Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa
File:                     3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (raw, json)
Hash identifier:          eUuw3yw55g0fngkB7tsUSkh/znzGsN9FtMfeP3wJOV4=
Subject key identifier:   93:78:2B:75:5D:42:B8:05:ED:E2:CD:D0:B4:D6:3E:4C:7F:1C:FE:CC
Certificate issuer:       /CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F
Certificate serial:       70C4C15E0460A612CDD95EB75B2547C83F428D4C
Authority key identifier: 46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa
Signing time:             Sun 03 May 2026 02:48:10 +0000
ROA not before:           Sun 03 May 2026 02:43:10 +0000
ROA not after:            Sun 02 May 2027 02:48:10 +0000
asID:                     56260
IP address blocks:        103.29.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl
                          rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c4:c1:5e:04:60:a6:12:cd:d9:5e:b7:5b:25:47:c8:3f:42:8d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F
        Validity
            Not Before: May  3 02:43:10 2026 GMT
            Not After : May  2 02:48:10 2027 GMT
        Subject: CN=93782B755D42B805EDE2CDD0B4D63E4C7F1CFECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:cd:2a:0d:95:b1:a9:d4:59:d3:9d:00:2e:
                    4d:f7:de:7c:64:67:04:f7:a9:a1:34:32:60:a0:c9:
                    55:26:2d:99:52:a6:61:6f:30:b1:2f:1c:b2:2e:49:
                    98:45:43:c9:5c:bd:46:97:0e:1c:d0:2c:dd:55:42:
                    f0:48:b8:42:04:8e:ca:7a:18:93:e7:47:30:7d:5d:
                    1f:77:79:a8:08:a3:9c:61:51:a4:c4:de:45:94:18:
                    d0:ea:4c:3a:66:27:fd:6f:cf:ed:3a:bd:45:02:cb:
                    9f:7a:79:0a:c0:33:f7:8d:9e:d6:12:a3:38:ce:15:
                    fc:f6:99:4e:89:a3:00:7d:7b:09:42:52:83:d2:92:
                    c9:ac:eb:0b:4e:f8:99:97:fd:50:3e:7c:6b:fd:74:
                    38:56:a3:f3:1e:be:c9:ad:05:d3:50:ed:e4:b2:1c:
                    ad:cf:78:53:aa:56:fd:94:e1:90:ab:bc:61:71:86:
                    51:e7:30:d9:2e:0a:2c:45:94:c8:1e:b9:b7:70:78:
                    a3:19:61:a4:b9:4c:b7:1a:d2:67:ff:8a:0e:0f:07:
                    98:38:0c:7c:7f:f8:a9:3b:bf:b6:81:15:a7:09:21:
                    dd:a6:66:e3:16:12:7f:3c:11:a0:20:55:3a:39:a5:
                    ff:50:eb:c9:09:7f:b6:dd:f1:28:aa:ba:ac:0a:26:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:78:2B:75:5D:42:B8:05:ED:E2:CD:D0:B4:D6:3E:4C:7F:1C:FE:CC
            X509v3 Authority Key Identifier:
                keyid:46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:07:46:6b:5a:47:43:29:43:9b:15:bb:37:c2:8f:b9:96:67:
         8c:e9:71:c8:66:11:b5:f5:4f:2f:a6:d9:b8:6a:8a:25:10:c8:
         1f:ce:f1:bf:0a:c9:5b:18:57:aa:47:8f:8b:2e:9f:65:85:ef:
         53:57:c1:2e:e0:54:62:9e:9e:17:92:d6:81:df:3d:b1:0c:07:
         ce:77:27:32:12:a1:56:df:a4:2d:78:f5:89:d8:f0:d5:bf:80:
         08:24:84:a4:c0:12:64:2b:c1:cb:af:eb:c7:6e:37:00:7c:cd:
         86:d3:98:ad:cc:c3:3b:aa:f9:23:58:15:6c:db:d9:89:3b:ed:
         46:89:dc:78:81:93:5a:27:e9:f9:74:5c:69:0d:eb:b8:df:5d:
         09:76:f5:27:02:7f:81:31:3f:f9:1f:72:a8:be:97:3d:c9:0b:
         03:b3:3c:0a:1a:04:3a:dc:07:67:34:24:1b:f7:b9:22:a1:5c:
         03:5c:da:52:82:5f:18:bb:c7:ee:df:14:a0:30:e0:49:6a:74:
         2e:f5:0f:bb:8c:35:8c:35:72:4f:3e:f8:ec:21:90:9c:c5:86:
         51:d0:f4:b0:02:52:2b:e1:69:36:5f:7b:92:9d:54:af:48:cb:
         2b:69:93:58:3c:70:a8:dc:20:56:89:b4:c1:53:72:fe:7b:1c:
         18:e2:a3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:44 2026 by rpki-client