Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=
Subject key identifier:   EE:04:DE:2E:DD:AD:18:F4:D2:BD:B9:62:AE:EA:FB:90:3C:80:F3:34
Certificate issuer:       /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD
Certificate serial:       77DB867A6B5CB1C7D4EDA8B95111DE928CCF3585
Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 03 May 2026 02:48:33 +0000
ROA not before:           Sun 03 May 2026 02:43:33 +0000
ROA not after:            Sun 02 May 2027 02:48:33 +0000
asID:                     139952
IP address blocks:        103.147.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl
                          rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:db:86:7a:6b:5c:b1:c7:d4:ed:a8:b9:51:11:de:92:8c:cf:35:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD
        Validity
            Not Before: May  3 02:43:33 2026 GMT
            Not After : May  2 02:48:33 2027 GMT
        Subject: CN=EE04DE2EDDAD18F4D2BDB962AEEAFB903C80F334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:22:ad:39:27:68:a9:60:8d:4b:7d:60:ce:
                    84:43:49:d8:00:f1:8e:82:00:76:7c:a5:bf:9f:2f:
                    d8:70:9f:c5:1f:9e:8a:d0:4d:87:3f:ce:fb:9a:8d:
                    ab:8b:c1:76:a7:05:af:c0:19:fc:05:78:64:bd:d9:
                    f6:a7:6a:6e:78:ef:22:27:e4:8d:d0:52:bb:af:41:
                    4e:66:ca:8d:53:29:33:7d:4b:8d:11:84:a7:15:70:
                    04:90:64:42:83:48:06:b4:7b:01:9d:ac:b3:e6:2d:
                    6b:fe:9c:2d:b1:4c:91:ac:52:af:00:cc:ee:2a:dc:
                    fe:46:4c:62:0c:e6:4b:1b:03:59:a5:53:bf:48:01:
                    9c:36:66:8a:cb:78:3f:66:a4:52:2f:cd:c7:5c:c4:
                    c0:18:d2:89:73:04:04:b4:9a:c3:d1:e8:ac:d4:4c:
                    f9:d3:5f:9a:6f:a9:7b:34:20:2f:29:31:6e:4d:bd:
                    98:77:4c:4c:ab:81:f8:ca:f7:fb:51:ca:03:03:bf:
                    62:dc:21:0e:0d:71:83:12:fd:95:9d:a7:5d:3c:c1:
                    45:be:e4:16:76:e0:5a:e3:33:ee:79:e5:15:0b:33:
                    2e:61:e0:84:d9:43:5f:8a:99:7b:63:1b:68:42:94:
                    d6:a7:6e:1b:01:21:c4:2e:90:69:96:c9:8a:a4:0d:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:04:DE:2E:DD:AD:18:F4:D2:BD:B9:62:AE:EA:FB:90:3C:80:F3:34
            X509v3 Authority Key Identifier:
                keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b5:24:f6:d3:35:2b:cf:ea:cc:ca:1a:38:4d:a3:f3:b1:40:
         e0:c7:87:bd:8f:37:e0:92:3f:4b:e1:ef:13:46:44:f0:e3:1c:
         9c:c3:1a:4b:bd:d0:9a:86:3d:e1:f9:10:9e:ab:92:d2:6a:b6:
         5d:ad:b0:7b:e7:f3:bf:b8:de:2b:a5:77:ee:ef:38:31:0a:e7:
         32:c7:74:79:5d:99:db:5c:c8:19:9f:cf:51:f5:ef:2c:5d:d4:
         94:b5:99:bd:34:94:2b:dc:06:48:fc:ca:4e:58:5b:8c:40:fd:
         f7:64:d5:1c:a2:b1:06:e8:99:84:d4:c5:e5:dd:de:af:f7:8d:
         2b:3c:16:f0:ee:1d:7c:d4:ba:f1:42:41:e1:44:9e:3d:9f:46:
         43:36:64:5a:31:c9:e4:61:54:70:03:5c:da:ba:f6:7b:4b:d1:
         c1:df:bb:21:1c:ae:17:0e:50:dd:24:38:9e:17:3c:3a:62:01:
         30:05:7c:a0:e9:86:f7:65:ab:08:c3:88:52:e8:75:73:11:a6:
         ca:cc:cb:92:76:eb:cd:82:fa:4b:b7:ef:75:7a:09:b2:91:64:
         40:b5:b1:6a:49:b1:76:48:65:0a:85:5b:ff:64:14:ab:b1:39:
         67:92:94:63:92:6e:ef:f1:e8:77:53:43:c1:a9:17:15:0d:67:
         73:be:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:44 2026 by rpki-client