Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
File:                     3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (raw, json)
Hash identifier:          JNrE3YAgSKkXvk2KuY4C3xc6vFJ8aaqlGvqUWAA5DE4=
Subject key identifier:   BC:77:CC:FB:34:00:97:D6:CC:93:17:40:46:44:DF:79:A8:0E:DF:AD
Certificate issuer:       /CN=9392F95F0C3394DEA7FFF985C085F4FF0A2660FB
Certificate serial:       1E96DF45EC9B173DA8941E7240E50CEA5F9A2797
Authority key identifier: 93:92:F9:5F:0C:33:94:DE:A7:FF:F9:85:C0:85:F4:FF:0A:26:60:FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
Signing time:             Sun 03 May 2026 02:53:39 +0000
ROA not before:           Sun 03 May 2026 02:48:39 +0000
ROA not after:            Sun 02 May 2027 02:53:39 +0000
asID:                     9326
IP address blocks:        103.148.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl
                          rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:96:df:45:ec:9b:17:3d:a8:94:1e:72:40:e5:0c:ea:5f:9a:27:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392F95F0C3394DEA7FFF985C085F4FF0A2660FB
        Validity
            Not Before: May  3 02:48:39 2026 GMT
            Not After : May  2 02:53:39 2027 GMT
        Subject: CN=BC77CCFB340097D6CC9317404644DF79A80EDFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d7:01:6a:38:23:b2:0b:47:75:c6:1a:aa:5f:
                    81:cb:33:93:b6:42:f6:ec:74:ed:f4:61:62:28:78:
                    e0:83:1b:42:52:c9:0a:3b:8d:71:70:bb:4f:f3:72:
                    24:00:01:7f:ed:c5:e7:e9:4c:4d:dc:6e:44:c6:7b:
                    37:a7:a0:b9:c6:d0:22:2f:fa:08:33:2d:1b:3f:b1:
                    6b:93:d8:08:12:a9:f9:63:6d:08:47:6b:f6:72:eb:
                    60:ff:0d:d9:b7:e5:57:c7:bb:09:c3:a9:ac:f4:bf:
                    f0:99:91:3f:ec:fc:45:b9:ca:c3:fc:2e:06:0d:9c:
                    b0:3f:29:cd:a9:8c:55:aa:a4:70:dd:b1:52:6d:9b:
                    89:40:42:8b:d4:3c:d1:96:98:e9:c7:30:5f:92:ad:
                    8c:55:bf:3f:9f:80:45:55:bc:d0:62:d1:8f:5d:0f:
                    b4:f5:22:5e:ff:13:ac:9f:23:ab:ba:d0:47:ef:70:
                    dc:bc:da:94:9a:8e:7a:a1:89:6d:62:b0:a8:48:3e:
                    73:18:f1:72:c2:56:df:da:d8:ee:9a:57:ea:b2:35:
                    98:a0:66:e0:06:cc:d3:d4:aa:bd:d7:cc:c3:cd:a5:
                    b2:5a:85:e1:cc:d8:80:a3:6b:69:47:66:f9:eb:0e:
                    a9:4b:1c:c2:c3:24:00:17:59:4e:a3:4d:e5:e0:8a:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:77:CC:FB:34:00:97:D6:CC:93:17:40:46:44:DF:79:A8:0E:DF:AD
            X509v3 Authority Key Identifier:
                keyid:93:92:F9:5F:0C:33:94:DE:A7:FF:F9:85:C0:85:F4:FF:0A:26:60:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:b0:41:e6:51:1d:fe:5a:d3:93:78:36:73:ba:f5:bf:bd:06:
         70:b8:40:9b:5b:b7:1b:9c:7b:bd:31:a6:de:55:33:da:1a:4e:
         f7:90:ac:e5:dd:e7:66:6e:23:5b:1d:3f:08:41:b2:2a:d7:e5:
         3f:64:8c:b0:83:37:be:78:51:e4:50:95:04:cb:d8:73:7f:91:
         ca:fd:b6:de:ab:fe:fd:1b:19:21:06:3b:43:c6:c1:98:8a:a2:
         64:07:5f:f8:f1:9b:2f:7e:7b:b4:10:03:4e:60:81:d8:34:cf:
         a3:6c:6c:25:e2:91:eb:f1:6c:15:7b:46:2f:7d:67:1e:1a:44:
         b2:46:72:dc:65:9c:1d:04:c1:83:2a:81:18:e5:c6:17:4a:86:
         c1:d2:cb:ab:77:47:b7:03:d7:0c:78:ed:3b:78:96:cd:b2:ac:
         1c:13:2c:74:3c:04:2c:2d:87:c7:2f:4e:24:d3:ff:1d:7c:b4:
         f3:5b:f2:f2:87:48:23:10:70:6a:8d:aa:71:8f:fc:c5:b3:ce:
         9f:d1:5c:51:b4:aa:29:ae:93:da:c2:77:b2:e0:b9:13:1e:f8:
         de:16:78:5b:bd:05:5c:b3:90:fa:39:23:7c:6a:06:d0:8b:e9:
         83:e6:42:8f:db:83:7c:7d:71:1f:8d:31:7e:54:e9:bb:a4:0e:
         b9:29:24:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:20 2026 by rpki-client