Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa
File:                     3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (raw, json)
Hash identifier:          vqX/mtnN0W8RLZb7l8bNIZx8LnJh0g2gbraFilNseKo=
Subject key identifier:   B1:8E:19:84:DF:97:AF:81:52:65:51:2C:7C:18:EA:38:20:F4:F1:E9
Certificate issuer:       /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
Certificate serial:       24D9A43A0F4E1D8F8A4C00FB55C7BE1D860152FC
Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa
Signing time:             Sun 03 May 2026 02:49:47 +0000
ROA not before:           Sun 03 May 2026 02:44:47 +0000
ROA not after:            Sun 02 May 2027 02:49:47 +0000
asID:                     140421
IP address blocks:        103.148.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl
                          rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d9:a4:3a:0f:4e:1d:8f:8a:4c:00:fb:55:c7:be:1d:86:01:52:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
        Validity
            Not Before: May  3 02:44:47 2026 GMT
            Not After : May  2 02:49:47 2027 GMT
        Subject: CN=B18E1984DF97AF815265512C7C18EA3820F4F1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:77:ee:40:a6:37:e0:5a:01:c7:ea:a7:9b:
                    cb:85:bf:39:71:11:c6:42:eb:4e:bc:4c:e2:5d:cd:
                    0f:59:1f:9c:b7:20:9f:19:60:94:11:a0:4f:32:c0:
                    de:23:21:1b:5d:e3:4e:23:0a:85:f8:27:f1:2d:49:
                    00:a1:11:ea:8c:eb:e1:12:47:cf:db:99:6a:c3:f4:
                    91:18:0c:73:60:11:ae:66:08:12:1d:4e:4f:5a:c5:
                    1c:bd:ee:55:1f:4e:a6:6d:6b:e2:ba:db:9f:9b:28:
                    77:e6:94:b6:7b:4a:7b:c2:0f:c0:3d:c6:85:e8:8a:
                    b1:6b:d7:9d:3e:d2:d3:0b:17:ee:8d:35:ae:05:3e:
                    3d:01:4c:59:dd:e2:1e:f0:9f:97:cf:0e:cd:95:e7:
                    a4:d2:de:fd:4b:9e:fa:99:6b:e3:b8:41:76:23:3f:
                    99:1d:9f:02:47:11:60:19:2d:ac:79:2a:bc:c5:64:
                    64:1f:e7:21:8e:c3:24:20:00:0a:44:03:7e:9c:9f:
                    20:92:ab:8d:e8:5a:d0:ac:11:91:66:81:0c:c4:67:
                    6f:d1:2e:44:10:ba:20:b4:ad:0a:d2:56:c9:13:99:
                    47:10:3c:86:77:0b:ce:8f:6b:8d:27:69:98:6e:28:
                    f2:16:8d:13:00:18:b6:69:d2:ca:3f:4f:c4:dc:11:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8E:19:84:DF:97:AF:81:52:65:51:2C:7C:18:EA:38:20:F4:F1:E9
            X509v3 Authority Key Identifier:
                keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:3d:22:05:36:15:33:9f:e3:82:93:da:7b:a9:08:8a:b5:f0:
         a1:0a:23:f4:8b:cd:4f:c2:c0:94:b5:7d:63:fe:d9:d0:71:9f:
         d1:a9:6f:bf:83:50:12:29:9f:7d:4d:77:b9:6f:4b:77:c7:b1:
         58:4d:3f:68:20:4a:87:41:9e:06:fd:c9:40:14:b3:28:c2:68:
         7b:96:d3:e3:b7:84:f2:ab:f2:a9:ff:99:c5:e1:e9:1c:55:8a:
         40:1d:51:69:ba:c4:74:57:78:42:a3:f5:e2:6c:a0:6c:ff:34:
         34:0b:14:07:8b:b3:ea:79:29:40:d9:90:a0:c3:bf:2d:bc:35:
         a7:de:73:bf:e9:e4:99:84:07:9c:f3:7b:af:e1:9c:b1:de:81:
         4d:6b:2a:70:30:0e:bf:02:bd:ad:f9:26:43:d6:ec:0f:7a:fc:
         70:78:24:aa:da:29:cc:94:ed:4d:43:e8:f9:45:b1:6e:26:95:
         72:93:6c:9f:6d:8b:ae:1d:e9:38:91:d9:41:a3:d7:4d:80:97:
         90:00:89:d1:85:b8:c8:4a:a8:f9:13:34:1b:bc:e1:57:96:cd:
         1e:91:f3:97:c1:97:41:9c:d4:1c:1e:ec:3e:09:fb:b8:0e:da:
         6e:78:74:6b:da:6f:7e:ae:fb:5a:c9:50:d4:eb:47:ba:a9:01:
         3a:d1:6d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:54 2026 by rpki-client