Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32392e302f32342d3234203d3e203633383632.roa
File:                     3130332e34392e32392e302f32342d3234203d3e203633383632.roa (raw, json)
Hash identifier:          jymQxIodNK96y3uCKc9HAkpGHF4gay+EOqO/ZQMQfCc=
Subject key identifier:   C2:00:6B:CF:AA:7D:7F:D8:B0:E9:FC:33:22:DF:B6:3A:75:6E:97:D9
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       0FF17262EA0B897C239EA58540D66974D625357D
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32392e302f32342d3234203d3e203633383632.roa
Signing time:             Sun 03 May 2026 02:48:45 +0000
ROA not before:           Sun 03 May 2026 02:43:45 +0000
ROA not after:            Sun 02 May 2027 02:48:45 +0000
asID:                     63862
IP address blocks:        103.49.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f1:72:62:ea:0b:89:7c:23:9e:a5:85:40:d6:69:74:d6:25:35:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: May  3 02:43:45 2026 GMT
            Not After : May  2 02:48:45 2027 GMT
        Subject: CN=C2006BCFAA7D7FD8B0E9FC3322DFB63A756E97D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:6a:fd:de:b9:8d:67:ca:ec:fc:61:7e:0a:
                    6a:e9:ff:68:34:f5:8a:ec:59:00:93:84:f4:16:93:
                    73:8c:83:92:9f:11:99:08:c7:44:0f:58:5d:e6:a0:
                    3f:88:ed:b0:7a:cc:a8:ec:9a:16:d9:e9:ae:d0:c8:
                    f8:6b:bf:17:09:e5:4e:89:bb:dd:37:eb:f9:67:24:
                    27:a6:02:56:7a:a3:53:da:4e:73:f1:8c:e9:d4:87:
                    35:00:20:56:05:c1:7a:3c:10:cd:38:0b:5f:14:e9:
                    77:a7:ae:7d:ba:19:2f:bb:d7:fc:0b:04:e8:58:3c:
                    38:51:c8:cf:23:bf:92:34:51:c8:bd:7c:e8:9f:27:
                    0f:6e:a6:67:67:bf:11:b9:51:92:c6:a5:87:ef:af:
                    4a:7f:77:45:11:63:45:3a:f6:aa:c3:0a:3e:b7:39:
                    01:7d:62:12:e9:65:e7:61:31:2c:b2:8c:d7:fa:57:
                    51:36:c7:a6:08:22:bc:cd:10:95:1c:9e:a5:76:b3:
                    b9:f2:15:9b:e6:28:93:e2:e6:6f:4d:51:d6:95:b7:
                    f6:6c:12:14:00:b2:c5:83:ed:09:11:a5:01:82:a8:
                    25:e5:94:cc:98:2f:1f:90:47:cf:f0:ab:a9:2b:7b:
                    4c:80:8b:57:60:44:e0:06:58:57:74:ed:cb:4c:a5:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:00:6B:CF:AA:7D:7F:D8:B0:E9:FC:33:22:DF:B6:3A:75:6E:97:D9
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32392e302f32342d3234203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f3:b9:c2:f1:76:33:19:8f:5e:04:b1:49:41:0e:2a:a6:8f:
         a5:3a:87:a8:f6:d4:d6:a0:29:31:bd:67:82:01:e4:10:69:1d:
         1c:8a:56:9b:1e:a9:93:66:99:3b:48:4e:0f:2c:d5:03:26:c9:
         31:83:9f:f8:52:99:bb:16:86:f0:19:76:8d:f1:7d:a3:37:a6:
         56:59:86:9c:02:91:30:c0:7a:cb:1e:05:a6:b4:60:79:72:ea:
         2b:39:64:57:a1:dc:38:fa:22:7e:35:bb:92:49:47:65:9c:df:
         b6:86:fe:92:fb:02:ed:d6:b8:dc:24:cc:5c:c5:a8:91:69:03:
         2c:48:e0:55:af:c2:bf:6e:60:27:7e:61:17:82:ba:75:fe:d5:
         4e:88:58:05:85:69:47:31:89:a5:fa:f2:f0:a5:ae:92:ce:d3:
         ee:5d:3a:c3:84:27:0a:53:4f:b1:c1:8a:fb:69:66:e0:6a:4e:
         25:a1:50:8a:6b:3e:77:b8:4f:48:39:00:e1:d7:29:50:f2:95:
         06:f1:42:c4:d5:71:23:7b:1b:7e:9c:5b:6e:e1:9d:a5:05:4b:
         40:87:cf:ae:5a:ee:56:7a:dd:9b:e2:bb:5f:49:b0:9f:aa:d8:
         ee:4d:50:77:7a:ff:0a:06:28:74:b6:0c:1d:51:73:f4:ac:42:
         71:cd:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:42 2026 by rpki-client