:9b:
                    c4:02:ce:ee:b5:42:67:35:c5:cf:7e:94:33:49:f4:
                    fd:86:ec:e5:f6:eb:84:a8:9f:46:3c:91:1e:52:b0:
                    97:60:a4:64:fd:ad:80:7f:88:a6:c5:dd:92:70:3c:
                    99:4f:fe:9d:55:b0:82:03:aa:b5:24:99:64:0d:7e:
                    b2:b0:c6:47:c4:09:d5:77:84:e5:5b:21:2c:fe:17:
                    af:df:cc:d9:24:b3:10:28:ec:7b:25:dd:94:00:67:
                    cd:f2:01:c6:b0:23:f9:1a:15:11:74:f3:47:8c:b5:
                    8b:3d:c4:45:9d:9a:bc:86:54:78:e0:b3:4b:c7:c2:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A5:D7:50:B3:DB:8B:A2:59:04:0E:62:D6:D9:0B:82:DA:2D:4E:63
            X509v3 Authority Key Identifier:
                keyid:EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:46:df:3c:fa:da:03:b3:1a:7c:fa:5b:bc:3d:37:4e:3c:5b:
         c8:4b:c1:b2:67:06:cd:10:cd:6d:14:cb:73:60:37:3b:fe:3b:
         ec:70:02:a3:c6:d6:5c:1d:f0:44:4c:d0:05:41:3c:cc:3e:22:
         ec:c8:58:e9:df:f2:61:93:42:26:f9:47:91:1d:5c:6f:34:69:
         61:90:4b:04:1d:f5:2e:19:32:bd:15:6e:ea:f2:6e:c0:e0:39:
         91:bb:48:cf:8e:dc:e6:67:05:0d:65:95:1f:72:95:b5:07:6a:
         c9:89:45:c6:15:c0:0e:01:9b:f0:87:09:c1:6e:7d:3d:4f:87:
         1f:09:af:9c:1f:91:1c:de:ff:b2:04:eb:c1:da:ae:41:dc:d9:
         c4:8a:5f:a6:d5:ab:25:f6:39:b5:79:45:3d:b5:e9:4d:4f:f1:
         47:a2:42:66:b4:33:5b:a8:65:f7:28:ca:74:c3:79:bf:5d:3c:
         63:a4:62:9a:ad:79:b5:9f:6c:38:31:d7:75:9a:c7:7f:f6:40:
         49:49:d3:fc:de:ae:d5:e6:7c:9f:55:1f:4d:2e:f9:59:18:4b:
         69:b0:4d:de:1b:9d:62:10:c5:f6:80:de:56:d3:08:0d:ff:eb:
         ee:12:1a:2b:f6:6b:10:ae:6b:ca:fe:6d:e3:71:d0:e9:92:3c:
         7b:ff:96:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:50 2026 by rpki-client