Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa
File:                     3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (raw, json)
Hash identifier:          KKSmfUNkqalCLO37YcNIo/DR91Odj11Ccmn9dQDHPBE=
Subject key identifier:   42:91:37:63:73:AA:74:6E:04:F6:AF:73:9F:4F:9C:A7:A0:DB:89:F2
Certificate issuer:       /CN=8828D395B775E6267ED1C496B6DA870C9DA36235
Certificate serial:       43A7400DD71F4492DE7A513724BC404ECB1D2A49
Authority key identifier: 88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa
Signing time:             Sun 03 May 2026 02:16:50 +0000
ROA not before:           Sun 03 May 2026 02:11:50 +0000
ROA not after:            Sun 02 May 2027 02:16:50 +0000
asID:                     149342
IP address blocks:        103.179.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl
                          rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a7:40:0d:d7:1f:44:92:de:7a:51:37:24:bc:40:4e:cb:1d:2a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8828D395B775E6267ED1C496B6DA870C9DA36235
        Validity
            Not Before: May  3 02:11:50 2026 GMT
            Not After : May  2 02:16:50 2027 GMT
        Subject: CN=4291376373AA746E04F6AF739F4F9CA7A0DB89F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:dd:c0:be:c2:c5:58:43:b7:5c:ea:1a:25:
                    5e:e5:05:07:27:b2:af:ad:65:c0:a9:17:dc:24:32:
                    f5:bf:eb:41:b5:69:59:a8:32:36:b3:cb:c9:37:78:
                    7a:8c:a4:ac:b6:a2:8b:aa:94:11:a3:8c:2e:fa:7d:
                    91:f3:9d:b7:9f:29:c3:f1:32:01:da:34:0d:de:b5:
                    59:ac:b0:87:75:a5:c9:26:47:a1:ae:bf:bc:f0:c0:
                    23:f9:0b:9e:9c:ec:7e:40:1e:d0:cc:fb:11:46:73:
                    69:13:29:6a:eb:48:b2:d3:d5:71:71:97:3b:ad:a6:
                    85:34:bd:43:70:90:7d:3f:40:78:38:80:47:6e:a8:
                    d3:04:6f:58:a0:e4:0e:ba:06:bd:80:c5:fb:b3:4d:
                    bc:b2:d3:10:d3:f0:46:30:e3:31:cb:f2:b7:80:14:
                    5b:a5:a0:16:70:95:6e:ae:f6:fb:dc:7b:96:2a:66:
                    56:e8:4b:7b:8c:3b:64:5f:05:50:0d:82:58:9a:30:
                    f0:e2:19:1d:2a:06:14:07:95:93:ae:64:b1:4d:a7:
                    f8:60:1e:3a:8d:3c:9f:ce:e5:9f:fa:1d:87:05:42:
                    61:2b:22:c7:ec:23:8d:80:b2:09:ba:4b:f2:8f:e4:
                    d3:4f:21:94:50:d9:4c:df:fd:d6:e6:71:20:b7:47:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:91:37:63:73:AA:74:6E:04:F6:AF:73:9F:4F:9C:A7:A0:DB:89:F2
            X509v3 Authority Key Identifier:
                keyid:88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:1c:08:63:85:c9:8f:7e:b7:ff:05:6d:74:a9:66:64:3a:60:
         ee:f6:ed:40:39:8b:69:c3:48:33:0b:a4:d0:9c:e4:67:6e:3b:
         dd:c0:62:38:8b:f9:59:1f:2f:1a:90:65:0c:3c:2b:c8:ee:6d:
         89:10:bd:82:17:e1:66:ea:eb:46:34:92:56:fe:52:ce:39:42:
         82:c7:14:47:33:7c:db:81:13:51:95:f8:f9:81:b2:d9:4b:67:
         6e:4c:0f:16:ea:d9:9f:8a:98:54:9e:1d:8b:22:e7:c8:c2:82:
         87:3c:51:75:85:39:12:03:be:b2:09:3c:f3:f9:2d:bb:64:c2:
         e1:df:aa:75:f4:8a:ca:81:d9:a3:8d:1e:2c:77:35:7f:e6:bb:
         90:f2:81:37:52:30:ff:11:48:2d:0b:ad:b7:16:35:f8:d3:f5:
         0f:68:76:67:cd:5b:12:6b:8f:7c:c6:0f:b4:8a:b7:a1:24:f0:
         a0:c4:77:58:3a:6d:96:80:14:54:60:ac:34:7e:16:e4:aa:3e:
         d4:be:cf:38:ce:15:66:f7:0e:fd:f4:5a:95:42:57:71:d9:31:
         e5:86:22:e4:03:7f:ec:6b:e9:bc:16:29:e0:7c:38:8c:03:84:
         9b:37:72:23:df:6a:25:bb:af:cd:40:1c:70:fe:ab:7f:ed:0a:
         e0:2e:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:14 2026 by rpki-client