Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa
File:                     3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa (raw, json)
Hash identifier:          H/EU/GM9zbZ8LDvAdbWVszvkAPkqKeCYb9wj1+YBJDk=
Subject key identifier:   56:EA:E3:10:BE:9E:AC:53:30:70:98:AA:1B:A2:D7:AD:C7:4C:B7:57
Certificate issuer:       /CN=499950141E5E3A0403B539ED29BB3B93BCE2C16C
Certificate serial:       381BA7C2B689A0C1D2D65BACF867297BA4E09686
Authority key identifier: 49:99:50:14:1E:5E:3A:04:03:B5:39:ED:29:BB:3B:93:BC:E2:C1:6C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa
Signing time:             Sun 03 May 2026 02:43:30 +0000
ROA not before:           Sun 03 May 2026 02:38:30 +0000
ROA not after:            Sun 02 May 2027 02:43:30 +0000
asID:                     141127
IP address blocks:        103.148.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.crl
                          rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1b:a7:c2:b6:89:a0:c1:d2:d6:5b:ac:f8:67:29:7b:a4:e0:96:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=499950141E5E3A0403B539ED29BB3B93BCE2C16C
        Validity
            Not Before: May  3 02:38:30 2026 GMT
            Not After : May  2 02:43:30 2027 GMT
        Subject: CN=56EAE310BE9EAC53307098AA1BA2D7ADC74CB757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:27:0e:b3:70:c0:bb:0c:cd:0d:8a:58:3e:
                    b5:79:eb:ed:3b:1c:01:9d:db:40:32:84:d8:c0:82:
                    da:28:c5:01:50:be:72:4c:3f:9e:57:a4:de:ba:4b:
                    fe:3b:69:7b:44:53:5f:d7:cf:d2:f6:ad:c9:fe:20:
                    d0:68:19:78:f3:58:20:b1:1a:95:3b:0b:c2:4a:ce:
                    b2:73:bf:53:35:e0:f5:39:df:af:5d:60:38:c2:88:
                    83:28:0f:db:5d:6e:f0:69:2a:af:ce:2a:20:f2:32:
                    a3:c2:ae:37:78:9a:07:4b:fb:5e:fc:84:d8:79:dd:
                    1d:c2:5e:a2:11:f1:9b:f6:06:83:de:5e:ae:69:96:
                    27:4b:2b:33:63:fb:fc:b1:83:13:df:b0:a9:72:64:
                    15:92:ed:03:30:37:e5:60:c5:cd:da:87:c9:44:be:
                    fc:a4:cb:e2:1f:45:31:da:b9:cc:13:0d:f8:b4:ea:
                    70:30:5a:62:c7:32:e3:f9:a0:af:3b:43:0f:e2:21:
                    59:a5:85:65:86:f1:e6:96:9c:c9:05:de:b7:c1:c7:
                    1d:65:82:4b:c2:3a:59:61:aa:05:99:73:e5:c2:d0:
                    ce:95:08:53:a1:02:38:fc:69:f1:a1:61:82:c4:7d:
                    1a:d7:20:41:85:68:96:76:0a:8b:68:52:1d:29:6e:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EA:E3:10:BE:9E:AC:53:30:70:98:AA:1B:A2:D7:AD:C7:4C:B7:57
            X509v3 Authority Key Identifier:
                keyid:49:99:50:14:1E:5E:3A:04:03:B5:39:ED:29:BB:3B:93:BC:E2:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:97:bf:85:c4:94:11:ac:23:12:a8:a2:3d:31:af:f3:19:
         16:1b:fb:a6:7e:60:b0:1f:bc:4a:32:3c:49:62:cb:1a:63:2b:
         e0:ea:bd:e8:5f:34:a8:f5:97:a5:7c:80:d3:9d:43:e7:a8:66:
         ae:c2:bd:3e:59:68:a2:16:af:30:bb:31:df:4e:19:c2:7f:1f:
         32:fc:9d:4e:42:b4:d6:17:4a:6f:ce:d4:4f:a5:f9:88:ad:cf:
         06:68:4e:e3:ee:1a:fd:b5:21:e2:3d:96:2c:49:2c:72:02:8e:
         20:b0:8c:da:c2:2c:2c:ff:25:b0:f8:0b:82:ea:0e:f8:b6:a6:
         62:dc:48:51:3f:ea:05:2e:d8:84:65:a4:5d:e0:f0:43:bf:47:
         bf:df:91:86:29:34:0e:3a:0b:20:89:d8:29:53:ef:5e:4c:91:
         6a:a7:90:fd:75:ce:6b:4f:57:5a:74:9a:03:0d:8b:f8:c9:c4:
         f0:58:dd:93:a5:08:b3:5f:52:39:d6:40:e3:ac:a9:4a:17:23:
         93:67:80:67:c7:93:04:a3:70:ee:56:fd:08:de:d2:dd:a6:9a:
         10:62:31:79:8d:da:1b:68:94:75:52:40:e1:b1:14:61:60:68:
         c2:68:e4:34:d1:80:b6:16:b2:be:de:1c:3f:11:7e:2a:c5:91:
         a4:df:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:46 2026 by rpki-client