Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa
File:                     3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa (raw, json)
Hash identifier:          4yca+vF1UEkWkMfF4Bm7NWEBGak9nR/PsFLSUJTZc44=
Subject key identifier:   CF:B6:B9:21:C2:EE:CC:1E:4F:B7:F6:01:8A:91:80:EC:B7:AF:F7:77
Certificate issuer:       /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial:       26EEF10DAFE6CEF5C202F6865827D4AC1953D583
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa
Signing time:             Sun 03 May 2026 02:54:01 +0000
ROA not before:           Sun 03 May 2026 02:49:01 +0000
ROA not after:            Sun 02 May 2027 02:54:01 +0000
asID:                     139972
IP address blocks:        103.147.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
                          rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ee:f1:0d:af:e6:ce:f5:c2:02:f6:86:58:27:d4:ac:19:53:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
        Validity
            Not Before: May  3 02:49:01 2026 GMT
            Not After : May  2 02:54:01 2027 GMT
        Subject: CN=CFB6B921C2EECC1E4FB7F6018A9180ECB7AFF777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:b7:16:61:8e:83:fe:d5:6d:60:10:13:af:
                    fe:4f:7e:86:41:33:a0:07:f4:7c:8e:33:a1:cc:59:
                    00:60:8b:e1:40:96:58:db:14:2d:f5:08:13:e1:0b:
                    78:e8:34:da:ae:a8:8a:f9:65:52:eb:f5:c3:06:b8:
                    76:9d:df:2e:ef:8a:b7:aa:d9:c2:d0:9f:de:76:1f:
                    7d:a3:a0:1e:78:4f:56:db:ae:f3:92:fd:b2:78:e6:
                    ae:18:5c:dc:fd:60:76:6e:7e:80:35:2a:ec:30:f1:
                    b0:28:7b:b3:2b:b8:42:cd:61:9f:f0:8b:86:bb:d7:
                    d5:2f:9a:dc:60:c1:da:0d:ba:68:18:82:8a:d6:bf:
                    89:45:e7:4e:b7:18:d5:b5:b3:18:4f:eb:ef:2b:57:
                    c6:ac:d7:fe:cf:23:3f:08:1f:69:52:9b:49:91:65:
                    5e:77:98:06:12:c1:23:42:6b:f5:b3:c3:cc:ac:55:
                    d6:75:f3:c9:18:c1:e6:ca:f5:56:10:ca:94:66:a7:
                    dd:3f:5e:ae:80:33:12:4c:5b:a7:2d:ad:8d:84:5a:
                    9b:39:62:69:bf:be:fa:9a:72:84:6b:ae:f4:5c:3f:
                    c3:f3:2c:21:27:02:7f:0e:30:1a:48:0f:38:10:15:
                    b8:90:7d:00:c6:10:83:fe:99:1f:e9:e9:e2:05:77:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B6:B9:21:C2:EE:CC:1E:4F:B7:F6:01:8A:91:80:EC:B7:AF:F7:77
            X509v3 Authority Key Identifier:
                keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:e7:47:66:ac:58:49:45:32:42:01:54:6e:bf:1e:95:21:08:
         b0:8b:0b:f7:a1:14:61:d0:ff:d3:91:31:dd:db:72:f9:20:7e:
         75:53:85:c0:0c:bb:41:e5:14:17:f1:27:29:a7:4f:52:8a:c6:
         b9:f2:ef:bb:3d:7e:e0:19:98:3e:0e:60:84:67:b8:bc:f1:5c:
         11:f2:d9:d1:00:ba:45:a7:4b:e6:1a:fb:76:3d:b1:1b:8b:56:
         c8:63:7b:80:76:c9:1d:72:b5:92:b6:7a:1f:11:66:22:4f:c2:
         4d:99:19:00:10:67:f9:6e:dc:b7:4a:4d:c6:de:3e:48:d1:18:
         06:79:58:1c:db:0f:bf:26:a3:2e:a9:9d:b1:73:71:35:30:bd:
         85:3b:c7:e4:9a:bb:de:91:40:64:3a:ac:b4:19:6b:c0:66:e9:
         fc:fa:53:a5:52:d8:07:6c:96:aa:0a:cb:d6:6b:16:c0:bc:cc:
         8f:64:cf:fe:42:43:b7:43:2c:91:d9:75:b6:7c:2f:23:5c:e8:
         1e:33:51:40:7a:79:f4:b7:df:56:7c:64:7f:1e:c7:5e:e2:36:
         ca:ab:c3:56:e6:48:57:de:a5:5d:8e:94:e7:ab:9f:e6:ec:03:
         43:52:c6:d5:52:cb:2f:b2:34:f5:7f:9e:67:92:29:c9:cc:c0:
         64:61:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:10 2026 by rpki-client