Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa
File:                     3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (raw, json)
Hash identifier:          VGYEwzCU0pJcRwa77WfjBRiXp9jxpBahdWP554wfxNw=
Subject key identifier:   46:93:55:88:2C:60:CE:AD:FD:1B:28:05:5B:16:18:5B:6C:C8:1B:C2
Certificate issuer:       /CN=7114DCC67CA188857960AB8205FF64878ABC3A2C
Certificate serial:       389BDA22534A83D264CF64788DD69191A612B7E1
Authority key identifier: 71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa
Signing time:             Sun 03 May 2026 02:10:35 +0000
ROA not before:           Sun 03 May 2026 02:05:35 +0000
ROA not after:            Sun 02 May 2027 02:10:35 +0000
asID:                     147165
IP address blocks:        103.178.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl
                          rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9b:da:22:53:4a:83:d2:64:cf:64:78:8d:d6:91:91:a6:12:b7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7114DCC67CA188857960AB8205FF64878ABC3A2C
        Validity
            Not Before: May  3 02:05:35 2026 GMT
            Not After : May  2 02:10:35 2027 GMT
        Subject: CN=469355882C60CEADFD1B28055B16185B6CC81BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:d6:62:93:2b:dd:7c:6c:3c:ec:e2:63:da:
                    23:c8:3b:c5:a2:98:82:8c:a3:29:be:f7:e6:9c:eb:
                    eb:ef:51:4d:06:a0:3d:0d:93:1c:86:d3:cf:67:76:
                    fc:f9:8d:6d:57:39:d0:94:48:50:fe:6d:9c:98:d2:
                    23:eb:65:4c:82:49:95:29:fc:72:e2:0d:9f:b6:d3:
                    c2:c1:80:2b:a3:03:9f:81:1d:e6:54:fa:d4:1c:17:
                    23:c5:be:f8:2b:09:fe:31:8f:e2:48:68:61:26:d8:
                    3f:f6:48:34:ba:68:06:f0:0c:4f:4f:97:56:5b:9c:
                    52:b7:4e:de:ac:67:d2:a4:00:fc:fa:72:76:07:2a:
                    fc:8d:e6:52:58:00:5e:92:1f:95:59:4a:5d:da:0e:
                    82:68:d4:ab:18:97:c1:54:52:97:a4:8b:a0:bb:b4:
                    26:68:91:fa:3f:30:cd:35:67:8b:c0:17:fd:e8:76:
                    31:89:9c:53:b6:18:25:70:6c:f0:b1:47:b9:17:91:
                    ed:35:f6:0a:4d:63:db:d5:87:ee:92:39:ac:72:1b:
                    bc:3e:71:7c:13:e8:bc:f2:a8:66:f5:28:91:1e:99:
                    1e:c5:42:59:fd:3f:60:84:d0:ca:aa:b1:ad:2c:2b:
                    5c:79:00:e6:7c:df:a6:d4:18:7e:7d:81:57:52:41:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:93:55:88:2C:60:CE:AD:FD:1B:28:05:5B:16:18:5B:6C:C8:1B:C2
            X509v3 Authority Key Identifier:
                keyid:71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ed:d3:b3:19:e3:e1:de:9b:6a:7a:08:28:bd:a4:ed:69:1a:
         bf:72:5e:eb:30:eb:bf:11:d9:60:7a:f4:d2:4b:68:c8:5e:84:
         5b:7b:13:36:36:91:1c:20:d2:dc:71:fa:12:0e:be:06:c2:90:
         71:7c:04:0d:5a:36:a8:d6:7f:31:63:1a:7a:c3:3c:d4:02:72:
         44:23:62:64:ef:62:b7:a7:6a:79:03:2f:92:04:7b:0e:35:d5:
         b5:39:ab:ba:01:58:2c:4b:c0:b5:65:77:d8:7d:04:1d:c9:a5:
         ea:ce:1c:80:09:91:a9:5d:d1:29:c9:9b:85:d1:1e:40:53:7e:
         2e:6a:1c:76:7f:2f:ae:95:cd:63:25:24:45:c4:a6:34:ed:fe:
         8e:38:c7:fa:d5:89:49:ec:01:d6:2e:03:86:ab:a9:d9:f1:ee:
         1b:ab:4e:f6:e2:ae:a5:6c:36:21:ec:8c:a6:c7:ff:4d:21:5e:
         80:b2:49:4c:cc:4d:85:d4:c9:c9:94:f9:30:07:0d:a2:7c:01:
         14:4f:0f:94:d7:6e:27:f2:cd:56:f5:a9:9f:43:58:d4:50:b3:
         ce:4b:8b:74:2d:a6:a5:1b:10:98:f3:60:69:7c:80:d2:42:f2:
         17:ca:b6:d0:23:a4:3c:13:8b:7d:86:79:32:07:4a:27:6c:7c:
         49:17:dd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:28 2026 by rpki-client