Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa
File:                     3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (raw, json)
Hash identifier:          8gGQkutirDXD8N7BapuXn91tRtkNIPwIx69eLjqIVd4=
Subject key identifier:   C6:12:BD:8D:0C:94:F5:93:EE:35:27:E0:E9:AE:CE:69:99:C3:C4:7F
Certificate issuer:       /CN=58775F16B86C66299D9AF904F73786CD365D8787
Certificate serial:       5DB0ECD5F5AE678BAED78EA07C93908B4E6173B7
Authority key identifier: 58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa
Signing time:             Sun 03 May 2026 02:17:27 +0000
ROA not before:           Sun 03 May 2026 02:12:27 +0000
ROA not after:            Sun 02 May 2027 02:17:27 +0000
asID:                     141596
IP address blocks:        103.179.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl
                          rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b0:ec:d5:f5:ae:67:8b:ae:d7:8e:a0:7c:93:90:8b:4e:61:73:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58775F16B86C66299D9AF904F73786CD365D8787
        Validity
            Not Before: May  3 02:12:27 2026 GMT
            Not After : May  2 02:17:27 2027 GMT
        Subject: CN=C612BD8D0C94F593EE3527E0E9AECE6999C3C47F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:06:8f:c1:fd:57:20:11:a5:03:8b:b2:c9:
                    a6:9d:92:f8:be:3a:a0:82:d9:ae:61:34:2b:af:0c:
                    31:e1:d4:73:79:1c:ed:49:9a:56:68:b3:91:e4:2b:
                    90:54:0e:5e:fe:d1:d6:9f:97:cc:1f:eb:8e:5b:7d:
                    bc:78:07:57:24:b4:eb:85:76:a7:e2:a2:9e:98:62:
                    0e:72:0f:fb:a5:76:2e:43:a5:16:4d:fd:32:94:f8:
                    ba:da:b4:d7:54:75:8a:c7:44:4d:9d:4b:a5:07:fa:
                    ec:c0:95:d6:63:e6:b1:3a:52:b9:c5:bb:d7:1c:14:
                    cc:e3:5a:a2:34:f4:65:c1:fa:da:f4:04:a4:4f:0b:
                    b8:65:53:77:6a:7f:9c:82:b7:57:e1:cc:7e:dc:09:
                    02:b6:58:31:2c:de:7c:db:45:36:f8:38:9d:08:b1:
                    2f:7d:a5:66:0a:80:79:ba:c9:4e:37:96:68:e2:86:
                    20:54:53:12:89:22:bd:f0:8b:68:e9:b0:74:79:69:
                    41:df:04:c2:d6:b6:69:6f:fd:9f:5a:06:e8:44:58:
                    20:eb:2d:7d:81:a2:fa:c6:4c:a2:ba:1c:04:e3:1c:
                    89:fb:b5:81:9d:be:6c:bf:7b:35:bc:12:43:7b:c8:
                    6e:5b:6f:50:22:cf:3f:cf:0c:09:28:99:22:07:aa:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:BD:8D:0C:94:F5:93:EE:35:27:E0:E9:AE:CE:69:99:C3:C4:7F
            X509v3 Authority Key Identifier:
                keyid:58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:de:f0:75:27:2c:dd:30:73:d7:02:35:30:e9:59:ea:0c:0e:
         4d:7e:ef:8a:67:f7:06:db:96:d0:1a:6f:8e:58:51:f3:f3:07:
         aa:9b:76:23:a3:5d:0b:86:b0:f7:07:1a:67:64:b2:e8:7d:96:
         39:3f:dd:e2:0b:05:7c:e3:d4:fc:97:81:52:ce:cd:2e:61:fb:
         13:a0:77:12:da:12:21:c7:e9:20:4d:95:c6:60:1e:90:89:48:
         1b:b1:51:51:b9:bb:56:27:fc:2a:6e:18:83:e3:ca:f6:9c:4b:
         c0:cf:32:92:38:3a:93:d7:22:c2:91:66:3f:5c:75:d9:93:cd:
         67:e6:70:89:bc:9d:2f:0a:7d:b2:e7:bc:6a:97:db:7e:91:fd:
         b6:4d:c3:c9:85:bf:a1:84:b5:a8:3a:9a:0e:6a:e8:67:4f:b5:
         e5:1d:8e:90:a2:97:b4:25:51:b1:e5:24:bd:a5:39:fe:9a:80:
         c2:b0:af:7c:34:cb:e0:be:79:91:2d:bc:5e:6b:d4:76:a4:d0:
         0e:f4:d5:28:ec:30:90:42:e7:16:b1:6a:94:53:80:dd:b4:94:
         56:3a:19:b1:2a:03:de:32:50:86:75:5b:f2:4a:d3:5a:d3:b5:
         4a:34:47:e1:34:a9:f0:bd:8e:27:65:5c:31:8d:b7:6f:48:62:
         17:ee:3d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:42 2026 by rpki-client