Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa
File:                     3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier:          4wept2TXybZZ4wiG2lTGiLdJKO6+UiKFaeUDDPHh8cw=
Subject key identifier:   63:53:35:E2:C9:70:E6:19:7E:63:F8:66:AD:46:56:EC:CB:A6:BD:47
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       6A263D4A0B53B6675B3EA82FA7E64DEF3B2DD0D3
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa
Signing time:             Sun 03 May 2026 02:57:47 +0000
ROA not before:           Sun 03 May 2026 02:52:47 +0000
ROA not after:            Sun 02 May 2027 02:57:47 +0000
asID:                     59282
IP address blocks:        103.228.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:26:3d:4a:0b:53:b6:67:5b:3e:a8:2f:a7:e6:4d:ef:3b:2d:d0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: May  3 02:52:47 2026 GMT
            Not After : May  2 02:57:47 2027 GMT
        Subject: CN=635335E2C970E6197E63F866AD4656ECCBA6BD47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:1c:6e:88:62:09:87:80:70:7b:96:11:17:
                    7b:43:9a:af:f5:0f:d8:86:6d:21:ea:83:bb:5e:44:
                    bc:ef:fe:c6:93:ab:4e:cd:cf:95:36:89:72:f3:4c:
                    8f:f1:28:d5:1e:77:fc:19:8c:df:42:8a:51:e8:cd:
                    b0:af:6f:89:2a:f0:7d:5e:63:eb:09:2e:f2:85:96:
                    a5:25:1a:50:aa:7e:03:fd:6b:51:6f:14:55:ac:6c:
                    26:e4:6d:8d:9d:d6:84:63:7e:8a:81:b9:cd:46:02:
                    4a:b1:df:a1:fa:ce:d4:9e:f3:89:ff:9c:d6:62:42:
                    41:9d:22:9e:3a:a6:6b:9c:12:92:ea:0f:b1:fb:6c:
                    b7:e8:d5:5d:81:cf:5c:60:90:cc:7d:f5:14:3f:ee:
                    e1:09:f0:28:be:25:3c:b8:7b:d6:31:71:92:af:6b:
                    ea:e2:04:92:8f:82:e1:7c:a7:73:6f:bd:7f:dc:6d:
                    2f:e6:97:ac:1b:9a:60:05:f6:0c:86:55:14:fe:a5:
                    ec:a2:76:16:6d:4b:07:8e:e7:f7:92:f9:89:2c:bb:
                    68:e6:bb:de:5c:58:81:4e:5c:7a:b2:31:b6:0d:87:
                    3e:49:d5:b0:00:cd:d9:dd:0c:43:10:21:d9:fa:3f:
                    3d:37:4e:9d:9d:8d:47:2b:33:04:ba:d3:80:5c:9c:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:53:35:E2:C9:70:E6:19:7E:63:F8:66:AD:46:56:EC:CB:A6:BD:47
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         eb:be:e2:3b:a8:d9:89:e0:e2:9b:b7:62:ca:4d:ce:77:83:80:
         a9:93:33:c0:fc:05:ea:8e:8c:1c:2e:b4:ef:87:5f:16:c1:1d:
         8e:b4:3d:83:20:05:c0:4d:fd:60:95:c1:c6:14:0c:eb:36:fd:
         5b:76:a1:ff:a6:67:21:1c:47:10:ad:30:d6:c2:fd:c9:18:a5:
         40:88:95:e0:d9:1e:25:78:7f:92:ef:28:fc:d7:77:9f:ec:0a:
         8d:60:16:31:5d:61:2e:c6:3b:f2:91:f3:8f:2e:fa:04:a1:f5:
         e7:eb:ef:d7:32:2b:c5:30:f6:69:17:8f:0c:2a:3e:8d:db:24:
         37:e6:fc:7b:26:a5:91:44:cb:3c:8d:13:9d:e2:ef:6f:cc:4d:
         3b:83:4e:05:7c:62:12:63:c2:16:47:c5:2e:6d:f3:5c:0b:58:
         d1:a3:c0:a7:31:62:50:6b:b3:e2:13:35:6d:a9:a6:6a:55:d0:
         cf:8e:31:63:b6:bb:f7:df:eb:03:e1:31:9f:99:f5:3a:90:e1:
         d4:54:34:1a:cf:db:a8:79:72:b4:6a:60:1c:22:21:af:0c:b7:
         3f:ab:ff:18:c7:eb:03:4a:80:22:dc:b4:aa:8e:bb:2f:55:76:
         f3:09:0d:ac:ba:61:e2:d3:b7:d1:41:fa:0c:84:25:8d:25:d7:
         50:38:c3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:02:06 2026 by rpki-client