Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa
File:                     3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (raw, json)
Hash identifier:          rqI3PL8vwSW0P/PJNj65/4Uzquyhsko/Jx79Jej+5aU=
Subject key identifier:   2F:6E:4C:6F:2B:64:7C:39:EC:C9:3E:F3:C4:E4:CB:47:CF:45:5C:0B
Certificate issuer:       /CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0
Certificate serial:       6C8098F8D555843DBA6E5BFC093F31FCA542B8B5
Authority key identifier: 47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa
Signing time:             Sun 03 May 2026 02:56:48 +0000
ROA not before:           Sun 03 May 2026 02:51:48 +0000
ROA not after:            Sun 02 May 2027 02:56:48 +0000
asID:                     135450
IP address blocks:        103.65.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl
                          rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:80:98:f8:d5:55:84:3d:ba:6e:5b:fc:09:3f:31:fc:a5:42:b8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0
        Validity
            Not Before: May  3 02:51:48 2026 GMT
            Not After : May  2 02:56:48 2027 GMT
        Subject: CN=2F6E4C6F2B647C39ECC93EF3C4E4CB47CF455C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:df:65:f9:95:1a:e1:73:b0:fb:55:ff:11:
                    9f:b7:97:c1:8a:6d:09:3a:c6:14:7e:12:2d:da:e3:
                    f5:85:8a:c1:2a:f1:16:ac:45:ad:8d:d7:2a:05:4a:
                    53:25:b9:11:89:64:4e:1b:a5:f2:2f:2f:31:d2:e4:
                    3e:87:44:9e:47:d1:24:a6:27:38:b7:3e:61:c3:70:
                    5c:6e:ea:98:c0:c4:07:39:70:c3:1e:28:47:13:3b:
                    bc:e8:3d:a2:92:76:b4:13:fc:00:4e:75:58:a2:f3:
                    93:b5:13:3b:7e:e5:d2:4f:8f:9a:e1:5e:54:62:33:
                    1c:91:50:a5:c8:9f:cd:e9:0a:ed:89:39:7b:d0:6b:
                    fe:4a:86:22:7b:d6:72:83:94:82:cf:9b:eb:82:26:
                    9a:f2:8d:50:df:34:25:45:92:f9:7c:36:27:9d:4f:
                    85:c3:36:81:65:b0:28:bf:43:d2:3a:40:91:75:34:
                    2f:69:c9:06:cb:f4:33:d8:89:f4:65:d8:b6:fd:01:
                    1d:67:81:82:51:3c:50:5d:38:a6:e9:f3:6b:aa:af:
                    77:54:f2:15:10:de:c1:08:d4:13:61:2b:5a:22:63:
                    26:7a:7c:03:08:c5:bb:5c:f8:fe:94:ea:6a:c3:92:
                    9f:a6:1b:90:e1:07:14:68:cd:96:ff:32:f4:62:27:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6E:4C:6F:2B:64:7C:39:EC:C9:3E:F3:C4:E4:CB:47:CF:45:5C:0B
            X509v3 Authority Key Identifier:
                keyid:47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:85:db:24:3d:8e:63:7d:ba:61:b3:1b:d3:27:bd:a4:e7:
         9a:6c:8d:e6:b6:a1:3f:0a:f8:5f:ff:71:73:7f:b1:49:13:ff:
         4d:5c:e9:ac:f0:e0:59:27:bd:0c:c0:5f:bc:b6:a4:1e:ba:3f:
         79:04:ac:3a:b6:d1:37:53:75:c6:60:99:2e:be:1b:eb:70:9b:
         85:32:94:40:b0:33:67:78:56:96:1d:1a:ee:58:1c:97:b4:2f:
         16:0a:f3:a8:df:01:d8:ee:98:40:8e:02:31:f9:b9:df:f2:ac:
         ee:e8:03:22:d5:18:c0:c2:80:33:2e:27:f0:d9:10:c5:33:8e:
         f9:d6:ec:5b:d7:04:2d:8f:ea:56:96:d2:0c:68:91:9b:86:53:
         a8:38:93:c3:f7:2b:fe:97:e9:93:da:d1:4c:a1:d3:18:7f:dc:
         6f:da:08:d9:87:ac:70:29:d9:48:63:8e:fa:e1:db:31:2d:06:
         76:cf:13:ca:36:f3:69:e3:55:67:ee:f2:b3:27:c8:6c:fd:27:
         7a:45:46:4a:0b:ec:fd:8c:07:c1:b3:da:81:93:73:a2:b6:ea:
         9f:a8:33:ec:08:44:ab:9e:b0:29:37:fc:6d:50:cb:00:41:bc:
         e9:fc:90:72:8c:31:df:ba:fb:8f:28:46:7a:e5:74:8d:c0:ee:
         b5:51:66:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:43 2026 by rpki-client