Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa
File:                     3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (raw, json)
Hash identifier:          qEG4LxFSDZmW4WNTreFkTFdisp7JtEexuG522GtAKfg=
Subject key identifier:   A7:DD:01:FB:1B:6C:CC:5F:90:22:54:D9:AB:4C:9B:4E:82:59:2B:FA
Certificate issuer:       /CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA
Certificate serial:       4CC9270234F20F91BD7BB35B3314E9CDF794301E
Authority key identifier: F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa
Signing time:             Sun 03 May 2026 02:12:14 +0000
ROA not before:           Sun 03 May 2026 02:07:14 +0000
ROA not after:            Sun 02 May 2027 02:12:14 +0000
asID:                     147167
IP address blocks:        103.177.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl
                          rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c9:27:02:34:f2:0f:91:bd:7b:b3:5b:33:14:e9:cd:f7:94:30:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA
        Validity
            Not Before: May  3 02:07:14 2026 GMT
            Not After : May  2 02:12:14 2027 GMT
        Subject: CN=A7DD01FB1B6CCC5F902254D9AB4C9B4E82592BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:ca:dc:94:38:81:68:92:ca:e2:c9:5b:8c:
                    43:79:a0:b9:6c:32:2b:7c:da:57:0a:04:04:07:c6:
                    68:13:a0:4a:9a:f9:89:9d:29:d4:8f:5a:1b:a6:fe:
                    d3:40:28:7d:8d:5d:c6:85:33:9a:c8:c5:81:2c:fe:
                    a4:46:74:77:6f:ca:4e:38:d3:ca:7b:fd:ad:8a:0e:
                    6c:47:dd:2e:bc:81:ef:1f:14:e5:28:fc:8f:96:94:
                    89:8e:9c:a3:97:a5:9b:23:d6:c1:97:08:3c:60:29:
                    ca:27:f6:43:b9:61:94:4c:d5:1d:1a:8a:fc:81:5f:
                    61:62:49:f1:3f:c3:8f:7d:2e:4f:1c:5d:3d:db:61:
                    f7:d3:2e:b9:8c:37:50:bf:42:c7:4e:25:2d:a8:8d:
                    43:65:02:78:a4:00:44:38:87:7c:8f:81:a9:b3:a5:
                    46:54:2f:70:3b:77:70:81:5b:7d:4f:0c:75:ca:dd:
                    4b:17:6f:27:3b:9b:cf:79:2a:c3:9c:75:37:c3:4d:
                    be:b5:f2:9d:50:30:29:c0:84:89:22:91:1a:da:a1:
                    d0:e9:aa:d5:0b:43:50:e1:4f:00:b0:b1:69:44:26:
                    88:20:7c:78:a9:84:12:8e:ad:c5:c5:50:69:2e:c5:
                    45:ba:c9:bd:79:50:e0:87:68:1d:fa:66:9a:51:5a:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:01:FB:1B:6C:CC:5F:90:22:54:D9:AB:4C:9B:4E:82:59:2B:FA
            X509v3 Authority Key Identifier:
                keyid:F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f7:b6:66:bd:b8:ae:36:11:c9:da:06:69:ab:ef:d9:20:95:
         ce:8b:98:bc:5c:83:57:38:6d:c7:28:ec:31:17:3c:41:ab:e2:
         3e:5c:b3:42:20:14:0b:fe:b7:de:57:56:31:8b:5b:f5:51:05:
         73:dc:07:2b:37:ba:e0:3b:5a:d4:de:ba:39:71:b2:b7:55:1b:
         2f:fb:91:f7:6b:bd:a3:9e:ff:a1:f8:43:42:20:5c:2b:9d:25:
         0d:52:95:0d:bb:f2:e0:bb:61:34:37:fb:a2:26:49:01:58:de:
         c8:78:74:89:fd:d2:61:f7:9f:90:81:68:d8:0c:4c:5d:3c:8f:
         7a:17:af:52:27:51:01:77:5c:fc:2e:09:e4:cb:95:a0:14:0e:
         70:ce:f2:84:28:c6:93:0f:7d:60:73:08:8c:f3:cd:ac:62:88:
         73:a7:54:44:51:e3:aa:ee:51:3b:2f:0f:16:7d:1f:76:d1:84:
         54:ef:70:e1:f7:fc:29:b4:04:0c:ff:f6:2e:3a:78:ab:78:44:
         95:e7:2d:50:b8:27:d4:2d:71:04:e1:2f:7c:a9:86:27:b9:23:
         4c:c7:39:13:7d:2d:a0:5e:38:6f:99:2b:00:29:e5:d9:be:90:
         d3:dc:40:df:c6:23:d4:2a:fd:a9:4a:3f:22:67:92:57:83:eb:
         ac:53:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:41 2026 by rpki-client