Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313534343130.roa
File:                     3130332e3137352e33382e302f32332d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          OeG/PNeipoOhOvGu8q4WBcsQGgNJ6UhKACe8udTmev0=
Subject key identifier:   95:58:8C:8D:2A:28:E3:B0:EC:FD:D4:96:7C:A7:83:CB:17:9D:D7:D3
Certificate issuer:       /CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B
Certificate serial:       787B0722177ACFE95E397B086D265FF6747DA042
Authority key identifier: 8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 02:12:43 +0000
ROA not before:           Sun 03 May 2026 02:07:43 +0000
ROA not after:            Sun 02 May 2027 02:12:43 +0000
asID:                     154410
IP address blocks:        103.175.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl
                          rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7b:07:22:17:7a:cf:e9:5e:39:7b:08:6d:26:5f:f6:74:7d:a0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B
        Validity
            Not Before: May  3 02:07:43 2026 GMT
            Not After : May  2 02:12:43 2027 GMT
        Subject: CN=95588C8D2A28E3B0ECFDD4967CA783CB179DD7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:8b:68:cd:c2:f7:ad:6f:f6:60:78:4a:04:
                    e5:f4:71:df:5f:89:2e:ab:97:3d:10:67:fe:c3:a8:
                    ef:04:c1:5f:ab:8a:2e:20:c6:b2:8a:26:a3:53:82:
                    48:ff:f9:b9:77:2d:0b:5f:56:37:81:ea:3a:b3:9e:
                    88:11:8a:2e:c7:67:54:06:eb:1a:63:67:39:7b:cb:
                    fa:d9:1a:76:c5:54:67:75:f0:66:52:86:0b:50:79:
                    85:18:b8:dd:4d:79:29:e2:82:db:81:f9:de:15:70:
                    f6:06:19:f6:76:f1:c1:c2:71:5a:be:2f:61:2d:46:
                    33:96:fc:7a:6b:82:b0:ea:7e:80:14:d5:89:6f:8c:
                    3a:15:40:89:6a:9a:09:b0:23:80:a4:5e:dd:d2:ed:
                    75:44:75:dd:08:c2:f5:44:ee:17:29:5b:d3:1d:73:
                    4b:02:f3:2d:28:cc:2d:3d:a2:fd:1d:81:94:c4:63:
                    01:f8:04:66:67:e2:ff:9d:63:66:34:45:c3:d3:db:
                    a0:8f:1b:8d:30:f5:3b:b9:5a:b2:d1:a0:2f:eb:91:
                    3d:09:93:a5:0e:c4:ec:35:da:54:11:05:0d:08:44:
                    72:bd:c1:26:82:7b:2f:ca:43:65:6e:40:c0:08:1a:
                    86:b3:60:d0:a8:2f:ea:1a:7f:0e:5f:ce:e2:d1:45:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:58:8C:8D:2A:28:E3:B0:EC:FD:D4:96:7C:A7:83:CB:17:9D:D7:D3
            X509v3 Authority Key Identifier:
                keyid:8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:3e:43:81:d4:11:17:cc:5f:65:b3:3d:b4:00:99:ac:9f:6d:
         d3:a4:bc:79:6a:b5:fd:02:d4:b7:56:43:24:81:28:94:47:80:
         fc:12:5c:f4:5f:84:3d:d1:0d:d1:d8:82:87:c0:ba:6f:44:31:
         c9:f5:44:c6:73:c4:49:3d:39:d8:b8:92:02:a0:80:f9:d9:7b:
         ab:89:6f:0d:a8:ba:c9:39:f3:0a:65:da:5b:b0:67:79:a2:6d:
         92:5a:0e:7d:e1:96:0a:cb:39:69:f0:aa:33:ba:32:86:3c:50:
         d3:06:62:8d:ef:89:52:98:5b:d9:5f:e9:03:d9:88:83:f1:c1:
         d6:e7:54:6b:da:04:16:11:7a:b4:6b:e6:e6:42:3c:70:20:2d:
         9b:94:fc:52:b9:3f:c7:d4:73:77:1b:7a:ed:20:53:c6:04:9d:
         5c:dd:83:b8:06:c4:67:23:2d:cb:6c:a2:cd:55:9b:71:7e:80:
         90:8e:d4:6a:b3:52:25:ae:40:b2:a2:68:8b:96:e9:09:ec:80:
         50:f1:51:80:99:b1:40:f4:56:5c:aa:7a:e8:6a:0c:a5:e4:dc:
         d3:bf:20:c3:4f:3b:c7:91:da:09:cc:c1:c9:4b:5d:9a:20:c2:
         a9:9d:c7:9f:0b:62:51:b4:f4:11:7f:1a:98:27:74:e5:d1:f9:
         23:9b:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:20 2026 by rpki-client