Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa
File:                     3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier:          0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=
Subject key identifier:   21:CC:00:D8:BF:AD:81:BF:59:77:7F:5E:67:69:91:55:95:E1:4B:3D
Certificate issuer:       /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032
Certificate serial:       01A70BBC575AB74A59CB56999CC514059FFF71F3
Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa
Signing time:             Sun 03 May 2026 02:14:50 +0000
ROA not before:           Sun 03 May 2026 02:09:50 +0000
ROA not after:            Sun 02 May 2027 02:14:50 +0000
asID:                     141674
IP address blocks:        103.177.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl
                          rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a7:0b:bc:57:5a:b7:4a:59:cb:56:99:9c:c5:14:05:9f:ff:71:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032
        Validity
            Not Before: May  3 02:09:50 2026 GMT
            Not After : May  2 02:14:50 2027 GMT
        Subject: CN=21CC00D8BFAD81BF59777F5E6769915595E14B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:fd:6c:4f:32:b5:93:29:92:55:e3:27:fd:
                    c1:a1:73:65:40:ab:d3:37:f7:55:d8:c4:02:6a:6f:
                    2d:9f:e7:ff:79:bc:5b:d4:12:4e:05:2c:b7:72:94:
                    38:dc:40:68:b0:f1:1e:07:88:fe:c2:6d:70:e6:8e:
                    27:69:71:13:ef:df:f0:d0:51:0d:52:0c:f8:0d:3d:
                    0b:51:b4:72:19:ea:d8:03:36:d9:fe:18:0a:7c:73:
                    00:42:57:eb:e2:57:94:04:52:98:d8:92:1b:be:21:
                    e9:b3:f2:b5:6c:f2:99:8d:4a:10:c5:c2:35:62:5f:
                    75:94:18:63:4f:01:82:14:1d:20:25:bb:95:b5:b5:
                    09:98:57:ba:fb:eb:09:d4:bb:12:d8:4d:e0:50:fe:
                    1f:12:c2:23:87:cd:1d:d7:ad:64:25:69:3f:21:2e:
                    c5:e8:4a:e3:6c:78:d2:0d:d6:e3:c5:6c:7a:2b:13:
                    81:83:13:ec:4c:36:ae:66:42:be:c6:0e:51:21:ff:
                    68:a7:1b:01:4b:1c:1a:0c:05:f5:b8:61:8c:1c:39:
                    05:1b:ce:99:fb:a0:84:2e:6a:e7:33:34:fe:04:65:
                    68:30:75:09:f4:c9:9d:8c:7f:0a:2f:fb:2e:ee:b8:
                    dd:1e:22:cc:e4:92:6e:98:00:b6:5a:73:b1:16:70:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CC:00:D8:BF:AD:81:BF:59:77:7F:5E:67:69:91:55:95:E1:4B:3D
            X509v3 Authority Key Identifier:
                keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:dd:76:7f:34:82:a5:a8:c2:e4:b8:dc:7f:88:de:29:c7:
         0d:20:64:9d:5e:f2:a3:6c:5f:0e:01:33:00:0b:ee:d7:69:32:
         ab:02:65:92:80:8e:d9:ad:d0:1d:2c:9c:63:8b:84:56:0a:5a:
         7e:4f:1a:ad:5c:41:b6:55:9c:ec:6d:a3:33:de:f0:6a:56:d6:
         f0:81:63:ce:56:cb:cf:5d:d3:cb:2e:c7:ca:1e:da:ca:55:cb:
         b8:85:5f:8e:d4:b4:d4:42:b5:be:87:f0:47:61:c9:e0:53:3d:
         db:c3:44:75:3a:ec:13:21:f6:9c:0f:80:fb:52:e5:24:e8:b1:
         9e:6d:2b:b9:48:2b:7f:ee:13:70:2c:ab:9a:0e:ba:dd:b4:4b:
         50:70:7b:f2:00:73:6f:1a:e1:ce:e4:19:8e:e8:35:16:6a:37:
         0b:1b:91:d2:68:8e:6e:36:de:51:87:e2:a4:29:b6:a1:f9:42:
         b2:c1:6b:aa:cc:9a:25:57:9e:ac:7f:23:b1:05:1e:21:92:c2:
         ab:6b:df:2f:eb:45:65:47:5d:8a:fe:1c:91:d8:b1:e1:a5:21:
         b8:ef:b9:e1:e3:f1:20:b2:fc:e1:6a:3a:38:64:4f:50:19:42:
         63:a5:1d:05:30:56:74:5d:e7:35:82:9f:d7:62:8e:7b:9f:1d:
         10:c2:c6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:34 2026 by rpki-client