Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa
File:                     3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (raw, json)
Hash identifier:          fqwIOY8dFjuWhu5mNkdGZq4kqZXdOIhE1mabARq0Xoc=
Subject key identifier:   E4:26:CA:B3:A8:C7:E0:22:96:27:AC:22:F3:B8:30:37:76:22:51:8D
Certificate issuer:       /CN=38C91BA9AF338721219232C9918431499404172C
Certificate serial:       55BFD1A6E12BDBF616A7C76B14D948028DBBE2EB
Authority key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa
Signing time:             Sun 03 May 2026 03:13:37 +0000
ROA not before:           Sun 03 May 2026 03:08:37 +0000
ROA not after:            Sun 02 May 2027 03:13:37 +0000
asID:                     150462
IP address blocks:        103.46.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl
                          rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bf:d1:a6:e1:2b:db:f6:16:a7:c7:6b:14:d9:48:02:8d:bb:e2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38C91BA9AF338721219232C9918431499404172C
        Validity
            Not Before: May  3 03:08:37 2026 GMT
            Not After : May  2 03:13:37 2027 GMT
        Subject: CN=E426CAB3A8C7E0229627AC22F3B830377622518D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:b6:6b:7a:42:9b:98:aa:7d:0c:34:91:45:
                    62:b3:55:af:2b:b4:09:29:22:42:cd:a9:e5:1c:8d:
                    21:60:e0:67:c0:fe:81:c5:45:c6:88:45:bf:e8:9f:
                    dc:ae:af:c2:9d:bb:f5:c2:a2:4a:19:17:3a:4f:c2:
                    f7:65:55:ca:39:08:89:41:3b:0a:1a:e8:c4:3e:77:
                    b7:e0:94:7d:03:9d:ee:17:1d:66:06:c8:56:53:41:
                    a3:71:38:97:35:6e:ea:42:d8:45:a7:ed:86:d5:d8:
                    db:1f:31:aa:86:81:2a:c4:6a:4b:a0:47:11:74:2d:
                    69:47:26:ad:d2:c1:27:7b:d8:a9:f1:77:4f:c7:fb:
                    ad:58:1d:84:50:2b:85:14:89:d0:b7:9e:de:c6:8d:
                    b3:52:02:86:63:7e:ca:02:5e:7b:66:9e:c2:1f:07:
                    89:1c:88:7c:43:0f:b0:71:e5:a5:d6:01:82:51:ed:
                    58:55:21:5d:cb:27:4c:57:0b:de:1f:7e:1c:7e:35:
                    57:9c:79:34:04:d9:c3:cd:8d:72:0a:a1:b3:02:f7:
                    44:39:7d:b3:36:6b:d8:05:4a:33:8a:f4:0f:ac:c1:
                    2e:d1:26:f9:a2:af:3c:59:5d:43:8d:a1:14:83:37:
                    ee:35:b5:ed:4a:ba:0b:3e:50:1f:93:d5:88:66:c8:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:26:CA:B3:A8:C7:E0:22:96:27:AC:22:F3:B8:30:37:76:22:51:8D
            X509v3 Authority Key Identifier:
                keyid:38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1a:21:f7:21:89:b3:c6:79:ba:1f:83:31:df:03:3c:56:6e:
         81:45:34:34:74:5b:2e:f5:f1:b2:90:05:5e:6a:65:95:53:fe:
         ff:f9:fb:30:fc:3e:c6:f3:f3:39:d6:dc:9e:46:e1:11:fc:e7:
         d9:0c:07:40:6e:d2:17:03:5e:74:9f:f7:96:73:c5:07:e0:ff:
         41:a0:a6:cf:24:a6:2d:e2:94:43:74:d5:b1:0a:d0:48:00:72:
         0a:59:52:d4:85:93:65:7a:d6:5e:e0:01:01:d7:4d:82:6d:cb:
         8d:0d:cf:e9:0d:8f:7e:2b:39:47:b2:4e:93:4a:87:c2:da:ba:
         10:ad:17:cc:13:d5:26:a4:95:a4:8c:0c:f3:95:0d:08:92:58:
         05:b6:cc:30:e2:e5:91:32:5c:8a:8c:82:1e:89:28:fa:c7:d9:
         f0:c2:2c:75:a2:c2:aa:30:1c:d2:96:32:cb:13:2a:89:e0:66:
         1e:96:78:20:4d:90:cc:1c:2c:ed:d3:2b:ce:b4:ff:88:f9:e5:
         2c:ca:12:af:8f:04:2c:72:1c:16:6a:7a:69:ed:04:e9:35:2b:
         3a:81:43:2e:e7:e1:42:cd:95:63:bf:c0:37:15:4c:0a:5c:f2:
         d4:0d:d2:e3:a7:0c:a4:ed:5f:77:f9:f0:ca:df:09:5f:7d:ff:
         9f:0f:e1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:40 2026 by rpki-client