Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa
File:                     3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (raw, json)
Hash identifier:          I+lY+hFIK96OR37hrIA/lKihinGsUdfLpRm0RyODHnI=
Subject key identifier:   29:D1:91:37:D3:EA:66:84:CE:DD:08:41:47:42:42:D5:39:91:C1:76
Certificate issuer:       /CN=92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00
Certificate serial:       6EC69E96836CDFECBF39BE3914C875D1087BEE7A
Authority key identifier: 92:B2:D5:AC:CA:FD:29:C6:D9:1E:F4:2B:C9:96:29:D2:4F:F6:2C:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa
Signing time:             Sun 03 May 2026 03:15:43 +0000
ROA not before:           Sun 03 May 2026 03:10:43 +0000
ROA not after:            Sun 02 May 2027 03:15:43 +0000
asID:                     149671
IP address blocks:        103.185.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl
                          rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c6:9e:96:83:6c:df:ec:bf:39:be:39:14:c8:75:d1:08:7b:ee:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00
        Validity
            Not Before: May  3 03:10:43 2026 GMT
            Not After : May  2 03:15:43 2027 GMT
        Subject: CN=29D19137D3EA6684CEDD0841474242D53991C176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ee:f5:9a:a5:ad:d2:6d:41:c3:f1:c4:8d:fd:
                    96:59:7c:10:35:77:8d:c2:04:8e:67:6b:12:0e:d8:
                    a2:af:1c:c9:07:2f:f0:21:38:78:e7:a0:8a:81:7c:
                    0b:67:3d:10:88:b1:49:64:7e:2f:0e:72:49:33:7b:
                    66:e3:be:55:8f:d2:4e:e4:d0:40:db:4d:49:e0:8e:
                    12:63:be:ad:e2:78:5d:63:fd:af:08:d8:0a:4e:0c:
                    63:c5:4b:ec:e7:f2:4a:b0:1c:19:6f:9d:1e:f1:15:
                    7c:1b:55:84:e1:4e:56:b3:f5:0b:b9:69:1c:07:0e:
                    0a:f3:fc:b9:4b:91:7f:a0:c8:5e:49:c8:fc:93:6f:
                    fc:be:fe:e3:b6:17:f5:06:b8:2b:e2:c2:91:43:d6:
                    a3:f1:e3:1a:d0:cf:3d:97:cf:cb:bb:d8:a5:76:eb:
                    66:8f:dc:4c:e3:f7:16:4e:37:ab:f3:cd:83:d6:ed:
                    7f:b5:dd:18:d7:7b:0d:9a:c4:cd:b9:70:ee:e2:4b:
                    83:0c:1d:39:c5:1a:fe:38:53:62:8d:d6:08:c4:03:
                    2f:e9:ec:b3:d6:2a:65:5c:fd:5c:6f:94:64:c0:16:
                    6c:fe:b2:c5:76:06:10:89:78:0a:d6:28:a5:91:4c:
                    26:64:2c:1f:d9:fd:7d:58:24:d2:ae:fc:21:a7:1b:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D1:91:37:D3:EA:66:84:CE:DD:08:41:47:42:42:D5:39:91:C1:76
            X509v3 Authority Key Identifier:
                keyid:92:B2:D5:AC:CA:FD:29:C6:D9:1E:F4:2B:C9:96:29:D2:4F:F6:2C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e9:a6:b7:bd:d9:82:7a:cd:eb:c5:8f:7c:40:25:cf:37:e1:
         a6:31:5a:23:33:c8:e7:1e:3c:37:72:c9:4e:16:1f:82:d8:4f:
         be:0c:2a:c3:5b:64:7b:1d:bd:5c:dc:bb:2d:47:b2:21:be:d1:
         8f:41:82:92:cb:54:5b:48:af:56:3b:84:d2:b7:52:01:9f:75:
         39:b7:a0:33:aa:0c:8a:2c:30:66:ce:48:4c:6b:47:ea:48:b2:
         de:f8:e4:8c:80:af:8d:8b:bf:14:33:ca:69:9d:8f:ab:9e:8d:
         39:b2:8d:e0:ed:6b:68:40:de:f5:59:aa:26:da:2b:6e:d5:cf:
         86:62:5e:17:fa:39:48:fd:24:53:5c:5c:a5:c1:bc:62:fb:83:
         84:cd:02:7a:45:cc:d1:56:3c:d2:be:45:87:fa:5d:18:cf:5f:
         ec:4c:72:06:d4:d7:71:07:fc:9c:98:2c:b1:5c:7a:2f:a4:53:
         43:a5:07:84:73:a6:de:30:8b:da:51:a8:bf:09:17:53:02:86:
         06:c6:2d:f7:35:da:e3:d2:ac:19:c4:f9:42:66:3c:43:14:26:
         4e:7f:f7:3c:82:c4:7c:da:b6:db:eb:83:10:07:ec:7c:65:24:
         6a:a4:2a:b1:2c:f7:6d:bf:99:6b:9c:ff:c7:4b:aa:d5:02:17:
         00:d3:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:46 2026 by rpki-client