Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa
File:                     3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (raw, json)
Hash identifier:          7iLfl1DbUfmRWBLGhFE8psVWKDH6pMFRQ0PQbLGmOck=
Subject key identifier:   6C:3C:28:33:40:DD:9A:23:CB:34:4C:55:79:D6:80:BA:C7:8D:8D:74
Certificate issuer:       /CN=2263B33A6F6C2144A5A070C3383941C2821ED962
Certificate serial:       13B39B823E852A6F9415FE2D9ABBCB57D661FB68
Authority key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa
Signing time:             Sun 03 May 2026 03:10:56 +0000
ROA not before:           Sun 03 May 2026 03:05:56 +0000
ROA not after:            Sun 02 May 2027 03:10:56 +0000
asID:                     140456
IP address blocks:        103.96.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl
                          rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b3:9b:82:3e:85:2a:6f:94:15:fe:2d:9a:bb:cb:57:d6:61:fb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2263B33A6F6C2144A5A070C3383941C2821ED962
        Validity
            Not Before: May  3 03:05:56 2026 GMT
            Not After : May  2 03:10:56 2027 GMT
        Subject: CN=6C3C283340DD9A23CB344C5579D680BAC78D8D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:67:75:ca:63:d8:9e:80:eb:83:84:ff:c1:71:
                    e5:76:7b:f0:72:39:fa:de:fa:76:0a:93:18:14:cd:
                    fa:8e:71:1d:8a:e4:af:5b:cf:ad:3a:7d:bb:91:c0:
                    df:7f:75:c4:e0:99:46:05:c9:95:81:6e:09:2c:da:
                    46:33:06:b9:c7:99:78:d5:bc:8f:94:7c:d0:bc:80:
                    df:97:9f:a9:83:c8:1a:02:b1:ba:12:01:bb:1b:8e:
                    11:20:15:ee:cb:a0:32:57:84:a6:ac:0a:4e:b2:d7:
                    8e:0c:11:7c:d9:9a:e8:0f:30:3b:d3:e6:57:7b:4b:
                    2a:1e:d1:3b:2f:44:5c:3b:2f:f9:aa:31:bf:26:f7:
                    c5:b1:05:38:a1:38:34:9f:94:7e:1b:d6:a4:87:ca:
                    82:b8:87:51:8c:5c:52:92:ad:60:44:91:95:fc:fe:
                    27:cc:b2:8b:e1:aa:30:2d:e7:a1:ae:2e:6a:3c:8c:
                    55:30:9a:79:7a:f3:16:bd:73:66:d2:de:0d:61:4e:
                    18:fb:6f:ec:6b:67:4c:6f:44:d6:17:44:fd:4b:63:
                    bf:30:d8:34:bd:aa:41:1d:e9:1c:db:5d:7e:3a:4a:
                    e4:ef:57:aa:a3:71:99:35:3a:21:a2:66:bf:c5:ae:
                    21:7f:fc:0d:e4:f5:6f:41:7e:2a:97:76:0d:75:30:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3C:28:33:40:DD:9A:23:CB:34:4C:55:79:D6:80:BA:C7:8D:8D:74
            X509v3 Authority Key Identifier:
                keyid:22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:8f:24:af:c6:95:03:2c:f6:65:14:9d:a1:a8:14:3e:6b:0e:
         e9:10:93:2d:a3:b3:e4:c5:32:a5:bd:f1:f2:77:82:57:db:fb:
         b3:65:22:e5:16:54:bb:9c:59:ed:8e:28:9c:92:98:be:c0:78:
         f0:b3:15:a7:2b:23:e4:a2:47:6f:ab:b6:6d:01:9f:90:ba:09:
         4f:8e:95:82:68:b7:a7:be:2f:a0:f6:90:fe:56:39:50:db:cf:
         07:eb:51:e2:aa:41:6a:49:0e:30:64:d5:2b:53:ea:0f:bd:da:
         70:5d:9c:53:a9:ff:0a:eb:e6:ff:db:53:6a:39:a6:a9:b9:5f:
         14:bb:1c:25:4a:e7:3b:30:60:7e:84:aa:6f:9b:a1:cf:c1:1c:
         5e:7a:30:8f:01:2c:9b:fc:14:19:29:c1:37:ba:46:58:55:23:
         d8:62:fa:8b:80:18:ff:2d:46:33:df:34:06:56:4a:f8:e6:80:
         95:a5:cc:51:4c:3e:41:0f:92:f0:fa:fa:0b:be:70:47:33:bf:
         07:f3:3b:7f:35:a8:cb:c0:71:a9:68:2e:87:46:98:74:c6:42:
         ad:12:e5:d2:3b:43:56:ef:08:78:b7:dd:fc:0a:59:b1:9f:8b:
         8e:91:b3:60:cb:51:9b:ab:c8:80:a4:27:4d:af:7b:67:e5:1d:
         ba:15:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:03 2026 by rpki-client