Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa
File:                     3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa (raw, json)
Hash identifier:          V0mbiV9kDw2cL8Vw5/to3TzMKA3DdBl/9Mpx2BO1J+s=
Subject key identifier:   63:24:A2:E2:F1:4B:81:41:30:B9:04:FA:05:4F:5E:54:8F:E9:B1:ED
Certificate issuer:       /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial:       6536145F0B881FD4185C8ED8BCD2044CF5675A5C
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa
Signing time:             Sun 03 May 2026 02:53:56 +0000
ROA not before:           Sun 03 May 2026 02:48:56 +0000
ROA not after:            Sun 02 May 2027 02:53:56 +0000
asID:                     139972
IP address blocks:        103.147.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
                          rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:36:14:5f:0b:88:1f:d4:18:5c:8e:d8:bc:d2:04:4c:f5:67:5a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
        Validity
            Not Before: May  3 02:48:56 2026 GMT
            Not After : May  2 02:53:56 2027 GMT
        Subject: CN=6324A2E2F14B814130B904FA054F5E548FE9B1ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9c:37:0d:b4:96:d3:3e:90:4e:19:8b:8b:4b:
                    9b:e4:80:06:4a:ab:78:75:7f:df:47:0c:3a:c5:ea:
                    7c:b9:1f:01:ee:b6:f2:fb:41:bd:10:e9:87:5e:31:
                    a5:61:aa:89:eb:d0:95:73:a5:ed:31:30:12:77:ae:
                    2a:88:ec:03:b4:06:fd:0e:88:6b:7f:45:16:6d:62:
                    5e:aa:21:b5:9a:7d:8f:12:b5:f2:51:da:e4:b4:1a:
                    fe:5c:7e:fa:e2:94:80:09:ec:40:5f:fa:30:22:8f:
                    95:4e:f7:e3:f6:47:36:05:12:46:15:ff:7c:01:4a:
                    29:33:a8:34:0c:16:88:e4:47:ff:5f:77:29:e2:df:
                    df:99:c1:f4:b5:33:5b:2f:a7:ea:fc:0d:96:6e:b0:
                    99:6a:a2:f6:61:86:5a:0c:41:90:44:6a:73:63:63:
                    07:33:07:a8:31:28:81:b5:19:78:16:74:67:06:20:
                    c1:b8:a2:1e:e9:7d:d0:b1:a2:63:3b:0a:74:06:c2:
                    4b:22:bd:26:28:c3:b1:a1:ed:bc:35:5a:c9:65:b3:
                    ca:1b:81:bd:d3:41:81:02:f3:ce:5c:18:48:c7:09:
                    ed:7c:ba:26:68:87:cb:76:0c:d8:f7:79:cd:02:cc:
                    ef:92:86:7c:04:4b:8d:02:5b:79:66:c7:46:3d:b0:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:24:A2:E2:F1:4B:81:41:30:B9:04:FA:05:4F:5E:54:8F:E9:B1:ED
            X509v3 Authority Key Identifier:
                keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:44:32:49:5b:cc:14:6c:36:32:8a:a5:b7:59:1d:ed:ab:
         0e:5c:65:f6:c5:a9:1d:e0:4c:ed:ed:f5:d1:44:b8:24:1e:ef:
         bc:9d:70:8b:93:22:90:b4:ca:82:3a:25:ff:ec:cf:41:cf:45:
         7f:5a:9a:d0:d0:75:ab:bf:34:1a:5e:af:0c:db:c2:49:db:d7:
         0e:e0:d8:7e:28:5e:e7:c5:2c:3e:85:38:47:b9:37:af:2c:1c:
         1a:1f:15:28:85:c1:78:e5:e2:3b:26:d3:dc:8f:ea:cd:59:4e:
         5b:7b:21:db:64:d6:41:66:8c:dd:3b:ed:60:8c:60:be:38:ec:
         fe:9c:c0:ac:63:8a:85:82:e8:67:d8:21:44:2c:fe:a7:ce:9b:
         ad:50:ec:4b:b0:21:92:28:df:8b:be:86:63:ad:5c:e7:da:3f:
         15:f4:54:55:b4:65:e3:0f:37:5b:da:94:24:74:d4:24:87:de:
         34:a2:3a:fa:d2:0a:80:f0:e2:5f:ec:90:fd:b7:01:f8:40:65:
         6d:60:31:1b:99:16:1e:b4:bb:9f:b8:ff:5a:6a:37:2e:f6:2c:
         8c:ef:ad:f6:20:48:22:9a:ba:b8:2a:ea:e2:46:a0:24:9e:4e:
         c4:e1:a9:26:74:a0:32:b5:a9:ba:01:47:46:fa:91:ad:f9:64:
         72:22:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:53 2026 by rpki-client