Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa
File:                     3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (raw, json)
Hash identifier:          KFtuEHm37ul5faThoZcK5kQxOUy32ImJwfhhme8UX4Q=
Subject key identifier:   5D:52:65:C6:F0:50:54:DF:46:27:F7:A1:53:7D:8C:57:25:2C:DA:05
Certificate issuer:       /CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC
Certificate serial:       710ED2CC5380CC2DB2A4BFD3B8FE74EBEB4AC153
Authority key identifier: 69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa
Signing time:             Sun 03 May 2026 02:53:02 +0000
ROA not before:           Sun 03 May 2026 02:48:02 +0000
ROA not after:            Sun 02 May 2027 02:53:02 +0000
asID:                     139969
IP address blocks:        103.147.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl
                          rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0e:d2:cc:53:80:cc:2d:b2:a4:bf:d3:b8:fe:74:eb:eb:4a:c1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC
        Validity
            Not Before: May  3 02:48:02 2026 GMT
            Not After : May  2 02:53:02 2027 GMT
        Subject: CN=5D5265C6F05054DF4627F7A1537D8C57252CDA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:f0:25:35:32:2d:65:cc:23:ad:fe:0e:b2:
                    ac:e8:01:11:f3:d2:24:96:f2:ed:af:27:1a:0a:5a:
                    fe:2b:80:ca:fb:15:f0:1e:fd:e7:5d:fc:dc:d6:85:
                    e1:4a:aa:42:9c:bb:75:51:df:75:86:56:21:a7:cb:
                    cf:7b:82:74:4e:b6:0e:c1:9d:eb:46:db:c0:c7:68:
                    4d:fb:b3:37:e5:73:00:d7:3d:e0:6c:b3:3f:18:12:
                    f6:4e:6e:61:4e:ee:0c:d2:1c:0e:86:83:17:26:16:
                    b8:dd:7d:3a:eb:2d:6c:f2:51:2c:eb:bc:e0:50:c4:
                    f2:13:d2:ef:73:fc:06:28:12:b8:41:4a:00:c6:a3:
                    23:5f:db:73:9f:1b:e4:2a:54:e9:10:8b:42:77:d5:
                    6e:a4:2f:4e:81:76:52:fe:f3:32:4a:b1:9c:cb:08:
                    87:9c:c7:e1:a0:05:e6:b0:7b:e5:ec:2d:58:52:73:
                    03:f4:ed:8d:a3:79:a8:ec:55:80:bd:28:ce:9f:a3:
                    b7:c2:d2:71:bc:a8:b9:6e:4b:26:83:b4:79:a5:a0:
                    dc:4d:b4:ed:85:b8:d7:ab:a8:6c:c5:63:85:49:30:
                    e5:76:53:66:86:61:29:4a:8d:21:e1:1f:69:e4:bf:
                    92:1b:71:71:a7:c1:46:42:e7:c6:3c:b7:f0:06:1e:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:52:65:C6:F0:50:54:DF:46:27:F7:A1:53:7D:8C:57:25:2C:DA:05
            X509v3 Authority Key Identifier:
                keyid:69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:a8:82:42:05:93:d6:c8:b1:e5:d6:1b:aa:61:6e:c3:5f:20:
         67:97:10:fb:28:68:e6:17:26:95:17:7f:59:8e:ea:8d:d5:23:
         09:46:53:0c:e7:92:7b:0a:09:65:65:b6:39:e5:e1:1b:06:11:
         cb:f1:62:bb:c3:f1:5c:3c:1d:45:2b:14:95:4a:24:45:ea:46:
         86:b6:69:70:7d:81:51:fd:28:a3:3a:90:04:1a:5b:c6:e7:20:
         f5:a6:ab:ad:27:97:fa:08:16:e4:d3:ff:65:b4:58:92:cd:49:
         13:ae:38:ad:e3:ff:d2:d8:f7:b7:76:b9:38:6a:69:9d:44:c3:
         b2:6b:42:a3:34:e4:a8:c1:59:0c:c1:30:f1:58:71:a6:35:21:
         8e:d2:bd:de:da:e2:84:47:a6:5a:28:80:18:3f:83:34:e6:c2:
         ed:c8:0f:12:f3:df:df:55:73:f8:f3:99:8c:32:35:53:87:a4:
         e7:d8:34:d3:d9:d9:35:59:60:04:b2:c8:e7:72:83:9f:a1:42:
         80:64:ee:88:09:bc:65:fc:3e:65:48:e4:6b:f0:fd:06:07:a8:
         6e:93:06:d6:0a:ae:e3:7e:7b:fb:0f:5e:7d:96:0e:ac:86:6e:
         e7:31:ec:39:1b:c1:78:b6:6f:d5:12:3f:b1:81:36:20:fa:63:
         2f:b2:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:01 2026 by rpki-client