Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa
File:                     3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (raw, json)
Hash identifier:          g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=
Subject key identifier:   6A:58:BD:71:25:D2:93:AC:B2:88:6F:8B:DB:FA:5E:A5:62:64:AE:99
Certificate issuer:       /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0
Certificate serial:       66A6F9E2C4F5426452D6429B9C19CD2727439DC5
Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa
Signing time:             Sun 03 May 2026 03:11:43 +0000
ROA not before:           Sun 03 May 2026 03:06:43 +0000
ROA not after:            Sun 02 May 2027 03:11:43 +0000
asID:                     139962
IP address blocks:        103.147.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl
                          rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a6:f9:e2:c4:f5:42:64:52:d6:42:9b:9c:19:cd:27:27:43:9d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0
        Validity
            Not Before: May  3 03:06:43 2026 GMT
            Not After : May  2 03:11:43 2027 GMT
        Subject: CN=6A58BD7125D293ACB2886F8BDBFA5EA56264AE99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:4d:d8:91:bb:92:26:1f:d0:59:ab:e0:7c:
                    2e:29:4f:32:c4:e8:eb:bc:76:27:6f:6e:74:a3:12:
                    b4:dd:44:0c:ca:e3:59:bd:e3:d3:f1:8f:85:bf:dc:
                    3e:28:96:6b:19:19:be:52:7c:3a:17:e8:f2:f1:be:
                    7e:50:1e:5c:0e:83:18:f2:28:cd:9d:0f:83:9f:03:
                    d3:90:de:75:66:27:13:80:f5:e2:0a:84:e9:c0:08:
                    73:8f:06:b8:19:ce:67:85:27:6c:2c:88:31:c9:11:
                    e1:69:f0:f4:0f:0d:cb:42:14:bb:20:f8:80:8d:9a:
                    56:60:7c:bf:1e:69:1d:6e:bd:87:1d:f9:ad:1f:8e:
                    9f:09:94:76:6c:15:d1:c2:b0:c5:a9:a6:57:de:22:
                    a9:51:97:4e:7a:22:bb:9f:c2:09:60:ed:60:17:80:
                    f9:03:4c:47:7a:c5:b2:d6:f6:bc:60:af:89:73:ab:
                    71:f3:47:0f:04:95:19:62:c0:4b:6d:9e:83:4e:7b:
                    90:74:13:35:f3:37:31:7a:dd:e0:c4:3e:b3:64:48:
                    8d:3f:9f:ba:b0:fe:35:c4:c3:23:3b:e4:ec:b6:04:
                    12:c8:23:44:5c:39:99:c0:b2:3b:5c:da:f3:12:45:
                    c3:23:bb:b7:a5:cb:9e:ea:61:ef:60:eb:b8:73:4e:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:58:BD:71:25:D2:93:AC:B2:88:6F:8B:DB:FA:5E:A5:62:64:AE:99
            X509v3 Authority Key Identifier:
                keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:4f:19:41:47:d4:be:e2:8e:1c:e2:9d:2a:8c:27:04:ef:
         a3:07:b5:7d:dd:55:88:6b:a0:4f:99:36:b2:d6:b7:30:a2:09:
         da:f1:1b:e7:3e:00:ca:49:c5:e8:5a:77:fd:33:9d:09:8c:53:
         37:aa:0a:f9:39:9c:43:8f:ed:a7:5e:d0:ac:9f:72:48:77:45:
         b6:69:51:00:3b:83:36:77:14:47:80:2a:65:67:0e:f2:9a:20:
         83:14:b7:8a:8c:03:fc:ee:89:93:34:c2:17:cd:6d:1f:32:fa:
         c5:d0:f6:5d:3a:cc:fa:6f:2b:81:18:93:6f:03:2c:9e:8e:d9:
         03:9b:91:44:d7:c3:46:03:99:fe:99:c4:db:fa:e9:50:77:98:
         b1:c1:a1:a4:6e:28:91:58:c2:f5:38:71:60:06:9a:07:ae:31:
         1e:60:92:32:d9:9f:19:24:7b:d2:9d:86:e9:c7:c6:46:16:d1:
         c0:be:c3:17:ac:87:bd:82:e3:6a:ef:cc:50:f7:ab:2a:a2:bb:
         57:e7:f0:fc:4b:ff:2b:05:ad:80:1d:e7:96:3b:4f:21:6a:90:
         ad:0a:aa:57:83:03:87:20:fd:e7:a0:85:d4:d0:7c:33:b4:2c:
         0a:e8:e7:be:84:fd:03:71:37:e2:f7:3c:24:5c:0c:84:5d:a0:
         66:ec:17:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:50 2026 by rpki-client