Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa
File:                     3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (raw, json)
Hash identifier:          vm3LwDwLeRAwMnQkRWhgtW4ETHGNuBudAWSRp1ytOKg=
Subject key identifier:   A5:FF:8E:0E:7E:9B:37:41:39:1A:20:BB:3D:33:8E:F9:F2:01:9D:03
Certificate issuer:       /CN=D69827B97765F94998CEA76A23999571F2BDA426
Certificate serial:       5947FD67B03AFFE9175D8E3D0E5C158D79469052
Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa
Signing time:             Sun 03 May 2026 03:01:50 +0000
ROA not before:           Sun 03 May 2026 02:56:50 +0000
ROA not after:            Sun 02 May 2027 03:01:50 +0000
asID:                     139978
IP address blocks:        103.148.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl
                          rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:47:fd:67:b0:3a:ff:e9:17:5d:8e:3d:0e:5c:15:8d:79:46:90:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426
        Validity
            Not Before: May  3 02:56:50 2026 GMT
            Not After : May  2 03:01:50 2027 GMT
        Subject: CN=A5FF8E0E7E9B3741391A20BB3D338EF9F2019D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:00:2d:e7:8e:84:65:ec:67:4f:e2:f9:f8:
                    c4:44:25:5e:b3:53:b3:b8:1c:58:b6:b0:5f:c4:7b:
                    8d:c0:57:4f:0d:05:09:83:15:6a:6e:83:14:3e:c6:
                    3f:9b:91:48:9c:31:ec:a9:95:e0:7b:18:dd:d4:b5:
                    68:67:3e:b6:fc:2f:30:ea:6a:8b:ff:80:f5:80:79:
                    c5:c1:80:76:b7:f6:29:52:be:28:87:d5:03:c5:32:
                    ee:3f:46:ae:55:f2:80:04:c1:21:7f:bb:f1:78:bb:
                    c7:ac:57:d0:18:40:d4:3e:7e:c2:11:df:5f:04:92:
                    b5:f7:ae:8b:60:b8:ee:3e:32:05:27:3e:6e:2c:2c:
                    20:9d:46:27:fc:eb:9a:bc:50:ce:68:37:7b:5a:12:
                    8e:34:73:d3:b9:18:c2:9e:69:18:98:3f:7c:52:72:
                    46:c7:72:ec:1c:6d:32:4d:89:c8:88:71:67:33:01:
                    d7:a2:1d:44:d1:32:f6:b7:2d:74:d0:6e:20:38:bb:
                    f9:2d:fc:a0:ba:57:7d:97:d0:2b:4b:bf:5a:87:7b:
                    ed:3f:32:d1:88:57:87:ca:ab:25:a8:e3:f5:2d:69:
                    56:14:7a:09:d9:f5:5b:ca:c2:cf:9e:37:e3:d6:68:
                    e2:be:70:54:4a:c5:4f:05:ad:17:ce:62:77:a4:27:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FF:8E:0E:7E:9B:37:41:39:1A:20:BB:3D:33:8E:F9:F2:01:9D:03
            X509v3 Authority Key Identifier:
                keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:be:68:a7:ad:8b:55:74:2c:9d:0b:3e:cd:5c:f3:5c:a0:68:
         42:3f:3a:6f:99:25:12:71:f5:a0:97:6f:0e:b4:6d:28:8d:bc:
         ff:f0:81:0b:d7:cc:8a:6e:5d:de:61:c0:cf:f8:ec:61:56:d7:
         53:1d:04:41:df:d9:f7:23:f3:66:48:1d:35:02:3d:db:a2:98:
         6f:da:8e:0a:15:36:a7:98:38:81:4c:c1:fb:91:9a:ce:a8:df:
         5f:2f:e0:e8:6a:0d:99:38:d3:50:29:db:1c:ec:bc:6a:3f:9e:
         76:90:da:f2:e9:b1:63:08:a8:a4:b4:28:c7:5c:cf:53:3f:da:
         db:ce:87:3a:c5:a6:62:8a:3d:e0:f6:6e:b9:ed:23:8d:db:58:
         27:e2:e5:64:f6:f8:c6:fd:21:c2:b5:df:99:0b:ea:36:61:98:
         46:6c:b0:5b:20:cb:01:eb:2c:db:44:dc:4c:cf:0b:e0:87:65:
         f3:76:c7:46:94:50:58:8d:38:f6:97:8a:5e:a1:09:e3:d2:bd:
         8a:2e:7e:3a:56:c1:9d:f0:c5:65:08:cf:ae:e7:fd:84:27:f5:
         c1:78:7e:40:34:ba:60:db:36:94:aa:f7:98:e0:b7:1b:e2:a0:
         b2:39:56:60:27:8f:e5:bb:d4:9f:0c:ee:51:e6:69:b1:79:18:
         a8:4b:3a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:15 2026 by rpki-client