Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa
File:                     3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (raw, json)
Hash identifier:          SMAdsArRGPYxDZsZ/CCe6hdzjIJy0KvpAA+wvauroZY=
Subject key identifier:   64:60:80:00:49:22:24:3F:CB:DE:80:73:ED:35:8D:67:C2:AF:11:E9
Certificate issuer:       /CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685
Certificate serial:       70C699102E535A0A086B427453CD6DAD9F9F0BFD
Authority key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa
Signing time:             Sun 03 May 2026 02:56:49 +0000
ROA not before:           Sun 03 May 2026 02:51:49 +0000
ROA not after:            Sun 02 May 2027 02:56:49 +0000
asID:                     149728
IP address blocks:        103.187.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl
                          rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c6:99:10:2e:53:5a:0a:08:6b:42:74:53:cd:6d:ad:9f:9f:0b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685
        Validity
            Not Before: May  3 02:51:49 2026 GMT
            Not After : May  2 02:56:49 2027 GMT
        Subject: CN=646080004922243FCBDE8073ED358D67C2AF11E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:e3:6a:cc:7d:81:f6:1c:6e:99:c3:b7:13:
                    fe:6d:c4:53:f7:26:6c:76:db:4c:6d:18:bc:0e:68:
                    66:42:61:72:4f:b4:a4:cc:d4:86:26:28:48:75:93:
                    94:c0:42:71:f1:4f:59:a8:71:0a:ec:85:76:71:51:
                    4a:61:a7:bd:1c:cc:50:b6:0f:67:83:2f:68:5f:19:
                    f7:b9:e9:dc:c8:a3:9c:2d:54:e0:98:41:9f:8e:e3:
                    b5:a1:4b:cf:b2:01:57:c3:3e:2b:f6:c3:44:ba:c4:
                    75:6a:63:0d:a8:8d:42:c0:09:85:2a:fe:6a:67:0b:
                    65:2c:b9:bd:77:e0:40:83:02:03:03:ca:72:87:33:
                    06:b3:b7:a1:4c:94:ea:0b:a0:be:4b:5f:35:25:1d:
                    71:59:d3:b1:30:7f:7e:ba:97:50:18:c8:5a:5e:18:
                    06:a4:42:cd:90:7d:1c:7d:66:76:c7:b9:30:d8:e9:
                    63:aa:89:b5:5b:78:bb:d9:96:43:ab:bd:79:23:07:
                    f6:b8:20:ed:00:5a:87:51:b5:1e:cf:1f:2e:24:50:
                    73:74:36:bc:44:d8:3d:24:08:85:7d:5d:92:bb:2f:
                    1d:bc:b7:5c:e9:c2:94:e8:cf:2a:7f:5e:f9:4f:b5:
                    dd:f2:02:ba:08:e8:a7:bd:42:b7:ce:41:2e:c9:e0:
                    74:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:60:80:00:49:22:24:3F:CB:DE:80:73:ED:35:8D:67:C2:AF:11:E9
            X509v3 Authority Key Identifier:
                keyid:B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:74:df:56:58:ae:b4:98:a5:fb:02:34:c3:f3:21:c8:53:c3:
         8a:50:36:86:fa:e3:8d:0d:25:49:0e:42:de:f2:6f:26:0b:0e:
         bf:74:68:58:eb:3c:cd:81:9f:65:73:9f:62:1f:91:72:03:d8:
         48:c7:64:8c:d8:fa:7e:c4:4a:7f:52:0d:e0:86:0b:82:14:da:
         25:34:3e:a2:6b:56:be:9e:e7:e6:61:69:d2:6d:a6:d1:18:44:
         2e:01:b7:9e:2f:52:c8:d2:90:72:f8:54:e0:f5:34:e5:96:8c:
         5b:a1:5a:da:8f:cb:3d:db:3d:cb:97:f0:bb:ef:11:32:13:a3:
         49:2b:4b:4e:fc:68:17:2b:50:7b:76:71:87:cd:7a:37:33:34:
         e1:cc:31:b0:37:90:ef:f0:7f:5e:b2:c5:34:bb:1a:1d:43:c9:
         d9:23:bc:a6:76:64:1b:8d:37:24:38:ae:b6:8c:c1:b0:42:4f:
         81:71:fe:d2:8b:f9:dc:2d:de:c8:de:3a:b5:40:a3:e8:7b:66:
         a6:df:9f:5e:12:2c:e8:60:a9:1c:f0:96:19:c2:4a:cc:6d:75:
         88:b8:73:41:a5:57:15:1a:88:ce:e5:12:15:9c:c0:a4:03:c2:
         cd:72:9f:b5:b1:83:eb:ca:48:a7:fc:62:4a:2d:45:70:71:55:
         58:0f:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:16 2026 by rpki-client