Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa
File:                     3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          ARl4ZAaC9Jes/owyoPp7apbT6NpWz6hu9CZFgWsDZ/w=
Subject key identifier:   88:7C:3F:C3:D6:00:62:8B:74:C4:25:ED:FC:74:2B:3A:5D:7C:06:18
Certificate issuer:       /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial:       6F29BD1755158FD77B98BE6E19A18FA956A0B64E
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 03:15:05 +0000
ROA not before:           Sun 03 May 2026 03:10:05 +0000
ROA not after:            Sun 02 May 2027 03:15:05 +0000
asID:                     135478
IP address blocks:        103.61.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
                          rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:29:bd:17:55:15:8f:d7:7b:98:be:6e:19:a1:8f:a9:56:a0:b6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
        Validity
            Not Before: May  3 03:10:05 2026 GMT
            Not After : May  2 03:15:05 2027 GMT
        Subject: CN=887C3FC3D600628B74C425EDFC742B3A5D7C0618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:dd:ee:53:4b:dd:d1:e0:12:64:95:1c:5d:
                    39:f9:4f:15:5b:4b:5e:38:d0:2c:66:62:43:20:be:
                    be:6f:b3:26:57:dc:97:80:75:ee:7a:78:6a:10:8e:
                    2e:63:ac:aa:34:80:38:eb:aa:cd:28:3e:1c:54:15:
                    ba:32:12:63:7e:6f:b9:df:73:e3:6c:db:c6:67:d7:
                    3c:ff:ec:27:ea:da:c8:ad:f3:df:55:b6:d9:40:28:
                    f9:67:32:55:d1:fa:8e:a8:76:b9:22:88:f2:37:31:
                    de:c8:b5:7e:fa:a0:9b:f7:06:4c:5e:db:52:db:47:
                    ce:d1:19:fe:c2:75:b1:cc:fe:23:60:d6:16:54:be:
                    e1:98:af:a0:de:89:6d:97:eb:a0:85:83:60:20:b7:
                    0b:8f:0f:65:90:cc:92:6a:6d:4b:ea:14:b8:0e:6d:
                    bb:55:cf:5a:b3:65:51:ae:95:f9:7d:a3:20:97:09:
                    94:b1:a2:9b:46:a4:1d:ff:f7:e6:c6:85:07:51:1c:
                    ea:28:64:47:39:c6:be:c0:16:93:ef:18:69:5b:e7:
                    93:83:71:c8:58:65:b2:b4:f9:99:b7:9a:a3:d5:16:
                    a0:37:57:71:b9:d1:9b:83:fc:98:ad:cf:97:4b:c9:
                    70:e2:e6:c4:56:6e:59:3f:e3:f7:34:9b:5c:cb:19:
                    7b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7C:3F:C3:D6:00:62:8B:74:C4:25:ED:FC:74:2B:3A:5D:7C:06:18
            X509v3 Authority Key Identifier:
                keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:29:3e:94:7f:34:8d:3b:8f:a8:24:63:8b:43:0b:bd:82:9b:
         23:1e:32:fd:a8:87:f7:4d:c7:9e:d9:21:d0:ad:26:7f:49:2a:
         a8:a7:55:26:a0:a5:85:5d:7f:d5:b6:68:98:44:0c:d3:4e:4a:
         d0:b4:e0:50:16:d3:c0:e3:dc:d3:78:07:33:40:ab:2d:62:80:
         24:d4:97:6b:91:c4:08:38:5a:97:19:8b:2e:5c:70:b0:eb:60:
         ed:3c:fe:db:8f:d7:16:f1:dd:e6:f6:4a:d6:5e:9c:04:81:64:
         5d:95:37:54:56:21:9b:4a:37:a1:c4:b7:27:73:69:be:ab:54:
         d1:59:4c:08:3f:34:91:fb:62:f9:53:da:89:cd:3a:e1:07:df:
         89:27:80:6d:f6:1b:8f:43:7d:09:4e:36:a2:f7:50:e4:da:7d:
         96:e8:a8:58:d5:66:d9:7c:20:8d:d9:2e:1a:d1:2a:81:2f:6e:
         ee:8f:ea:15:a5:4f:a5:8a:1e:77:1a:2f:46:bf:3d:0d:26:e1:
         40:a0:59:6e:62:9b:64:b3:5f:5d:8b:b9:25:fb:ef:35:75:dd:
         c5:36:81:03:dd:71:37:0b:78:a9:d5:58:5d:96:e3:fe:68:8d:
         08:f0:30:0c:c0:d4:a2:2a:00:5d:0c:f6:21:48:8d:14:5d:de:
         92:d1:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:54 2026 by rpki-client