Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa
File:                     3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          7YRFkgWqBTb6xXfqMpSxUz7NK51JToKbqOBLvR25NTc=
Subject key identifier:   0F:27:0A:E4:BF:D5:AE:10:45:D6:5D:0C:6B:FC:18:F5:6C:42:4A:0D
Certificate issuer:       /CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473
Certificate serial:       21A1DCB9AD889B656B3FABBF412F394ED2724619
Authority key identifier: D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 02:14:09 +0000
ROA not before:           Sun 03 May 2026 02:09:09 +0000
ROA not after:            Sun 02 May 2027 02:14:09 +0000
asID:                     17995
IP address blocks:        103.139.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl
                          rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 22:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a1:dc:b9:ad:88:9b:65:6b:3f:ab:bf:41:2f:39:4e:d2:72:46:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473
        Validity
            Not Before: May  3 02:09:09 2026 GMT
            Not After : May  2 02:14:09 2027 GMT
        Subject: CN=0F270AE4BFD5AE1045D65D0C6BFC18F56C424A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:45:26:ce:52:ce:90:72:d6:fc:14:85:3c:
                    0f:84:bc:41:a5:ea:7b:97:9a:d4:60:82:ac:3f:9d:
                    c3:60:89:ce:ba:66:4e:62:e2:5d:3f:92:4e:42:0d:
                    d4:d5:6b:7b:7b:5a:97:28:2e:34:96:85:99:cd:d1:
                    47:17:d5:09:41:dc:67:04:e6:bf:a7:6d:cc:6e:74:
                    40:7c:db:e3:3e:4c:a5:eb:96:42:c9:58:d3:3e:3b:
                    6c:bf:1d:0f:d1:20:6c:cc:78:f0:9b:62:e3:3f:02:
                    69:11:04:38:3e:40:58:ba:70:22:b6:e3:b0:20:d3:
                    42:53:77:b9:e4:57:10:fe:ad:ef:4f:0d:59:57:6c:
                    e1:33:58:6a:8b:bf:2e:d0:41:f7:e2:87:a5:73:74:
                    09:a5:12:ce:98:63:36:73:6e:74:ab:9f:10:1d:86:
                    c2:2b:2f:1f:c9:6d:a9:ae:2b:6d:85:50:4c:39:f8:
                    ca:80:dd:29:12:97:4e:a0:db:43:b2:1c:1d:cf:6f:
                    03:69:e5:eb:89:74:24:da:bb:a7:5d:1d:da:a9:1f:
                    72:b2:73:39:90:ba:fa:a3:80:b1:e1:1d:00:c4:da:
                    7a:a6:cd:80:8d:80:47:62:c1:13:8d:b4:06:88:af:
                    3c:ab:73:42:57:63:12:0c:2b:65:b2:e8:f3:26:5a:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:27:0A:E4:BF:D5:AE:10:45:D6:5D:0C:6B:FC:18:F5:6C:42:4A:0D
            X509v3 Authority Key Identifier:
                keyid:D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         eb:82:42:fa:b3:47:2c:b2:9b:6b:aa:44:52:c6:3b:11:09:e3:
         12:0a:39:ab:94:b6:03:65:ed:0b:43:af:76:8e:55:2e:5b:28:
         84:7d:94:7d:66:bf:1d:c9:e0:dd:44:61:af:97:27:ff:df:04:
         c1:59:4d:ae:a8:a9:80:6c:55:d6:2e:b9:7f:47:8f:ce:3f:65:
         f8:2d:c2:bd:5a:6c:7d:86:c1:76:18:6e:61:34:90:58:43:c3:
         1c:b6:bc:f6:e3:2d:a3:d5:22:77:61:fa:63:19:f2:8c:73:52:
         7d:54:63:69:89:ce:9b:3c:db:5d:8d:46:0e:4c:02:6e:18:60:
         2b:a0:c2:40:ec:4d:ff:9a:94:f3:11:25:09:e2:8e:c0:89:1f:
         3c:b4:7a:03:25:ea:d9:20:5f:9c:1b:00:d1:69:f6:5d:2e:a7:
         05:72:19:ad:9f:95:30:3d:4f:93:f1:80:3f:84:3b:f3:39:e1:
         a1:b1:f7:18:15:85:63:b2:8f:76:0e:82:42:9d:d7:4d:41:68:
         f9:8f:3c:4b:ea:33:6d:83:4a:f9:ac:db:27:27:4f:b7:3b:33:
         de:f1:48:42:5b:53:d5:f8:23:70:fd:54:b3:61:c7:3d:fd:67:
         1c:8d:b8:e5:9d:f4:b9:ba:21:29:be:8c:d8:90:66:61:15:6c:
         5f:d0:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:35:43 2026 by rpki-client