Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa
File:                     3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (raw, json)
Hash identifier:          p00BkNbJWawBKhREwZuAAHQMCf/7KPIeduMF3VQslvA=
Subject key identifier:   8A:1E:41:46:10:E3:A7:06:9B:68:C6:9F:7E:0D:00:6B:B7:BF:35:A1
Certificate issuer:       /CN=762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311
Certificate serial:       697F5C3AC2B6CA4B4A05B5C101275BAA86D0F8E6
Authority key identifier: 76:2D:DF:A9:6C:CF:A5:1E:66:E5:F8:88:33:DA:AF:3C:CC:EB:43:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa
Signing time:             Sun 03 May 2026 03:13:02 +0000
ROA not before:           Sun 03 May 2026 03:08:02 +0000
ROA not after:            Sun 02 May 2027 03:13:02 +0000
asID:                     140012
IP address blocks:        103.148.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl
                          rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7f:5c:3a:c2:b6:ca:4b:4a:05:b5:c1:01:27:5b:aa:86:d0:f8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311
        Validity
            Not Before: May  3 03:08:02 2026 GMT
            Not After : May  2 03:13:02 2027 GMT
        Subject: CN=8A1E414610E3A7069B68C69F7E0D006BB7BF35A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:b0:cf:6f:63:93:f1:ba:5c:e8:8c:8c:9a:
                    7e:61:9a:0d:54:79:21:53:50:7d:e3:16:99:2f:6a:
                    7b:b6:f2:3e:fd:dc:14:cb:ce:6e:e3:97:0b:b2:7b:
                    e9:44:0e:46:dd:48:34:79:09:fb:29:f1:07:02:03:
                    5e:f2:ec:31:91:08:c5:de:30:b7:c9:89:d3:0e:77:
                    11:bc:ca:de:3d:bf:1b:b4:0e:f0:81:b1:a0:19:d0:
                    3f:c3:4a:26:f2:e9:64:a2:04:83:1e:fb:8f:60:1f:
                    ac:42:ef:74:7c:27:64:0a:f6:c3:4b:47:05:a4:bc:
                    0a:e5:e6:e4:30:70:ff:56:83:77:a6:28:4f:68:75:
                    91:dd:7f:63:21:a8:31:6e:01:18:08:d3:48:79:28:
                    3a:68:a9:9d:aa:71:fe:91:34:91:0b:50:0d:74:69:
                    67:68:b2:59:8f:76:4a:79:7e:63:d0:d0:ac:94:24:
                    b2:b4:85:6e:7c:27:b2:04:ec:6e:70:ee:81:fe:52:
                    19:96:87:5e:91:da:3c:d1:9a:45:98:50:6e:b8:9d:
                    c0:73:6e:a6:b0:c8:5f:57:aa:3b:29:c7:65:fa:a7:
                    42:51:a8:b2:a0:2e:fa:d7:e5:85:79:7d:71:29:58:
                    52:6c:ec:31:ce:2c:0b:3c:7f:52:06:ab:33:08:8a:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1E:41:46:10:E3:A7:06:9B:68:C6:9F:7E:0D:00:6B:B7:BF:35:A1
            X509v3 Authority Key Identifier:
                keyid:76:2D:DF:A9:6C:CF:A5:1E:66:E5:F8:88:33:DA:AF:3C:CC:EB:43:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:07:73:6e:d8:b9:81:c4:c1:29:5b:49:d8:ec:8a:68:3a:1d:
         3c:08:90:15:16:1b:2d:c7:07:ee:98:2d:55:fb:47:eb:86:6f:
         76:98:d9:7c:d2:47:e2:38:16:f9:21:06:f2:0f:7d:b4:71:aa:
         4c:28:f8:69:34:5d:16:bb:e3:aa:2d:e6:90:50:71:75:af:87:
         e7:51:2c:20:f4:0b:e9:33:5d:ca:ac:ab:c6:b8:00:7d:00:f3:
         13:db:b3:47:d4:85:2b:5b:0f:31:22:0c:63:81:bd:ed:4d:0d:
         2f:a7:09:12:95:76:68:b3:d8:c8:2b:3a:a9:d6:f1:47:81:1e:
         9b:a3:eb:42:3e:b2:1c:23:3b:33:39:80:d5:2b:1b:4a:96:56:
         e8:49:3a:f6:d5:d2:e7:7d:31:d8:d4:30:73:3d:02:b2:0a:44:
         a3:64:79:ea:70:28:6f:a9:27:9a:c1:34:35:0c:5a:30:0a:03:
         47:70:5f:38:c3:6c:21:0a:5f:39:bf:03:c6:78:c4:b0:cb:e0:
         6e:b2:21:cd:bf:e2:2a:6e:0d:9c:3a:6a:d2:8c:58:3b:5e:e0:
         75:aa:fe:f0:31:a6:a0:cd:a2:0d:bc:31:2d:57:ba:9e:f0:88:
         6d:43:ed:eb:d9:e2:f8:ee:6c:09:44:2b:23:e1:fa:10:79:16:
         24:86:dd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:51 2026 by rpki-client