Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa
File:                     3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier:          2v6AMpNtT36N+lxeEfOKLphNuqWcfTuxj7afAFOZ0ps=
Subject key identifier:   3B:BF:35:38:45:7D:46:D5:CD:B3:DC:71:E4:A5:BF:DA:41:0B:2C:1E
Certificate issuer:       /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032
Certificate serial:       3C049C6466A73448ADEDCF5C0D4FFB5F0A871DB5
Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa
Signing time:             Sun 03 May 2026 02:14:50 +0000
ROA not before:           Sun 03 May 2026 02:09:50 +0000
ROA not after:            Sun 02 May 2027 02:14:50 +0000
asID:                     141674
IP address blocks:        103.177.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl
                          rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:04:9c:64:66:a7:34:48:ad:ed:cf:5c:0d:4f:fb:5f:0a:87:1d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032
        Validity
            Not Before: May  3 02:09:50 2026 GMT
            Not After : May  2 02:14:50 2027 GMT
        Subject: CN=3BBF3538457D46D5CDB3DC71E4A5BFDA410B2C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:c7:48:26:c8:27:1c:82:d7:41:5b:99:1b:
                    67:e9:7a:3b:d0:40:91:6d:27:6b:61:cb:d1:ab:ae:
                    28:a6:44:5f:0d:d0:8e:d4:da:14:1e:2a:b7:ea:ee:
                    37:26:a9:b1:1f:c9:38:ef:2d:7f:24:7b:a4:36:07:
                    f5:62:dc:90:20:cb:58:9f:7f:8f:83:bb:17:81:83:
                    ff:f3:65:2f:1d:df:20:76:c8:23:85:6d:0a:c8:00:
                    54:fe:42:57:e1:61:23:34:42:d8:05:29:b9:2c:75:
                    55:05:2c:ec:9f:06:aa:60:75:76:9f:a5:60:b5:9a:
                    66:68:1c:22:33:aa:4d:6f:78:7e:14:72:1a:e4:66:
                    6e:16:d4:39:91:ab:66:04:97:9b:75:9a:cc:7a:0e:
                    95:2b:f0:97:fa:6e:e4:0d:a6:2a:66:9f:c5:bb:d5:
                    8a:2a:fc:36:98:1b:86:42:21:5c:1d:ed:c7:4e:ef:
                    38:c1:19:9b:8a:b7:52:ba:a2:45:d4:74:15:04:c8:
                    70:9c:40:38:a0:16:60:2e:d2:8e:90:87:44:9e:26:
                    a2:47:b8:3a:6f:56:78:b5:53:2d:3d:39:02:24:14:
                    f0:71:67:d7:2d:8a:b9:e1:48:3e:68:37:ac:34:b8:
                    94:cb:0a:48:69:c7:26:d6:fd:26:06:57:eb:58:5d:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BF:35:38:45:7D:46:D5:CD:B3:DC:71:E4:A5:BF:DA:41:0B:2C:1E
            X509v3 Authority Key Identifier:
                keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:5c:59:4e:86:b7:cb:94:f1:6f:a7:24:f5:a0:a2:fa:fd:2e:
         19:42:df:07:3f:64:aa:6e:a9:4f:4e:16:d1:f3:4f:c9:6a:fe:
         00:4b:41:68:d9:d4:99:f8:0a:66:13:ec:fd:99:29:e9:08:13:
         e0:d2:4a:50:65:11:a1:1e:a0:91:8c:d7:ee:d3:e3:90:db:23:
         92:a3:9e:03:2d:18:07:a8:af:92:89:3a:7f:1f:f0:84:d6:a2:
         fd:9c:d1:27:42:ad:75:b8:a9:e2:91:fe:1b:3a:5e:f2:89:3d:
         0e:2d:62:7d:f4:2d:9e:be:03:6f:dd:38:ef:5c:14:61:9d:9d:
         4d:47:7a:61:f6:59:79:7d:dd:33:9b:fd:9c:c0:1a:0f:e2:7b:
         99:8d:3d:9b:74:bd:13:93:89:8d:1a:d6:9b:b3:9c:39:31:25:
         bc:a2:04:9b:e3:04:0a:a9:28:8c:b0:bc:74:1e:a1:ae:42:ac:
         7a:ec:94:2b:e8:a1:33:f8:84:18:c6:68:bc:bb:5c:91:b1:c3:
         72:29:54:9e:b5:ff:35:b5:b3:d0:d3:91:e4:bd:2c:90:d5:06:
         15:a5:2b:48:00:5b:a1:4b:05:cb:a3:15:20:35:e5:8f:66:a4:
         28:f4:1c:b2:bd:52:c9:fa:70:0c:28:72:a2:fd:21:55:7c:9b:
         e2:ef:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:12 2026 by rpki-client