Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34372e302f32342d3234203d3e20313336383639.roa
File:                     3130332e3134342e34372e302f32342d3234203d3e20313336383639.roa (raw, json)
Hash identifier:          eg4bFeWBrQDZeMRitgO5gDDB0d8fLsyuSG/QjoIUue0=
Subject key identifier:   31:86:B0:02:34:B7:6B:A8:F5:5C:70:DC:78:DE:11:C8:7A:2E:C8:59
Certificate issuer:       /CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Certificate serial:       219B3A21B8862D77FC35AB3EB0E0BA637BDC2472
Authority key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34372e302f32342d3234203d3e20313336383639.roa
Signing time:             Mon 05 Oct 2026 09:35:24 +0000
ROA not before:           Mon 05 Oct 2026 09:30:24 +0000
ROA not after:            Mon 04 Oct 2027 09:35:24 +0000
asID:                     136869
IP address blocks:        103.144.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
                          rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9b:3a:21:b8:86:2d:77:fc:35:ab:3e:b0:e0:ba:63:7b:dc:24:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
        Validity
            Not Before: Oct  5 09:30:24 2026 GMT
            Not After : Oct  4 09:35:24 2027 GMT
        Subject: CN=3186B00234B76BA8F55C70DC78DE11C87A2EC859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:02:5a:b8:17:7f:08:34:ba:88:24:69:98:
                    6e:05:18:a8:0e:b6:0c:1d:57:6f:bb:cd:da:c5:a2:
                    e1:ca:ae:00:3e:63:f9:ab:2d:a9:28:e0:38:67:99:
                    71:30:dd:c5:d5:b0:81:17:c5:ef:53:ee:1c:8b:5a:
                    53:a3:f8:ae:16:25:42:49:dd:93:c9:d6:65:a2:90:
                    29:e0:85:7d:68:84:c1:01:a3:e9:a6:2c:d2:de:d5:
                    ee:ff:69:70:c6:69:fc:ce:f7:88:dd:85:34:b3:0f:
                    ec:d2:b0:cb:19:19:84:76:81:4f:17:08:60:b1:75:
                    2a:10:7b:94:64:7c:26:a0:90:96:c9:5b:3d:d7:e6:
                    06:43:87:24:22:70:e0:7a:d3:f4:67:2c:60:b9:2a:
                    c1:34:e7:c1:ba:5d:e2:1a:97:c6:7c:b0:30:44:07:
                    89:d5:d2:d5:65:18:24:74:64:3b:98:79:6b:61:3e:
                    57:e2:df:c7:20:1c:e6:69:04:04:3d:c4:62:63:d7:
                    b9:f2:3a:02:f2:42:92:af:ce:f0:3f:b7:1b:0f:54:
                    59:55:58:14:24:25:cf:74:04:7f:d8:ba:52:fa:9e:
                    e3:1e:a3:dc:0b:75:f8:ec:de:c5:61:0b:b9:87:49:
                    79:e2:84:55:4d:fc:c3:88:c3:d3:1f:9c:99:2e:6c:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:B0:02:34:B7:6B:A8:F5:5C:70:DC:78:DE:11:C8:7A:2E:C8:59
            X509v3 Authority Key Identifier:
                keyid:AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34372e302f32342d3234203d3e20313336383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:b3:5b:da:94:bb:11:c5:5f:0d:11:85:4c:80:30:d6:8a:2d:
         6d:3c:9d:60:2a:ee:0c:11:b6:05:41:bb:ab:be:7a:b1:b6:c8:
         ca:5c:b4:58:85:7e:0a:b7:4a:06:43:55:d7:67:4c:48:08:25:
         7d:8c:95:e6:4a:0c:3f:63:5b:07:84:1b:7e:48:1c:ae:3e:af:
         5d:4b:5f:17:7b:d4:c1:9b:72:6e:4e:3e:79:15:23:aa:09:17:
         d1:83:54:89:48:8b:1e:b2:02:35:3e:02:9e:1f:b8:a8:54:a3:
         2e:3e:ba:d4:df:bf:61:fe:ac:dd:ec:db:7e:a9:d3:7e:db:a8:
         18:33:ac:0f:3f:3e:7b:04:22:a3:da:71:4b:05:d5:8d:f1:d0:
         8a:98:21:60:78:0d:85:e7:13:31:28:78:55:cb:aa:cf:c5:ad:
         3b:4c:b5:57:85:62:4a:1e:ef:90:16:78:c3:65:0a:7e:3d:e2:
         e4:de:cf:bd:74:39:f3:98:17:e6:f0:85:0e:df:7e:1f:e3:c0:
         38:ee:bb:c4:c9:e1:46:5f:ff:4e:ea:77:92:1f:10:c3:36:9e:
         cb:1d:41:d5:c4:dd:be:5f:54:13:c7:ab:da:be:b1:9b:33:57:
         6a:f2:99:93:5e:46:ca:69:c3:f6:be:45:3e:47:29:a9:e5:70:
         38:c2:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:17 2026 by rpki-client