Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa
File:                     3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (raw, json)
Hash identifier:          mha8gB43Q52dsFp/n7sRBfxP/9miPkjrCifPwwjXt6U=
Subject key identifier:   21:66:CE:7E:2B:CC:26:5E:31:D5:E1:CF:5C:54:79:F3:55:B1:21:71
Certificate issuer:       /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial:       3203752BCD9B583B51028C712FEB8D7E7450865E
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa
Signing time:             Sun 03 May 2026 02:16:14 +0000
ROA not before:           Sun 03 May 2026 02:11:14 +0000
ROA not after:            Sun 02 May 2027 02:16:14 +0000
asID:                     56243
IP address blocks:        103.246.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
                          rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 09:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:03:75:2b:cd:9b:58:3b:51:02:8c:71:2f:eb:8d:7e:74:50:86:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
        Validity
            Not Before: May  3 02:11:14 2026 GMT
            Not After : May  2 02:16:14 2027 GMT
        Subject: CN=2166CE7E2BCC265E31D5E1CF5C5479F355B12171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:05:cc:d4:8d:88:70:2e:44:5d:09:09:be:
                    f5:9c:6c:9e:d1:dd:18:72:76:ff:78:46:a0:80:34:
                    bc:cf:5d:4e:14:ee:57:9f:07:04:d7:35:42:6f:85:
                    42:09:14:41:aa:66:7d:06:f8:f7:06:f4:d5:17:19:
                    9c:d9:0f:e8:ac:60:3a:f9:6e:9d:ac:fc:95:4c:c7:
                    d5:e5:44:27:a0:20:a4:6e:9e:9d:86:8b:d7:31:6b:
                    4e:8d:1d:48:2a:4d:b5:87:8e:59:84:15:6c:dc:02:
                    e3:c0:5f:ff:fa:39:26:22:16:a9:b0:4e:81:c6:e0:
                    1f:21:fb:c6:db:99:cb:2d:d2:95:02:20:78:0a:27:
                    ed:d1:26:43:9e:7d:14:ca:76:d8:fe:46:90:a5:d1:
                    4e:10:8d:9b:4a:3f:37:8d:54:ca:66:a3:4e:18:c4:
                    54:1a:08:a3:49:bd:bf:32:dd:c6:42:22:20:d1:9e:
                    2a:0d:83:92:4c:d2:e1:55:fa:37:16:68:b4:d1:fe:
                    b3:48:e6:71:d7:78:5d:e9:ab:0d:b5:38:a4:67:17:
                    b2:2d:eb:06:4c:10:6f:50:7b:09:3e:a8:53:8a:81:
                    f0:2f:e2:85:31:2c:6b:d3:5d:d0:3a:93:f3:a0:69:
                    c5:0a:8c:87:bc:c6:1b:c3:79:07:24:5a:57:af:5e:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:66:CE:7E:2B:CC:26:5E:31:D5:E1:CF:5C:54:79:F3:55:B1:21:71
            X509v3 Authority Key Identifier:
                keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:9a:5d:f9:00:c6:b5:1f:9d:b5:88:15:78:2b:2b:ae:3e:e5:
         ec:74:c2:aa:a6:cd:e0:74:b3:40:37:8a:0d:2b:e6:6a:84:f1:
         39:b8:eb:f7:d1:46:d4:15:18:dc:08:43:e9:4a:b4:44:d3:2d:
         6c:63:69:8a:bb:0d:fb:61:ef:59:02:35:d5:65:cc:88:b2:b6:
         37:15:20:c4:9d:ae:77:04:86:f0:41:11:5b:cb:ab:38:a7:b5:
         0e:04:c6:2c:6d:e3:59:9c:d3:27:6e:1b:b0:fe:d7:4e:43:77:
         c5:ad:a0:f3:cd:5c:cd:e3:a2:0a:46:53:e6:de:f4:42:73:5a:
         aa:8d:ce:69:46:0b:1a:84:94:6b:44:1d:22:08:fe:4a:c0:15:
         f5:80:2f:aa:d3:2b:e5:92:54:a7:a1:e4:08:0c:24:72:4d:33:
         90:48:75:51:d5:08:e3:d1:f0:c5:a4:d4:7b:92:b9:82:f8:e9:
         c9:49:df:51:83:51:c0:13:df:72:3c:5d:e7:98:04:fd:b5:f0:
         bc:00:5e:9f:41:32:10:57:79:b8:98:7b:25:dd:fb:b8:b5:1a:
         40:af:77:f5:47:a8:6e:1e:c8:53:c8:6e:d6:2f:84:8f:f6:05:
         65:1f:34:79:d3:38:a7:b4:6d:e1:32:af:cd:29:ed:77:8e:09:
         a6:b3:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 01:28:07 2026 by rpki-client