Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138352e302f32342d3234203d3e203536323630.roa
File:                     3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (raw, json)
Hash identifier:          fti8KMcK7Su1rf6h/nPpwfsRIDldzix1ecJxj65TBmc=
Subject key identifier:   14:D0:D3:77:E0:65:C0:57:B2:1D:06:4C:53:FA:98:CA:8A:BB:B9:81
Certificate issuer:       /CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F
Certificate serial:       461464EB69D2449CB81FC15F86A7FD50B2E3D4A1
Authority key identifier: 46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138352e302f32342d3234203d3e203536323630.roa
Signing time:             Sun 03 May 2026 02:48:11 +0000
ROA not before:           Sun 03 May 2026 02:43:11 +0000
ROA not after:            Sun 02 May 2027 02:48:11 +0000
asID:                     56260
IP address blocks:        103.29.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl
                          rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:14:64:eb:69:d2:44:9c:b8:1f:c1:5f:86:a7:fd:50:b2:e3:d4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F
        Validity
            Not Before: May  3 02:43:11 2026 GMT
            Not After : May  2 02:48:11 2027 GMT
        Subject: CN=14D0D377E065C057B21D064C53FA98CA8ABBB981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:7f:17:14:5e:8b:ca:32:36:6d:f1:1c:51:
                    61:2e:8d:7f:09:60:65:74:8f:0a:f4:76:9c:3f:f6:
                    e0:92:3c:2e:e4:23:b9:62:c7:c5:bf:6b:e0:a2:d2:
                    a6:d7:96:97:9e:d8:7c:4b:d9:6e:96:3f:38:0c:14:
                    d7:92:96:37:3c:f3:5b:48:52:3e:dc:fb:8e:0f:f1:
                    7f:54:c0:8d:9b:25:05:c7:78:07:d1:e6:21:e6:69:
                    6d:e6:86:b7:f1:b9:95:0e:34:65:d4:48:30:e1:06:
                    e6:c0:99:2e:01:6d:df:d6:59:f1:cf:50:0e:96:be:
                    da:5f:a8:9c:99:68:6a:56:cf:0f:76:e2:4a:fb:ba:
                    8a:6d:5b:d5:f9:a7:3a:8c:80:2f:08:b3:2a:53:17:
                    1c:2e:89:c7:5f:10:08:77:54:9f:8f:02:75:ca:d2:
                    53:82:0e:88:11:e0:bb:6b:89:8d:09:94:02:23:d3:
                    e7:52:77:61:0d:1c:7c:de:57:51:3d:49:e6:cd:ff:
                    0f:00:5b:67:6a:e3:6c:f5:0b:43:35:e3:27:2b:70:
                    e6:49:f1:17:18:79:3a:15:32:14:df:14:a1:6b:35:
                    64:ae:87:c7:3b:00:af:04:6b:5a:36:83:8f:ab:ac:
                    e7:dc:be:23:2d:a2:28:9a:11:59:5e:32:41:67:48:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D0:D3:77:E0:65:C0:57:B2:1D:06:4C:53:FA:98:CA:8A:BB:B9:81
            X509v3 Authority Key Identifier:
                keyid:46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138352e302f32342d3234203d3e203536323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:02:98:8e:cc:ab:de:55:0f:33:50:1e:e9:f9:2e:e5:21:fd:
         9b:d9:41:b1:aa:90:3c:3e:35:81:a6:04:d7:8e:ab:cc:7d:e1:
         16:d9:9b:c0:8a:4d:14:43:c1:16:73:53:1d:ea:10:c5:bd:ed:
         1c:f2:c5:1b:08:90:a6:ae:04:9b:16:8b:1b:c2:a4:76:0c:0a:
         7a:ed:0e:d9:b4:f3:88:0b:45:2a:20:1e:37:e9:36:6b:d1:32:
         fb:50:8b:ce:e4:13:75:f9:cb:5d:da:62:51:7d:9d:06:fe:f5:
         b2:c4:ad:ad:fd:a9:b2:48:d1:2a:e0:fe:bb:ac:9c:a8:15:3f:
         b3:68:37:7f:1b:c1:b6:e2:75:69:5f:cb:52:68:88:3b:db:e8:
         19:a5:cc:b9:43:2e:61:cf:3a:35:8e:09:47:98:1a:e8:ef:ef:
         38:a2:54:a8:42:18:67:b9:a6:f0:7e:50:fd:4d:aa:dc:b8:87:
         83:da:f1:c6:7c:29:17:cf:23:31:8c:1d:d2:46:c0:c9:1d:6c:
         6a:73:3b:bf:64:e4:5c:ab:73:56:5b:9c:32:05:0f:a5:ac:52:
         1d:07:49:15:62:67:38:f7:0c:8f:37:ea:90:fb:51:e4:20:32:
         2f:db:18:46:cd:32:a4:4d:f5:74:65:e6:72:1a:52:a6:74:c7:
         ca:34:b5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:02 2026 by rpki-client