Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa
File:                     3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (raw, json)
Hash identifier:          FfhEpyiIA9Zvturja6+USFcLN/+BV2bB6cgYWMdWgys=
Subject key identifier:   B8:02:09:C5:05:39:97:59:FF:4B:5C:71:8E:5B:55:CE:90:6B:D1:66
Certificate issuer:       /CN=E4E77812E2CFA75939A641BB7F633F97582E6792
Certificate serial:       3AA205989915ACF612491D5AE3EB95987EF24B2A
Authority key identifier: E4:E7:78:12:E2:CF:A7:59:39:A6:41:BB:7F:63:3F:97:58:2E:67:92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa
Signing time:             Sun 03 May 2026 02:19:53 +0000
ROA not before:           Sun 03 May 2026 02:14:53 +0000
ROA not after:            Sun 02 May 2027 02:19:53 +0000
asID:                     131773
IP address blocks:        103.134.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.crl
                          rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a2:05:98:99:15:ac:f6:12:49:1d:5a:e3:eb:95:98:7e:f2:4b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E77812E2CFA75939A641BB7F633F97582E6792
        Validity
            Not Before: May  3 02:14:53 2026 GMT
            Not After : May  2 02:19:53 2027 GMT
        Subject: CN=B80209C505399759FF4B5C718E5B55CE906BD166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:f3:81:bb:86:43:09:d0:78:f6:c9:56:6f:
                    f5:37:6d:5e:aa:47:e7:d0:36:c5:2a:a7:dc:97:eb:
                    c4:85:d3:a3:fd:75:5a:41:16:be:5d:f7:77:74:ff:
                    35:02:1f:ef:8b:b9:8f:80:2d:44:ab:eb:d9:9d:51:
                    af:2a:10:5d:91:25:6b:61:c7:69:6f:2c:05:f0:17:
                    74:83:65:2c:da:e8:eb:3d:b8:f7:39:83:d5:2a:45:
                    60:32:71:bc:12:ee:c3:48:2a:ff:ed:61:c4:df:c9:
                    d4:07:7a:56:85:45:1f:2a:f4:d3:53:61:e9:7e:75:
                    54:9d:2a:6e:38:cf:14:45:2a:39:6e:d6:87:80:e8:
                    36:97:9f:b3:c5:59:7b:4c:ac:fc:45:5d:6c:5f:05:
                    30:27:c2:e8:30:0a:05:ea:11:d6:34:27:a1:ea:96:
                    d8:0d:15:ec:6b:8e:07:d2:c4:13:c8:8d:84:8a:75:
                    8b:bc:56:e8:6c:19:98:03:e4:14:86:03:27:13:72:
                    c5:24:55:f7:2d:7a:a8:31:42:01:92:2b:75:15:ca:
                    6a:6e:52:b7:82:02:0f:88:b1:69:d1:e9:9d:9c:87:
                    25:a3:93:82:3d:c2:89:8e:cd:fa:34:51:5c:1c:21:
                    1b:4b:ba:4c:52:bc:5c:78:e3:41:c6:66:72:be:0c:
                    5e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:02:09:C5:05:39:97:59:FF:4B:5C:71:8E:5B:55:CE:90:6B:D1:66
            X509v3 Authority Key Identifier:
                keyid:E4:E7:78:12:E2:CF:A7:59:39:A6:41:BB:7F:63:3F:97:58:2E:67:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:6e:ba:61:e0:b2:b2:e8:b8:61:ae:f4:a9:06:23:db:56:b3:
         22:55:93:89:38:97:40:5c:07:6e:6f:c0:b8:80:54:a0:c8:9f:
         ef:ff:fd:ea:74:40:88:5f:c3:da:54:bd:57:d7:03:b2:ed:8a:
         7e:97:97:0d:bc:c0:bb:c3:7a:8d:ad:6e:b6:4b:c1:8e:c3:80:
         1a:6b:1b:1b:aa:a0:4a:8b:29:1f:9e:e6:eb:d6:75:19:59:d0:
         72:b9:1f:6e:e2:05:ce:76:43:26:ef:c9:6f:04:39:d1:09:fe:
         49:54:58:a2:a5:f3:5c:b9:eb:e1:1d:bd:5c:3e:bf:ca:22:19:
         41:be:9b:23:6e:f6:ee:e2:90:31:1d:00:e9:21:24:14:0a:66:
         7a:bf:b6:d9:f3:ac:16:03:b7:bb:c3:18:9a:65:3c:4a:86:00:
         d2:10:66:f1:33:30:24:7d:ab:23:42:b9:6a:6f:e2:63:a6:a1:
         37:1d:62:25:a1:fa:8a:71:29:7c:0f:48:dc:35:2d:5a:3d:7e:
         4d:dc:50:0f:d2:12:7b:1c:9d:cb:d3:db:f9:6d:02:63:e9:37:
         c4:b4:51:71:59:90:62:6a:2e:66:1d:e6:6c:f2:4e:f0:4c:3b:
         7e:da:8d:3b:d1:82:78:eb:6d:de:81:e7:91:4c:e2:15:f1:e7:
         ca:4f:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:17 2026 by rpki-client