Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa
File:                     3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier:          WB2X6Qgdpit+yQSWxUcjxbLeviD7P5xB5Bfdmss/apw=
Subject key identifier:   FA:B8:0A:27:5D:14:51:00:BC:37:9C:75:16:AA:80:E9:44:C6:0F:82
Certificate issuer:       /CN=2C54A4433C48711637614DBB101ACAC627FB4444
Certificate serial:       478E6E1C280388A1D920E13D7C6BC3D2ABE10271
Authority key identifier: 2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa
Signing time:             Sun 03 May 2026 02:21:23 +0000
ROA not before:           Sun 03 May 2026 02:16:23 +0000
ROA not after:            Sun 02 May 2027 02:21:23 +0000
asID:                     135445
IP address blocks:        103.69.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl
                          rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8e:6e:1c:28:03:88:a1:d9:20:e1:3d:7c:6b:c3:d2:ab:e1:02:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C54A4433C48711637614DBB101ACAC627FB4444
        Validity
            Not Before: May  3 02:16:23 2026 GMT
            Not After : May  2 02:21:23 2027 GMT
        Subject: CN=FAB80A275D145100BC379C7516AA80E944C60F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:3b:26:31:39:c0:5c:d2:ef:7e:8d:2e:31:
                    7c:5f:2b:18:c9:43:02:e3:31:93:a4:e6:f1:ff:6d:
                    b2:56:cb:37:4d:30:1b:9f:df:24:6c:4c:a8:78:3a:
                    78:22:d8:c7:97:35:2c:46:3f:b9:5b:00:a7:49:aa:
                    99:24:48:67:42:1c:98:89:96:6c:5f:c0:bf:df:e0:
                    a1:7e:6b:6e:d4:8c:60:e0:83:d8:51:a0:3e:cd:4e:
                    45:c4:55:ba:2d:f7:a5:3d:ba:53:91:1c:ce:23:d9:
                    79:89:88:68:0f:a6:c7:75:20:31:eb:c6:98:9d:94:
                    ae:ef:c5:aa:7c:6f:df:59:93:d7:f5:ec:ec:8a:24:
                    36:c9:72:e8:53:e9:06:94:b4:26:d6:8a:d7:ec:8b:
                    8c:ea:7f:c2:d6:df:1c:f1:74:5d:9a:29:d4:d2:4b:
                    5c:44:65:d1:4e:e0:2d:24:07:f1:5f:b0:2f:c9:d1:
                    68:a5:9a:79:b0:7e:1e:0d:a6:d0:b3:f2:fb:73:00:
                    cb:1a:e9:a0:14:da:ce:6b:7a:aa:ec:c2:9e:ba:09:
                    19:53:71:58:b7:98:b3:1e:b9:28:78:b5:73:3c:db:
                    da:a9:01:81:f6:ca:85:a1:4d:45:f3:b2:55:d4:32:
                    a7:ab:0d:be:70:bf:60:4f:4c:41:f9:e2:d3:ec:f0:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B8:0A:27:5D:14:51:00:BC:37:9C:75:16:AA:80:E9:44:C6:0F:82
            X509v3 Authority Key Identifier:
                keyid:2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:e5:08:ca:32:91:36:68:2b:04:66:14:ea:92:bc:37:4a:
         82:42:e2:af:dc:9f:f9:76:23:3e:0c:2b:d7:cb:cc:b7:82:20:
         53:bd:4f:1e:79:e2:94:11:6b:60:91:34:88:95:bb:4e:82:27:
         4e:33:b3:83:88:e2:4b:d8:5c:ae:41:77:0b:2d:cd:e4:ce:a1:
         9b:28:58:45:a1:5f:1c:c7:47:0a:87:c7:bc:81:9d:68:b7:f1:
         78:06:1e:f0:34:2b:82:89:1e:d8:de:8f:a5:0b:a1:32:47:74:
         17:9b:00:73:7b:0c:ea:81:73:a5:97:11:b1:d2:1b:e3:54:47:
         17:88:61:6a:a0:30:38:77:90:e3:e2:5a:cc:3e:c0:05:9d:c2:
         55:55:29:18:44:05:1d:05:10:b7:46:0c:8c:b9:a6:e1:c0:ab:
         35:96:6f:3f:97:6a:80:7e:06:27:24:8d:eb:16:a7:60:ea:9f:
         49:38:24:f2:b3:7f:a4:fd:d7:49:f3:f2:f6:a8:51:3d:b9:3f:
         fb:42:7f:ef:33:9a:99:fb:e0:8f:0d:ca:14:69:0a:69:f5:56:
         2f:ff:eb:19:0f:04:e3:3e:9a:6a:e6:d7:3d:95:6f:2a:ca:c6:
         a7:d6:1d:a1:cb:b2:2b:9c:de:2e:78:e2:23:14:5e:f8:85:45:
         93:60:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:45 2026 by rpki-client