Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa
File:                     3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (raw, json)
Hash identifier:          fYYpI3WJuPFtDyZ1cuaw5qt/FLFt1ktSGEKCbigmqt0=
Subject key identifier:   ED:0F:66:68:2A:D5:A7:81:F5:23:DB:A7:B7:C7:15:65:97:F4:48:19
Certificate issuer:       /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C
Certificate serial:       5536ACC13C59D9E34976EEE87FCC35F91D54C553
Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa
Signing time:             Sun 03 May 2026 03:13:17 +0000
ROA not before:           Sun 03 May 2026 03:08:17 +0000
ROA not after:            Sun 02 May 2027 03:13:17 +0000
asID:                     140007
IP address blocks:        103.148.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl
                          rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:36:ac:c1:3c:59:d9:e3:49:76:ee:e8:7f:cc:35:f9:1d:54:c5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C
        Validity
            Not Before: May  3 03:08:17 2026 GMT
            Not After : May  2 03:13:17 2027 GMT
        Subject: CN=ED0F66682AD5A781F523DBA7B7C7156597F44819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:55:cd:b0:2e:27:24:3c:6e:6a:de:8a:8d:
                    a3:f8:de:60:72:17:47:e6:51:7d:9a:d4:18:51:e9:
                    6b:97:a1:b4:29:51:81:6b:4a:f2:32:76:ff:d5:39:
                    dc:c9:8a:d4:20:ca:89:4b:b5:88:cf:f1:11:31:b7:
                    b4:8a:e0:84:71:1b:49:64:19:ed:d6:38:bc:af:fe:
                    33:9c:7d:7b:c6:db:3f:41:73:57:20:86:44:0f:95:
                    3b:f9:1c:13:76:fd:ae:c4:5b:ff:cd:a1:35:1e:d1:
                    5e:c3:b4:5d:27:39:be:21:d0:dc:1d:f9:58:d6:02:
                    47:2b:65:68:9a:02:3f:c2:2a:8d:12:87:fc:28:0e:
                    8e:a1:7b:f7:23:ec:5b:c0:b9:5f:92:a8:3d:a1:32:
                    3a:13:66:8f:9a:14:f2:74:33:f5:60:c9:59:7f:b7:
                    8c:fe:56:fc:14:59:ef:68:f8:ad:49:ef:4a:bf:eb:
                    6f:8d:50:c6:90:ea:3e:9e:da:f3:2f:cf:f6:55:d9:
                    3a:67:ee:a1:db:eb:32:ab:cb:63:70:d8:92:3a:9d:
                    e4:12:f4:2a:e9:1d:77:80:29:04:df:df:a9:ce:58:
                    11:2e:72:94:01:00:7d:85:f2:cd:d9:08:f7:1f:98:
                    06:b0:72:17:fb:df:92:a9:7d:20:09:cd:91:b8:17:
                    db:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0F:66:68:2A:D5:A7:81:F5:23:DB:A7:B7:C7:15:65:97:F4:48:19
            X509v3 Authority Key Identifier:
                keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:8f:ec:53:68:af:97:aa:5c:24:22:32:f3:2f:7c:3d:dd:06:
         c0:df:08:a0:7d:37:96:1c:e1:26:2d:f7:51:e4:fe:d6:1f:6f:
         86:4c:37:a7:d1:3b:e1:da:be:92:05:64:b9:fe:75:08:7a:65:
         32:23:4a:38:7c:58:ec:1c:27:be:2d:b5:03:a9:97:70:a6:57:
         9e:7a:c8:c2:79:a2:c4:7f:e0:06:75:18:29:c0:e5:a9:86:f6:
         01:54:86:59:eb:54:d1:09:b2:46:b6:52:e5:a3:be:1c:8e:1d:
         20:10:59:5f:2d:40:01:70:83:97:4c:9e:4e:49:4d:55:81:67:
         50:3a:a9:41:c7:81:61:db:47:84:c2:03:6a:21:77:bd:25:ec:
         3e:27:c8:df:6e:65:17:9b:b0:71:fb:25:14:b2:ae:d5:d7:8e:
         ee:5c:b5:1b:21:68:88:61:96:d4:e6:47:e7:a6:83:cd:5a:71:
         d8:13:07:c9:ab:26:c5:c0:15:d9:f3:6a:17:54:34:66:1a:66:
         9e:87:6f:3e:ae:cc:80:5b:0f:e4:69:ff:7e:a1:81:fd:9c:47:
         d9:ad:0e:c4:e5:11:d3:e5:ef:9f:06:e4:97:6a:f1:8b:1f:da:
         0b:a5:da:80:d7:01:51:ec:9a:99:26:23:04:31:0c:3e:55:5b:
         19:80:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:17 2026 by rpki-client