Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa
File:                     3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (raw, json)
Hash identifier:          DSYc7pVKbHIfveW5SkkYCHzEWtZN+Ia+cl23XhbufI8=
Subject key identifier:   98:73:FC:BC:B0:33:94:C5:BC:08:A0:A2:49:EC:93:DD:EC:B5:2B:5B
Certificate issuer:       /CN=58775F16B86C66299D9AF904F73786CD365D8787
Certificate serial:       0B6448E9DD3BEA73F0D2CA46978FA3B3B32D7AC8
Authority key identifier: 58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa
Signing time:             Sun 03 May 2026 02:17:28 +0000
ROA not before:           Sun 03 May 2026 02:12:28 +0000
ROA not after:            Sun 02 May 2027 02:17:28 +0000
asID:                     141596
IP address blocks:        103.179.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl
                          rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:64:48:e9:dd:3b:ea:73:f0:d2:ca:46:97:8f:a3:b3:b3:2d:7a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58775F16B86C66299D9AF904F73786CD365D8787
        Validity
            Not Before: May  3 02:12:28 2026 GMT
            Not After : May  2 02:17:28 2027 GMT
        Subject: CN=9873FCBCB03394C5BC08A0A249EC93DDECB52B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:52:d0:97:fc:30:02:3d:a2:60:be:89:8c:
                    08:5f:dd:bb:eb:fa:f6:d9:43:24:8c:43:b6:29:2b:
                    13:61:dc:15:5e:a5:bd:a3:fb:ba:56:c9:1d:10:c0:
                    50:76:c3:3c:82:02:e2:7c:53:49:68:1d:7b:8b:1d:
                    bc:ea:63:f0:99:6b:d4:28:1f:cd:5a:ed:e7:c4:3a:
                    4b:f7:bc:01:09:f6:60:89:28:32:70:f6:2c:af:1f:
                    13:48:26:d5:26:18:9c:a1:52:ce:7f:47:fc:9f:2c:
                    55:38:d0:31:09:7c:2c:c9:03:41:e3:1b:7f:37:17:
                    46:74:1e:9c:7b:26:e4:00:e2:fd:ab:68:c8:48:d8:
                    5e:72:f6:3f:21:82:0b:9b:13:9a:89:14:0a:63:4b:
                    9d:31:1a:b0:0f:24:a0:76:86:aa:bd:63:30:22:84:
                    62:36:91:a7:37:e2:e8:15:4b:d3:7a:e9:56:85:87:
                    8f:c1:a0:51:05:96:55:ec:67:8f:1a:c8:2b:90:25:
                    bd:33:cf:31:7a:2c:09:31:24:f9:2c:01:2d:4c:b4:
                    29:01:10:ca:a6:c8:7b:09:0e:57:36:a9:70:a9:e6:
                    78:9e:be:6a:1c:fd:b0:40:a3:7d:ab:3d:78:58:cf:
                    43:af:01:97:b5:b7:96:67:4d:b5:96:ff:47:79:4e:
                    df:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:73:FC:BC:B0:33:94:C5:BC:08:A0:A2:49:EC:93:DD:EC:B5:2B:5B
            X509v3 Authority Key Identifier:
                keyid:58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:27:63:75:bb:47:97:32:03:41:36:4c:50:f0:5a:0d:4b:55:
         ec:57:b9:73:8b:23:33:5d:77:db:19:ef:66:bd:0d:61:d7:10:
         b4:a6:e8:fe:2c:8d:06:5b:47:dd:ea:f9:ee:1d:4c:c7:c1:22:
         8b:cd:54:99:a1:8b:06:e0:9f:07:53:3d:7d:4a:62:e5:80:7a:
         23:b4:28:3a:f4:31:ec:cb:2d:7c:e5:9f:20:2a:62:65:45:7c:
         d9:4e:06:89:4c:85:80:f2:92:a2:2e:fa:c2:ef:f3:8d:e1:46:
         94:cb:d4:b8:1b:6e:1f:02:72:d1:a7:42:83:93:18:21:56:fa:
         85:67:25:98:90:b5:6b:b4:d6:4e:ce:30:4e:d1:04:69:bf:dc:
         93:35:73:d1:2a:c3:6a:3f:0d:4b:8e:45:af:f5:2d:db:a6:eb:
         3a:73:94:c8:41:41:e7:6a:d9:7a:89:52:dc:37:51:8e:39:3a:
         4c:ab:1c:84:b6:1a:30:8f:35:ae:1b:5a:6b:58:c3:b3:4a:37:
         af:fc:0b:c1:64:48:79:38:c2:16:d0:a1:cc:3c:d4:4a:ba:af:
         ea:52:5f:00:53:57:37:50:6b:56:83:ad:fb:4c:c3:78:ec:29:
         91:12:6e:b5:20:6f:c2:f2:af:de:f6:f5:cc:c9:f5:d9:04:4e:
         21:a7:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:42 2026 by rpki-client