Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa
File:                     3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (raw, json)
Hash identifier:          97CqSuEAmLm9b7GhTnzhH7E+h2iIk2MyDfPBWHarXus=
Subject key identifier:   B8:58:8E:6D:3C:09:C8:8C:17:32:4B:50:EE:F9:22:64:84:09:E1:7D
Certificate issuer:       /CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Certificate serial:       7453669527F425035649A017DFF0CB39CF131B83
Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa
Signing time:             Sun 03 May 2026 03:07:10 +0000
ROA not before:           Sun 03 May 2026 03:02:10 +0000
ROA not after:            Sun 02 May 2027 03:07:10 +0000
asID:                     140008
IP address blocks:        103.145.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
                          rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:53:66:95:27:f4:25:03:56:49:a0:17:df:f0:cb:39:cf:13:1b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07
        Validity
            Not Before: May  3 03:02:10 2026 GMT
            Not After : May  2 03:07:10 2027 GMT
        Subject: CN=B8588E6D3C09C88C17324B50EEF922648409E17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:19:34:b6:f0:45:97:4f:03:87:0c:de:b8:
                    ca:0d:6f:b2:f3:69:bb:e0:22:3c:82:dc:05:7e:4c:
                    48:3d:69:28:c5:9f:e9:c2:08:ad:09:6d:03:7d:e0:
                    3a:ba:cf:db:49:58:84:cb:91:56:fc:02:34:fc:8f:
                    04:15:3e:47:45:c4:90:21:8b:b3:31:a5:49:36:7c:
                    28:04:c2:c4:95:98:95:91:61:c7:33:fd:d4:8b:dc:
                    e5:cb:e6:4e:1e:60:45:f6:6e:a8:a3:87:bc:36:e8:
                    c6:f9:16:66:06:75:15:78:9c:fd:da:40:6d:3f:f7:
                    1f:2b:f1:7f:39:57:22:2d:50:41:8d:ed:86:42:77:
                    d1:03:9d:7c:a9:d0:3a:58:a3:ff:ed:53:1b:13:81:
                    c0:d6:90:c0:af:3b:18:0b:66:b5:ee:cb:50:ce:98:
                    a4:49:b9:2d:98:15:b4:13:1c:84:e4:4c:65:f1:90:
                    f4:8a:19:ef:cf:0d:6b:fd:2e:e0:0f:34:59:67:b6:
                    4e:c6:1d:d9:6f:12:5e:6d:eb:8a:1f:a8:3c:82:a1:
                    d2:68:cf:f3:75:24:f4:07:74:1d:e9:c9:30:12:71:
                    a2:d4:ba:12:76:90:e2:d0:5d:34:28:7a:50:70:1c:
                    d9:b4:0a:0b:19:08:c1:82:d8:23:1a:96:51:dc:6d:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:58:8E:6D:3C:09:C8:8C:17:32:4B:50:EE:F9:22:64:84:09:E1:7D
            X509v3 Authority Key Identifier:
                keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:cc:0e:f4:71:60:81:8e:b2:f8:2b:60:64:b3:c9:e0:d3:c4:
         d7:66:ea:9c:7e:02:af:d9:a8:47:c8:48:78:9b:35:df:65:e5:
         28:ff:7e:19:60:00:a4:83:3b:9b:61:13:f5:ec:ff:c3:52:7a:
         fe:c3:98:59:4b:c2:1e:80:24:bd:7d:a7:3f:20:2b:e7:7b:79:
         c6:28:c0:aa:04:30:c3:03:4c:13:47:21:68:64:b1:2e:40:d3:
         13:3a:b7:3f:d0:22:9b:0b:e7:da:9b:33:4c:fb:93:b1:51:8f:
         78:03:aa:ba:50:a5:4a:9a:69:03:fd:f9:c7:75:4a:4b:ba:65:
         82:43:fa:d1:35:a9:d5:1f:72:b2:cf:f0:a5:14:d3:2b:43:06:
         94:3e:21:99:27:b8:0b:3b:b1:34:af:a7:19:0d:d9:a6:a9:9b:
         1f:8f:3f:25:12:8d:b0:eb:00:6b:ab:1d:7b:fb:c8:cb:b7:69:
         38:e0:ea:ce:61:e2:c3:8a:7d:60:16:6d:9d:2d:17:9c:a9:19:
         94:f2:67:d2:a1:7c:39:32:b0:61:70:56:c8:6d:73:e6:39:75:
         b1:ba:f0:73:fe:4f:5e:a5:1d:0b:41:9b:e0:56:34:93:8a:04:
         50:8e:e0:5a:6e:83:6f:65:57:20:61:ea:f4:62:5b:ee:e4:ba:
         52:08:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:18 2026 by rpki-client