Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa
File:                     3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=
Subject key identifier:   B6:2E:1F:CA:99:3E:42:63:6B:97:9F:C1:FD:92:EE:56:61:84:99:0E
Certificate issuer:       /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Certificate serial:       46FF44ECFB3B324DFB53000ADB34BFA3272551DA
Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa
Signing time:             Sun 03 May 2026 02:57:39 +0000
ROA not before:           Sun 03 May 2026 02:52:39 +0000
ROA not after:            Sun 02 May 2027 02:57:39 +0000
asID:                     135477
IP address blocks:        103.76.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
                          rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ff:44:ec:fb:3b:32:4d:fb:53:00:0a:db:34:bf:a3:27:25:51:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
        Validity
            Not Before: May  3 02:52:39 2026 GMT
            Not After : May  2 02:57:39 2027 GMT
        Subject: CN=B62E1FCA993E42636B979FC1FD92EE566184990E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:b7:36:9c:31:07:b8:7b:ce:3e:ac:05:df:
                    06:41:9a:3d:30:d8:a6:22:c6:04:c6:57:79:c4:0f:
                    78:c0:12:84:24:9e:a8:0b:97:b5:7c:98:04:c2:0d:
                    54:9b:39:17:25:e9:e7:a5:79:c2:9d:1e:80:c2:d1:
                    2d:e3:ca:6f:91:18:51:93:66:e2:78:ad:2e:54:0a:
                    53:19:40:44:a3:19:1e:a7:15:fc:38:3b:9a:f9:71:
                    db:fa:a1:0f:05:e2:29:4b:cc:d1:59:ff:62:47:41:
                    67:e4:00:52:d3:d1:cf:9d:ce:f2:b0:9b:71:3d:2f:
                    ff:95:c5:a6:07:08:98:52:9d:fe:c6:7d:d1:b7:ed:
                    d4:cc:0c:1c:8a:4d:cf:12:63:99:d1:b6:70:c0:c4:
                    11:22:0a:b5:05:9f:c6:8f:91:1e:24:2f:27:cf:53:
                    c0:82:45:7a:a5:c9:bd:c9:2b:37:e0:52:b0:31:08:
                    55:ba:b5:78:cb:98:8b:a9:5a:e3:ed:e0:41:62:22:
                    9e:70:f4:7b:a6:1b:0e:7e:0f:a7:b2:00:65:aa:77:
                    3b:55:81:6f:b1:97:26:6f:af:78:5a:ff:54:25:16:
                    ce:ea:c5:13:24:f6:e8:2a:5e:79:e7:39:32:98:f3:
                    c8:50:47:21:0e:cd:f8:80:56:92:c3:57:69:41:00:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2E:1F:CA:99:3E:42:63:6B:97:9F:C1:FD:92:EE:56:61:84:99:0E
            X509v3 Authority Key Identifier:
                keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:81:7d:9f:6d:11:08:58:bd:66:d4:4b:1f:87:8b:78:06:7e:
         ce:13:a8:00:b8:ac:78:59:16:e3:1c:76:f5:9b:42:fc:a8:03:
         5b:85:0d:e3:14:1f:ac:db:c4:c4:1e:b2:06:87:46:27:10:59:
         e5:de:bd:50:75:0a:bd:37:28:c2:e7:ed:74:e3:a9:73:e6:62:
         40:b2:cb:f6:8a:c7:76:1e:bc:36:0f:85:ff:e5:e6:90:df:bf:
         86:8f:f7:ef:93:27:35:08:36:a9:3a:62:34:cf:6b:0a:75:3d:
         a7:64:e8:e5:c8:28:b6:93:4c:7a:9f:51:78:d6:12:d2:6b:ed:
         1f:01:8d:59:31:2c:ae:ae:0e:82:2e:21:57:03:56:7f:37:6f:
         18:ea:aa:ef:b0:d1:e4:9f:37:d5:c3:ce:18:75:93:91:ee:fc:
         1c:ff:bb:f3:94:8d:44:ef:d9:4f:1c:58:23:9e:90:52:df:cf:
         7d:80:f8:c0:9a:95:88:29:35:aa:7d:5d:1d:44:c4:06:e6:fa:
         9b:37:be:52:38:03:b8:cf:42:fc:f4:26:73:a7:2e:79:80:c4:
         1d:6d:81:82:e2:c9:8e:35:a5:74:e8:59:c3:20:6f:54:ae:1b:
         7d:0f:3a:5d:2f:95:1c:e6:21:20:08:4a:f4:09:2f:81:26:cc:
         87:e0:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:49 2026 by rpki-client