Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa
File:                     3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (raw, json)
Hash identifier:          jnGR7HR1o9CjSKGxVZEINbrozGV4LnkdIOURY4rwMfA=
Subject key identifier:   6A:69:07:BF:AE:F7:6A:E1:D3:29:97:14:FC:B7:02:EC:47:D4:2B:B3
Certificate issuer:       /CN=9392F95F0C3394DEA7FFF985C085F4FF0A2660FB
Certificate serial:       110FAE926ED785346018E1012EA7D231081984FA
Authority key identifier: 93:92:F9:5F:0C:33:94:DE:A7:FF:F9:85:C0:85:F4:FF:0A:26:60:FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa
Signing time:             Sun 03 May 2026 02:53:39 +0000
ROA not before:           Sun 03 May 2026 02:48:39 +0000
ROA not after:            Sun 02 May 2027 02:53:39 +0000
asID:                     46032
IP address blocks:        103.148.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl
                          rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0f:ae:92:6e:d7:85:34:60:18:e1:01:2e:a7:d2:31:08:19:84:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392F95F0C3394DEA7FFF985C085F4FF0A2660FB
        Validity
            Not Before: May  3 02:48:39 2026 GMT
            Not After : May  2 02:53:39 2027 GMT
        Subject: CN=6A6907BFAEF76AE1D3299714FCB702EC47D42BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:51:e6:7b:65:d8:9b:53:49:57:58:e7:c3:
                    cf:1a:0e:9d:3e:65:00:7e:67:38:40:79:e6:7a:30:
                    8f:27:29:0f:1c:0a:d9:5f:ed:de:e4:e1:60:20:b0:
                    06:e9:c3:70:e5:ec:d5:cc:ca:f6:16:51:fa:fd:ff:
                    23:07:87:89:aa:43:0c:ae:39:cd:97:36:08:f5:0f:
                    ab:e0:d7:49:d2:c8:00:75:f4:b4:6d:50:d0:83:3c:
                    99:0c:6b:e2:f3:1a:e7:38:d8:55:b3:ea:27:3b:a6:
                    d5:9c:0c:82:d2:b7:60:6e:5a:cd:6b:cb:05:9a:41:
                    73:74:28:2d:2e:a5:6f:12:0a:19:36:0e:32:a7:e8:
                    c9:e1:30:b1:15:6b:5a:95:af:99:d0:43:2c:52:1a:
                    8f:13:7f:59:b5:77:01:8c:5a:65:52:2b:eb:47:96:
                    03:7c:46:68:74:78:cd:3a:5c:71:68:42:48:86:c9:
                    ce:96:8b:b4:2b:8f:87:5d:de:f4:c2:04:ec:17:b1:
                    80:e9:6e:88:69:2a:4c:23:e9:1d:e4:a1:4c:02:cb:
                    25:7b:fe:44:a6:fc:3a:58:49:e2:35:4b:48:12:d9:
                    0c:26:07:37:2c:c6:69:72:ed:96:4e:12:4d:e9:ea:
                    5c:c5:85:6e:90:5d:9c:27:3a:27:bb:3f:65:5e:5d:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:69:07:BF:AE:F7:6A:E1:D3:29:97:14:FC:B7:02:EC:47:D4:2B:B3
            X509v3 Authority Key Identifier:
                keyid:93:92:F9:5F:0C:33:94:DE:A7:FF:F9:85:C0:85:F4:FF:0A:26:60:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:38:9c:52:81:4c:21:20:30:20:e1:dc:17:9d:28:11:bb:e7:
         9f:41:28:55:d6:e8:a1:2e:67:61:6e:b2:ea:d2:98:bf:cd:69:
         47:7b:43:34:71:0a:a8:82:ec:fd:c1:e2:69:66:58:49:d7:e5:
         13:22:61:8a:02:02:d3:d8:89:de:94:2d:44:54:31:94:af:83:
         e6:e1:85:60:d7:2d:ae:e1:99:5c:e9:6f:de:96:54:47:c1:53:
         5d:9d:3f:be:d9:a5:f7:c6:3a:fc:3a:4b:74:2b:ae:4a:d6:d0:
         a7:c1:4a:ae:8d:d8:f2:9c:d2:71:5b:18:74:8e:ef:b4:ee:d2:
         d9:2f:c9:ee:d6:13:d2:7a:03:ad:6f:73:cf:d0:ba:d9:7a:8c:
         07:24:0f:86:b7:cf:8d:39:37:ed:1c:3c:da:8c:7b:64:c6:52:
         e3:6f:21:10:ca:ff:f2:24:0a:02:b8:26:66:79:18:dd:d3:35:
         12:fd:15:56:67:3f:eb:63:70:76:24:21:23:af:cd:15:d8:02:
         79:32:75:58:04:55:ed:62:56:ee:86:d7:3c:e5:0f:ca:b5:db:
         70:e3:53:5b:74:8f:cc:85:54:02:7f:23:ab:c8:74:05:fc:96:
         20:dc:87:f4:8a:11:bb:c8:93:07:06:54:fe:fc:fc:fb:f5:ea:
         2c:33:c2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:00 2026 by rpki-client