Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa
File:                     3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (raw, json)
Hash identifier:          rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=
Subject key identifier:   33:E9:78:7A:0E:C8:E1:84:42:97:50:04:66:B6:96:5A:C9:0A:9F:09
Certificate issuer:       /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032
Certificate serial:       7C0E1B21755C8ED60164063A4120F3BA6CBAAD64
Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa
Signing time:             Sun 03 May 2026 02:14:50 +0000
ROA not before:           Sun 03 May 2026 02:09:50 +0000
ROA not after:            Sun 02 May 2027 02:14:50 +0000
asID:                     141674
IP address blocks:        103.177.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl
                          rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0e:1b:21:75:5c:8e:d6:01:64:06:3a:41:20:f3:ba:6c:ba:ad:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032
        Validity
            Not Before: May  3 02:09:50 2026 GMT
            Not After : May  2 02:14:50 2027 GMT
        Subject: CN=33E9787A0EC8E1844297500466B6965AC90A9F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:58:01:3d:61:84:34:cc:92:7d:53:1d:f7:
                    07:b4:4e:cf:b0:14:10:0b:be:2b:b6:72:a0:55:92:
                    f8:ae:c3:3d:ec:78:85:4f:98:c5:89:36:4c:3f:a7:
                    16:24:90:04:98:30:36:cd:19:ce:3c:7d:54:cc:84:
                    bc:c0:81:af:3e:f1:72:09:92:cb:c6:c1:83:02:7b:
                    30:f9:ae:77:9f:47:ed:44:e7:39:06:68:82:ab:e7:
                    f5:68:b6:30:a0:bf:2f:a8:3e:1f:12:bc:ca:24:37:
                    b3:4e:6d:28:e8:1b:71:27:02:f0:f5:d7:4e:e1:8a:
                    bc:fa:8e:80:33:75:95:3b:ff:56:04:1c:25:ce:42:
                    f9:e9:82:a4:3f:1c:2c:ad:60:20:7e:77:0d:60:72:
                    e1:03:9f:eb:08:ee:6a:5a:5f:1b:4c:1b:3d:b8:50:
                    cc:5a:29:cc:ed:5c:e9:bf:64:30:e9:93:09:41:d0:
                    99:8e:b8:f6:9f:06:72:bf:b0:80:06:8f:9a:56:82:
                    59:43:da:03:01:21:88:6c:ae:39:88:07:f3:3c:77:
                    fe:b5:a6:a3:43:c8:70:3f:b3:28:b2:8c:02:b7:67:
                    56:fc:ac:ad:dd:62:d0:3a:a4:d9:75:88:cd:4a:9c:
                    45:df:a9:68:4a:8b:a5:8d:82:c3:bd:21:4d:ea:e5:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E9:78:7A:0E:C8:E1:84:42:97:50:04:66:B6:96:5A:C9:0A:9F:09
            X509v3 Authority Key Identifier:
                keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:9a:3f:6d:55:f4:04:31:f8:8f:63:d7:40:62:02:eb:e6:95:
         06:09:32:3c:b2:80:71:49:23:53:ed:29:b1:a3:d6:77:77:0c:
         34:5e:65:8a:d0:bc:aa:a9:69:24:6a:de:5c:c5:c4:c9:0d:3a:
         d0:02:cb:ab:16:5b:2d:07:6f:b4:50:d7:28:6f:19:ae:9c:9b:
         79:6f:cb:47:35:03:a6:c8:81:d7:51:40:c0:d2:05:68:af:07:
         be:12:6f:d5:f9:a2:f7:fe:35:2e:ea:e1:43:53:33:fe:cc:d2:
         a8:1b:8f:3b:90:9b:1c:8f:48:39:06:03:06:fa:24:b2:a1:ec:
         b7:ff:15:8e:a4:68:aa:2b:1b:53:02:79:e0:70:72:7c:22:db:
         71:eb:7f:7d:54:00:07:ed:41:51:c9:16:89:b3:82:e5:26:65:
         1c:79:35:33:fe:61:9a:2c:81:37:59:39:00:97:ff:23:b4:f5:
         fb:5e:43:ac:f8:e5:7a:8d:37:86:83:6d:d6:4f:ec:11:dd:55:
         16:d3:22:21:ce:be:cc:f5:36:2f:13:29:d0:8b:ff:32:1b:4c:
         d5:40:fd:62:ef:c7:b9:da:16:ef:88:46:a6:c4:7d:d3:57:52:
         ac:b9:f4:e4:c2:9b:0d:5b:7c:a9:c6:fe:11:fb:b2:64:30:86:
         1e:a6:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:09 2026 by rpki-client