Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa
File:                     3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (raw, json)
Hash identifier:          +gv7mshFwG91guPNffeDqFP8VhtlPTdkF38Mrqjvafw=
Subject key identifier:   75:F2:1A:83:25:87:8D:5B:00:9F:30:E6:39:2D:E0:6F:38:46:15:B6
Certificate issuer:       /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial:       51B98B7E61B1D0F8CC97566388644091AAD24235
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa
Signing time:             Sun 03 May 2026 02:16:13 +0000
ROA not before:           Sun 03 May 2026 02:11:13 +0000
ROA not after:            Sun 02 May 2027 02:16:13 +0000
asID:                     56243
IP address blocks:        103.246.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
                          rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 09:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b9:8b:7e:61:b1:d0:f8:cc:97:56:63:88:64:40:91:aa:d2:42:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
        Validity
            Not Before: May  3 02:11:13 2026 GMT
            Not After : May  2 02:16:13 2027 GMT
        Subject: CN=75F21A8325878D5B009F30E6392DE06F384615B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:49:c1:10:4e:87:15:ce:5e:5e:ed:b0:ed:
                    80:e8:fd:7b:e2:86:36:f6:80:7a:db:3e:3a:47:bb:
                    96:ba:21:a6:78:35:b3:4d:33:89:34:69:86:4c:ce:
                    e6:08:17:a5:e0:12:4c:31:1a:d6:af:77:56:f8:f8:
                    1b:8c:af:2e:0a:5f:90:f7:97:59:04:21:e4:e7:db:
                    91:44:da:fc:39:a7:ae:96:99:69:db:d4:e5:56:ec:
                    b5:60:85:12:46:9a:2c:cb:c5:c1:18:36:31:c3:db:
                    04:b9:1b:01:ef:dc:6a:22:21:8e:83:e6:38:18:e1:
                    32:ff:2c:d6:18:c9:eb:cc:02:d8:03:27:64:03:04:
                    99:54:98:1f:21:4d:5b:ca:cd:f6:0f:3e:65:87:ab:
                    10:9a:75:2e:55:84:57:85:f6:b9:eb:ed:a0:71:c8:
                    87:79:a1:cf:4b:c5:31:9e:af:42:f8:e9:8b:ae:f8:
                    90:8c:c2:ba:fa:ac:24:07:54:43:e6:10:d9:d0:09:
                    2e:fd:86:fe:1f:30:f8:05:c1:42:6a:71:a2:cb:ff:
                    ef:c8:f8:f7:20:11:2d:0f:41:a9:e0:47:11:25:bf:
                    bf:26:b5:02:42:29:51:8d:12:90:ea:c3:ee:9f:8e:
                    9c:55:38:d9:c3:cb:50:77:1e:9a:6e:86:e6:0d:a5:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F2:1A:83:25:87:8D:5B:00:9F:30:E6:39:2D:E0:6F:38:46:15:B6
            X509v3 Authority Key Identifier:
                keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:4e:1b:71:52:21:2c:dd:cd:46:ef:8c:79:8e:12:cc:99:6d:
         40:a1:ba:37:c7:4b:e7:db:05:0d:2b:f3:51:49:57:05:5f:64:
         43:56:73:ea:0a:c3:48:69:f8:4f:a2:23:c0:02:49:9f:90:f8:
         95:0a:e3:70:c2:d5:14:7f:19:10:71:ac:f1:eb:6d:0d:f4:3b:
         81:5e:1c:5d:48:ce:82:2a:b7:90:62:01:c7:cb:17:1b:79:ba:
         c1:ca:9c:67:14:c1:10:9e:d9:49:da:36:1a:6e:36:ce:25:db:
         2a:03:9c:cf:ed:af:10:89:33:9d:21:e7:74:b3:d3:d2:7c:c6:
         74:c7:33:10:13:61:07:cb:fe:4d:77:fc:fa:54:f0:72:ae:17:
         90:2f:43:16:14:c5:93:55:96:75:5e:3f:48:ca:b6:9c:83:be:
         29:1d:6a:9d:8d:b1:40:ea:c9:47:e0:c0:af:a2:3b:cc:be:be:
         5d:9c:ef:02:b7:48:51:a1:ee:38:57:03:a6:0d:c1:6c:df:93:
         bd:b5:3b:0a:34:46:ab:49:04:c2:25:ff:36:78:37:4c:1f:58:
         92:1d:02:1d:17:49:62:b9:84:71:78:20:86:55:2a:81:d3:d9:
         04:0e:01:98:90:89:15:8c:74:0a:eb:0a:2e:ba:e5:99:9e:80:
         f7:62:79:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 01:28:07 2026 by rpki-client