Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          guRu9prdmx+ch78kv34z9AVOzBlrJNlWUYpJ/aaI38s=
Subject key identifier:   5A:15:62:15:7C:64:4C:85:67:17:B4:5C:9B:DC:AA:3C:1B:E6:FE:48
Certificate issuer:       /CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD
Certificate serial:       57CB100D011F1DEE77B78FB471EDA9090843CCE1
Authority key identifier: B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa
Signing time:             Sun 03 May 2026 02:12:20 +0000
ROA not before:           Sun 03 May 2026 02:07:20 +0000
ROA not after:            Sun 02 May 2027 02:12:20 +0000
asID:                     131111
IP address blocks:        103.177.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl
                          rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cb:10:0d:01:1f:1d:ee:77:b7:8f:b4:71:ed:a9:09:08:43:cc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD
        Validity
            Not Before: May  3 02:07:20 2026 GMT
            Not After : May  2 02:12:20 2027 GMT
        Subject: CN=5A1562157C644C856717B45C9BDCAA3C1BE6FE48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:b2:62:bd:2d:df:73:70:c9:cf:43:b5:46:
                    0b:7f:84:e1:f2:a3:b5:91:78:1d:88:04:38:b2:c4:
                    be:d7:3f:03:f6:41:66:ae:db:fa:e4:ff:ed:61:af:
                    50:87:f7:5e:25:9a:59:60:4b:63:0c:b7:c8:87:67:
                    a9:03:e5:e1:3a:9c:6c:3b:47:0d:c8:18:06:48:b2:
                    18:62:35:97:38:c0:4f:1b:24:ca:db:80:d6:ba:6b:
                    03:dc:36:f2:3e:29:23:c1:47:97:7c:0e:22:8b:3a:
                    8a:06:28:4c:fa:20:e4:a2:2d:85:49:5e:8f:4a:0f:
                    e8:6b:0b:c5:f7:c7:5a:34:49:ec:45:b5:43:8b:58:
                    a1:61:4f:65:e1:a7:1c:f5:15:02:54:4c:f7:fa:39:
                    8b:d0:1e:1d:f0:ea:13:cf:4c:d9:8c:e1:8d:47:b9:
                    6d:6c:7b:75:80:a2:10:44:6f:6f:d6:e1:b7:c8:7e:
                    4b:30:c9:4b:fa:35:3e:af:d8:ac:f0:a0:c9:9f:d3:
                    ba:13:ac:b9:d5:32:4a:54:75:b5:4e:9a:30:2b:5a:
                    93:ce:73:19:89:72:93:fa:3c:cb:8c:c9:81:4b:cf:
                    2e:cd:ed:7d:9d:70:73:51:d3:82:07:10:94:0e:8e:
                    58:fa:d7:0e:76:2d:8f:5a:d4:ea:7d:08:c7:b1:4d:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:15:62:15:7C:64:4C:85:67:17:B4:5C:9B:DC:AA:3C:1B:E6:FE:48
            X509v3 Authority Key Identifier:
                keyid:B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:29:5b:41:b8:11:55:49:88:c7:89:2c:8e:8e:27:aa:4d:dd:
         01:ad:e7:a8:86:95:9e:2c:fb:5a:8a:e4:2e:1a:3c:1f:db:d3:
         c2:fd:c1:88:97:f1:74:c4:17:7e:9c:2a:14:43:d7:23:cf:64:
         24:d7:27:c7:33:ce:43:37:47:ad:b7:58:26:ae:60:fd:8f:64:
         11:73:92:9c:26:26:1b:6a:64:1c:db:d5:01:19:be:72:76:86:
         a3:56:08:d1:0c:cc:39:b6:9f:39:3d:a9:98:ef:bf:f8:4f:17:
         d1:61:5e:5c:bf:6c:3d:61:4e:a5:4d:f0:8a:cf:4f:66:a5:2f:
         b4:e5:8f:00:da:bb:2c:35:34:cb:7e:5b:9f:5f:df:da:70:4c:
         17:74:0e:63:d5:25:ca:c1:fa:7f:c9:41:0e:bc:1f:69:ac:45:
         04:af:f8:67:6e:02:2c:4d:aa:cd:ce:77:ed:b7:0b:3e:ec:95:
         f4:bb:3c:08:06:f8:68:2a:a5:60:a7:a3:ff:fd:7f:ba:1f:e0:
         56:8f:24:ed:f5:4a:e4:a7:bb:e4:e9:47:35:b4:eb:33:c9:62:
         87:7f:e9:bc:f3:0c:77:3b:83:b9:03:c5:d8:d3:46:7b:b9:28:
         11:4f:9c:a2:da:1e:16:08:68:bd:8d:7e:11:90:68:8d:80:fd:
         ec:25:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:56 2026 by rpki-client