Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=
Subject key identifier:   9A:58:03:82:10:76:DA:E9:FF:C5:59:2C:1B:FE:E6:B6:69:0D:9B:68
Certificate issuer:       /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD
Certificate serial:       33DE7467EA34696D119E4FB0DD206EE78976B227
Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 03 May 2026 02:48:32 +0000
ROA not before:           Sun 03 May 2026 02:43:32 +0000
ROA not after:            Sun 02 May 2027 02:48:32 +0000
asID:                     139952
IP address blocks:        103.147.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl
                          rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:de:74:67:ea:34:69:6d:11:9e:4f:b0:dd:20:6e:e7:89:76:b2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD
        Validity
            Not Before: May  3 02:43:32 2026 GMT
            Not After : May  2 02:48:32 2027 GMT
        Subject: CN=9A5803821076DAE9FFC5592C1BFEE6B6690D9B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:c9:63:8f:dd:31:18:83:1f:7f:98:0c:fa:
                    81:cd:6e:a6:d9:e3:5a:ff:17:6f:31:21:a0:ce:92:
                    fb:d4:5c:ff:76:c1:8c:ff:15:dc:15:8a:6b:00:7d:
                    1c:99:4b:32:cb:9d:f2:83:d7:7b:e9:fb:43:c6:48:
                    29:c8:d4:b5:bc:60:72:aa:ad:4c:a5:b7:89:49:f5:
                    4f:bc:47:cb:57:b5:71:9d:7b:bc:57:d7:ac:e0:6c:
                    a1:26:81:4f:f7:e5:92:ca:41:55:5a:40:a8:ba:28:
                    b5:93:da:a8:95:87:c0:48:b6:88:00:09:a3:da:47:
                    d0:71:94:45:e3:71:a9:09:72:64:a0:7f:79:ac:9c:
                    af:4a:78:3f:fb:6f:24:43:d5:9e:21:53:97:17:a5:
                    38:06:dd:54:d1:b1:58:e2:30:c8:52:4c:51:80:65:
                    c2:27:dd:eb:74:4f:2e:e8:06:9e:4c:ca:47:9c:16:
                    16:d9:0c:fd:f3:6f:29:8f:e4:91:20:e8:17:62:a9:
                    e2:ea:06:72:49:11:0f:6c:a4:38:0f:ca:e3:98:05:
                    69:46:7c:82:40:33:23:c4:a0:84:6f:c2:0c:70:57:
                    09:8c:7b:8c:3f:1b:23:e7:ea:89:e6:36:3f:c6:20:
                    f6:ad:98:30:6d:8b:95:db:54:9c:e7:43:21:6f:c4:
                    c0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:58:03:82:10:76:DA:E9:FF:C5:59:2C:1B:FE:E6:B6:69:0D:9B:68
            X509v3 Authority Key Identifier:
                keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:4f:2f:a2:e5:bb:46:5b:88:74:e4:8b:90:49:99:40:fa:92:
         95:fe:e4:76:bd:d3:dd:aa:5c:39:91:88:10:3a:0f:b2:2d:46:
         86:5c:8c:7a:37:38:5d:34:bd:a6:4b:ca:ec:af:20:ec:df:79:
         09:ca:01:38:1c:9e:45:ca:54:96:cd:75:27:f1:c9:6a:24:87:
         a8:c6:06:0f:42:9e:2e:27:d0:f6:4f:15:19:b1:fd:58:ca:8e:
         0b:a8:51:63:0c:31:51:73:79:c0:75:0f:bf:4b:35:56:77:f7:
         2c:db:08:20:f5:dd:cd:20:7f:f7:f6:a1:0b:d0:65:c4:46:83:
         e5:46:a9:4f:77:ed:af:0e:59:f1:de:95:19:9d:1c:83:12:89:
         96:aa:06:83:85:28:02:7c:92:c2:a1:66:35:cf:36:70:44:b4:
         ec:0d:48:83:47:9e:e6:a6:12:74:e9:6f:06:f1:ef:a7:52:23:
         b4:87:32:0a:4b:6a:05:a4:0d:fa:a3:e5:1e:f4:2e:b7:e7:25:
         1f:a2:e8:c6:27:e7:cb:a3:97:37:fa:46:6d:63:a4:e6:e5:07:
         3e:67:e4:1e:21:ac:8c:84:d3:f1:7f:b9:6e:e1:4f:15:df:4e:
         ca:7b:5d:33:e8:a6:32:2c:a3:67:4e:29:e6:4d:c9:e5:c8:85:
         7e:04:c0:de
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUM950Z+o0aW0Rnk+w3SBu54l2sicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1
MzRCQThGRDAeFw0yNjA1MDMwMjQzMzJaFw0yNzA1MDIwMjQ4MzJaMDMxMTAvBgNV
BAMTKDlBNTgwMzgyMTA3NkRBRTlGRkM1NTkyQzFCRkVFNkI2NjkwRDlCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/sljj90xGIMff5gM+oHNbqbZ
41r/F28xIaDOkvvUXP92wYz/FdwVimsAfRyZSzLLnfKD13vp+0PGSCnI1LW8YHKq
rUylt4lJ9U+8R8tXtXGde7xX16zgbKEmgU/35ZLKQVVaQKi6KLWT2qiVh8BItogA
CaPaR9BxlEXjcakJcmSgf3msnK9KeD/7byRD1Z4hU5cXpTgG3VTRsVjiMMhSTFGA
ZcIn3et0Ty7oBp5MykecFhbZDP3zbymP5JEg6BdiqeLqBnJJEQ9spDgPyuOYBWlG
fIJAMyPEoIRvwgxwVwmMe4w/GyPn6onmNj/GIPatmDBti5XbVJznQyFvxMCxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUmlgDghB22un/xVksG/7mtmkNm2gwHwYDVR0j
BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD
QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB
OEZELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3N2IwMWNmLWIxYzktNDUwZi04
NTUxLTRkY2I0Y2JkNDI2Mi8wLzMxMzAzMzJlMzEzNDM3MmUzNzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5NNMA0GCSqG
SIb3DQEBCwUAA4IBAQBrTy+i5btGW4h05IuQSZlA+pKV/uR2vdPdqlw5kYgQOg+y
LUaGXIx6NzhdNL2mS8rsryDs33kJygE4HJ5FylSWzXUn8clqJIeoxgYPQp4uJ9D2
TxUZsf1Yyo4LqFFjDDFRc3nAdQ+/SzVWd/cs2wgg9d3NIH/39qEL0GXERoPlRqlP
d+2vDlnx3pUZnRyDEomWqgaDhSgCfJLCoWY1zzZwRLTsDUiDR57mphJ06W8G8e+n
UiO0hzIKS2oFpA36o+Ue9C635yUfoujGJ+fLo5c3+kZtY6Tm5Qc+Z+QeIayMhNPx
f7lu4U8V307Ke10z6KYyLKNnTinmTcnlyIV+BMDe
-----END CERTIFICATE-----
Generated at Wed May 13 05:54:51 2026 by rpki-client