Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31322e302f32342d3234203d3e203535363935.roa
File:                     3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (raw, json)
Hash identifier:          ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=
Subject key identifier:   0B:C8:06:90:20:E7:2B:0A:22:33:99:0A:C9:E8:20:7E:7A:B0:A9:81
Certificate issuer:       /CN=D8435659F33EE1F7005A21C1387F49D353431808
Certificate serial:       23E3B2EECCB47A3A3F2DDBE088283D5BF83EA85E
Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31322e302f32342d3234203d3e203535363935.roa
Signing time:             Sun 03 May 2026 02:52:17 +0000
ROA not before:           Sun 03 May 2026 02:47:17 +0000
ROA not after:            Sun 02 May 2027 02:52:17 +0000
asID:                     55695
IP address blocks:        103.247.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl
                          rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e3:b2:ee:cc:b4:7a:3a:3f:2d:db:e0:88:28:3d:5b:f8:3e:a8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808
        Validity
            Not Before: May  3 02:47:17 2026 GMT
            Not After : May  2 02:52:17 2027 GMT
        Subject: CN=0BC8069020E72B0A2233990AC9E8207E7AB0A981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:3e:e4:09:4c:d8:fd:b6:cf:75:e5:ff:77:
                    31:eb:57:71:1b:fa:b4:66:1b:51:89:0e:0a:26:8c:
                    da:42:bf:bb:c5:79:52:82:d5:30:fc:27:00:b0:f3:
                    82:a7:2d:6b:e7:94:82:a4:f9:23:71:9d:b6:1d:2d:
                    0d:c7:bc:0e:f4:c6:e3:a5:48:86:cb:c1:9c:07:c7:
                    e0:fa:9c:38:38:cc:de:14:38:e1:97:79:af:61:01:
                    3d:4d:13:72:f8:55:4e:e4:1a:b9:3a:c4:fe:0d:c2:
                    d3:28:67:1c:c3:91:34:dc:d4:99:7e:5e:76:d8:cc:
                    66:c2:b4:f1:b2:a4:c4:1e:03:23:9a:5e:c0:26:9b:
                    22:79:95:40:5e:35:66:31:57:65:40:4f:e1:65:c4:
                    f9:48:e3:21:4d:73:05:be:ff:8e:9a:bf:9c:27:02:
                    4d:e9:0e:f3:16:64:21:db:09:26:36:79:d8:8a:41:
                    df:f6:f9:55:6f:f7:fe:71:fe:36:74:6d:58:52:b5:
                    3d:c9:c1:69:d2:c0:bd:53:91:36:ab:fd:88:37:42:
                    52:2d:15:4f:96:28:07:fe:7d:33:24:9b:8b:63:1c:
                    17:46:09:95:9f:07:83:b6:46:43:60:93:09:dd:f5:
                    a3:89:e9:62:da:c2:09:a0:de:7e:0d:c5:cb:fd:66:
                    72:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C8:06:90:20:E7:2B:0A:22:33:99:0A:C9:E8:20:7E:7A:B0:A9:81
            X509v3 Authority Key Identifier:
                keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31322e302f32342d3234203d3e203535363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ee:de:88:87:14:0b:fe:ee:93:75:59:41:12:cf:a7:ee:c9:
         13:c6:b4:c9:ef:e0:3d:6b:8d:e1:59:0b:3e:d3:1d:dc:cf:c6:
         f3:44:86:b8:80:eb:f4:13:24:5a:ce:0d:a8:5e:4b:6a:eb:16:
         32:c4:83:70:07:69:41:e3:97:41:97:66:2a:b8:1e:98:f5:d4:
         89:18:10:9a:f0:69:a0:ab:4f:d8:fb:80:46:19:5e:54:c4:55:
         d2:78:f7:4e:98:7a:f3:4b:f2:90:4f:97:c5:4a:90:a7:6f:59:
         d8:2d:0c:53:05:fb:97:1c:c9:43:aa:a2:58:79:79:2b:86:bb:
         8f:9a:d7:a7:0e:bb:46:43:79:24:4d:b3:27:fe:1d:b0:50:38:
         6e:f6:09:8f:7b:95:e8:6c:98:ef:b1:5a:de:e0:eb:73:75:fc:
         68:17:0d:09:97:af:e7:2a:89:ff:a8:82:84:b9:aa:cd:1e:27:
         26:a2:9a:c7:3f:09:50:77:ae:95:18:bf:03:a5:24:90:57:df:
         ed:6b:cd:9b:f9:ea:b2:69:bd:43:ac:70:02:de:bf:84:01:7c:
         23:38:6b:e1:f5:69:d7:40:4c:ea:1b:76:65:46:2f:31:43:25:
         ec:6e:e7:bd:37:10:bc:c9:12:70:cd:28:ac:36:0c:61:f0:59:
         0d:ab:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:25 2026 by rpki-client