Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32332d3233203d3e203536323630.roa
File:                     3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (raw, json)
Hash identifier:          3BwispZxvie5HA8ZPKSlj+DmXQJa2RqkjXaOSsS1x1Y=
Subject key identifier:   43:7B:D0:FA:68:33:F4:25:61:3D:CE:7A:0B:38:44:61:B2:29:24:0A
Certificate issuer:       /CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F
Certificate serial:       241CC80E84337E1D3209217244F8BBE4843E764E
Authority key identifier: 46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32332d3233203d3e203536323630.roa
Signing time:             Sun 03 May 2026 02:48:12 +0000
ROA not before:           Sun 03 May 2026 02:43:12 +0000
ROA not after:            Sun 02 May 2027 02:48:12 +0000
asID:                     56260
IP address blocks:        103.29.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl
                          rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1c:c8:0e:84:33:7e:1d:32:09:21:72:44:f8:bb:e4:84:3e:76:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F
        Validity
            Not Before: May  3 02:43:12 2026 GMT
            Not After : May  2 02:48:12 2027 GMT
        Subject: CN=437BD0FA6833F425613DCE7A0B384461B229240A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:d8:84:79:bb:51:d9:0c:84:38:9a:22:da:
                    c3:26:ad:12:f3:82:6e:fa:23:00:43:20:78:b6:55:
                    ad:ca:08:10:bd:da:2b:8c:df:7a:25:3f:a0:fc:2c:
                    c3:b1:9f:b6:e6:3a:72:23:39:e5:fe:96:8c:16:9b:
                    99:c1:d5:58:72:a0:c9:a9:90:e0:76:38:a0:ba:0a:
                    56:b0:96:0c:79:57:03:e4:14:a0:5b:87:d8:04:d1:
                    e7:a3:2d:18:37:2f:9b:58:bb:ed:f8:6e:ff:60:f1:
                    86:c5:ee:24:fa:a4:6e:a2:d2:b5:aa:50:6a:d5:66:
                    e1:6c:40:8d:81:02:72:14:81:0c:7c:df:8d:70:31:
                    0e:50:5b:5a:3c:5a:40:9e:e5:26:51:9f:6c:0c:3a:
                    ec:4c:cd:01:8d:ff:3b:5d:19:61:94:86:ba:29:48:
                    76:9d:c6:04:f8:da:5f:28:7f:82:e6:94:d5:0f:e4:
                    a9:9d:0e:4c:26:44:fd:4e:6f:06:bc:51:bb:87:49:
                    55:14:1d:f2:98:0d:b1:50:d2:a9:5c:3f:9b:75:6a:
                    9b:ca:8d:5e:56:55:73:94:5f:f7:45:6a:1e:f4:a7:
                    9a:3e:d9:97:64:86:4a:ca:9d:8b:aa:09:e9:7c:ac:
                    b2:6e:fd:58:ea:8e:dc:a3:61:ae:b5:61:9c:0b:2d:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7B:D0:FA:68:33:F4:25:61:3D:CE:7A:0B:38:44:61:B2:29:24:0A
            X509v3 Authority Key Identifier:
                keyid:46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32332d3233203d3e203536323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:12:0e:84:7e:60:0a:68:8f:d0:95:40:f3:11:c4:fa:48:
         e7:d5:95:42:3b:78:00:72:d7:e0:0d:07:f5:2b:76:8a:f0:21:
         6b:10:c1:2c:82:6b:41:da:60:92:67:f4:fc:88:52:ca:1f:cf:
         3d:4c:4c:3e:5e:8c:d4:42:4d:b5:8a:e6:65:7d:28:bd:16:67:
         6e:c1:67:71:13:c1:63:26:91:36:36:9f:63:bb:9a:fd:b2:94:
         f5:7d:7d:f5:81:fd:f6:fd:fc:f2:29:ff:30:e5:0b:6e:ba:bf:
         2d:f6:1c:bb:00:c8:fc:f0:bc:59:a8:3d:b8:74:91:f9:84:d3:
         03:c3:87:f7:cc:26:63:f4:31:a3:bb:5f:ad:2f:79:0f:f5:78:
         d8:6d:b3:84:1f:14:59:32:f4:bb:2d:1d:1a:ec:bd:cc:fa:45:
         1b:50:8f:39:c3:7d:ff:49:aa:cc:12:3b:90:33:cf:c1:77:77:
         64:af:a5:c7:b7:9a:a7:37:c6:0d:05:47:c9:8b:de:da:0e:19:
         76:50:0e:7c:9f:24:22:48:4b:11:66:67:4e:03:2f:6f:ac:ba:
         18:44:6b:a0:1c:60:be:c2:f5:8f:27:96:4f:ae:11:ca:16:bc:
         15:44:42:17:c8:13:95:d2:51:a4:14:49:6f:16:3b:ea:47:cc:
         93:44:eb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:52:07 2026 by rpki-client