Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
File:                     3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (raw, json)
Hash identifier:          x30oT/Lrnap20G4fAn+tMYY1/fn7+IpyTEVsCdXHJyU=
Subject key identifier:   71:E6:8D:8F:68:0A:F7:8A:ED:38:69:4A:C9:D5:8C:C8:8E:8B:DD:25
Certificate issuer:       /CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
Certificate serial:       750260FA35B5AC8BB4C56BC09BB0687108A968B0
Authority key identifier: 5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
Signing time:             Sun 03 May 2026 03:06:45 +0000
ROA not before:           Sun 03 May 2026 03:01:45 +0000
ROA not after:            Sun 02 May 2027 03:06:45 +0000
asID:                     133803
IP address blocks:        103.147.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl
                          rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:02:60:fa:35:b5:ac:8b:b4:c5:6b:c0:9b:b0:68:71:08:a9:68:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
        Validity
            Not Before: May  3 03:01:45 2026 GMT
            Not After : May  2 03:06:45 2027 GMT
        Subject: CN=71E68D8F680AF78AED38694AC9D58CC88E8BDD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:c6:98:b3:91:5f:15:f6:09:54:03:f2:7a:
                    ec:cf:c0:73:9b:0f:0c:80:17:1c:e6:eb:ee:24:5f:
                    53:dd:aa:55:90:e2:60:e9:be:ea:53:70:a3:be:fa:
                    aa:1b:8f:67:cb:a5:11:cb:09:7d:9c:7f:0f:e0:a0:
                    da:7d:57:11:9c:51:93:2f:c5:95:5e:b3:81:31:ec:
                    2e:f5:b4:3a:c5:b4:55:8d:11:c5:6c:e1:28:1b:e5:
                    d0:c5:25:aa:9d:f0:5e:08:32:4c:5f:19:10:75:01:
                    9b:70:82:57:f7:58:4e:91:f9:fa:3e:c7:0f:66:c0:
                    bb:88:b0:f0:b9:bd:58:5f:35:99:c0:c0:a0:df:39:
                    af:0c:4c:fe:7e:fa:fb:b6:1d:7a:17:47:e4:41:22:
                    c9:d4:d9:d1:5b:b8:0f:33:b8:3b:6d:b4:0d:23:b6:
                    89:6c:ba:a7:94:cc:17:d5:5b:1c:06:43:cb:c8:73:
                    8c:a6:04:70:50:65:62:68:06:98:c0:5f:68:59:73:
                    7a:79:e6:05:46:9e:bc:da:e8:b9:24:18:9c:01:78:
                    6f:4e:4d:f5:8a:f8:e7:c2:ec:f0:4b:8b:4a:bf:ba:
                    0f:f6:bd:ff:fd:4c:92:b6:ad:88:53:3f:31:06:34:
                    91:18:34:bd:7c:7d:36:16:23:7c:9e:53:0f:0b:33:
                    ed:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E6:8D:8F:68:0A:F7:8A:ED:38:69:4A:C9:D5:8C:C8:8E:8B:DD:25
            X509v3 Authority Key Identifier:
                keyid:5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:0b:68:35:70:75:af:70:3b:fa:55:46:8a:64:c8:23:02:
         0f:dc:0f:b0:85:54:b7:79:35:dd:ff:89:d3:1f:41:2b:08:ab:
         c8:72:29:30:0f:fa:dc:33:6d:4c:0c:92:a1:7a:8f:16:3a:9e:
         df:6d:b8:8e:3c:9c:40:02:19:96:5b:86:a9:b7:79:ea:4b:38:
         79:8b:3f:56:ea:bd:fc:c8:25:f8:e4:5d:1f:9e:0b:7f:71:a3:
         4b:cc:51:cc:2e:ed:89:2a:0f:fa:6d:d5:d3:ca:ee:cb:d9:78:
         14:e7:9f:c9:b9:52:b2:a1:2c:a8:e6:c8:99:bf:0c:e0:97:87:
         2f:60:ef:9e:14:b7:02:50:97:04:46:3c:71:88:27:f9:70:b4:
         42:ad:0b:43:28:38:37:bf:5a:d2:e7:e4:20:88:cd:fc:de:2a:
         54:fe:dc:28:a6:7f:1e:e3:37:11:1f:83:3d:79:57:7b:fb:53:
         86:2c:c5:97:68:ef:bc:eb:88:a3:74:3f:34:6b:99:1f:54:45:
         a0:4e:81:93:7b:00:85:c5:fe:2b:ee:f0:7d:16:5f:5e:6a:51:
         06:75:31:9f:6d:2d:d3:4f:86:c1:bf:e4:26:bf:e4:6d:19:dd:
         03:84:0a:aa:31:22:1a:52:47:e6:1a:88:e7:2d:cc:48:66:0f:
         a2:e2:2f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:34 2026 by rpki-client