Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa
File:                     3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (raw, json)
Hash identifier:          fXIslrIHsJvjLRQnP9cWAs1QTJuR4Stfwh7a8LYxHm8=
Subject key identifier:   FC:E4:E4:11:76:1D:60:62:36:52:42:80:64:CE:D2:BE:E9:EB:F4:40
Certificate issuer:       /CN=01572889DF1075E65143A4EF4BC1D8C749046C13
Certificate serial:       6252B7C01CFE79848B03C9EF7B00200BDF9A80D3
Authority key identifier: 01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa
Signing time:             Sun 03 May 2026 03:11:47 +0000
ROA not before:           Sun 03 May 2026 03:06:47 +0000
ROA not after:            Sun 02 May 2027 03:11:47 +0000
asID:                     139457
IP address blocks:        103.146.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl
                          rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:52:b7:c0:1c:fe:79:84:8b:03:c9:ef:7b:00:20:0b:df:9a:80:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01572889DF1075E65143A4EF4BC1D8C749046C13
        Validity
            Not Before: May  3 03:06:47 2026 GMT
            Not After : May  2 03:11:47 2027 GMT
        Subject: CN=FCE4E411761D60623652428064CED2BEE9EBF440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:78:a9:0e:64:bc:37:d0:32:60:64:b4:a4:
                    d7:c7:bd:1d:78:e1:e5:ea:25:ea:03:93:b5:35:9b:
                    72:8a:f3:a3:14:c6:9a:11:8d:8d:1a:b0:99:79:fb:
                    6e:0e:e1:e3:40:e7:2c:9f:cd:34:f4:54:8a:99:9e:
                    6d:ce:48:5a:b0:15:f1:4a:da:6d:15:4b:12:bf:85:
                    7a:d5:07:d6:9b:46:fa:a2:70:85:5f:09:8c:8a:7f:
                    0a:82:57:ef:0d:c7:04:87:63:b1:00:f1:2d:7b:54:
                    2b:f4:da:52:d9:12:2f:33:fa:e5:84:a6:d6:49:5c:
                    2d:e7:75:01:93:18:3f:51:ef:9a:93:f6:02:43:1c:
                    2b:9c:a8:29:c2:e6:bb:da:e4:63:1d:b9:01:91:01:
                    66:ce:91:d1:e2:8d:22:db:7c:f2:4c:92:04:56:6e:
                    06:54:ba:b1:85:38:c9:93:e7:8e:6f:22:fa:88:c5:
                    95:dc:ba:18:19:a4:e5:61:ff:62:64:93:71:a9:f4:
                    5a:cb:f3:75:0c:88:85:5f:7c:ae:df:70:11:0f:bb:
                    6f:c8:d9:fc:90:89:a9:13:b3:08:e7:98:aa:7d:51:
                    95:dd:93:42:bf:a1:04:bb:a5:7a:8b:41:52:a4:0c:
                    07:e3:e7:66:96:e7:28:5f:a5:2b:0a:87:57:a5:35:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E4:E4:11:76:1D:60:62:36:52:42:80:64:CE:D2:BE:E9:EB:F4:40
            X509v3 Authority Key Identifier:
                keyid:01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:19:bb:6d:0f:47:93:74:07:c1:bd:69:5a:40:77:6b:ca:c9:
         f1:87:37:14:15:6c:cb:a9:74:ca:65:38:8c:80:d0:9a:f9:15:
         ab:bb:b8:29:c9:4c:ef:73:0b:47:71:b6:29:ef:2c:31:16:ce:
         a8:8b:02:3c:17:8f:ea:74:c0:32:ff:2e:24:fb:45:63:89:6b:
         eb:aa:c8:af:97:34:b3:25:c9:f3:f8:c5:4a:94:0d:8f:41:17:
         e4:bb:1a:14:9b:b2:08:2f:85:3a:be:f3:f4:1b:d5:fd:25:97:
         de:37:c1:e4:06:4f:2b:ba:cd:c5:22:fd:66:a6:2a:e5:64:11:
         88:f9:06:eb:91:50:01:08:cc:b1:14:d5:f3:b9:cc:01:78:75:
         bc:4e:ef:b1:5b:45:b7:dc:f1:ca:60:cf:3f:77:74:ff:c5:25:
         ef:e4:7e:69:10:76:fc:dd:28:5d:7c:63:b1:51:c8:d9:0b:4f:
         00:17:9a:0a:18:6e:d4:52:e5:84:5e:fb:97:3a:f5:06:a3:47:
         e8:2c:d0:73:58:fa:99:4e:26:6d:b7:a5:25:c8:4c:cf:62:80:
         28:35:b3:46:d2:95:35:b1:56:9c:24:a7:1e:4e:f9:52:1e:92:
         d5:7b:49:d8:60:40:fc:03:f4:0c:d9:25:fa:dd:96:cc:d7:72:
         9a:e9:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:13 2026 by rpki-client