Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa
File:                     3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier:          tiLkhdsZaOrcZG1DisK5BBKtAsDDLSd1a7ljRi2LuI0=
Subject key identifier:   DB:4D:07:4B:1D:F2:C0:21:81:7A:4F:23:3C:4F:24:C3:63:47:C4:56
Certificate issuer:       /CN=2C54A4433C48711637614DBB101ACAC627FB4444
Certificate serial:       263518F376CC2BAF959A59BCDA43DF44C5C70A95
Authority key identifier: 2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa
Signing time:             Sun 03 May 2026 02:21:23 +0000
ROA not before:           Sun 03 May 2026 02:16:23 +0000
ROA not after:            Sun 02 May 2027 02:21:23 +0000
asID:                     135445
IP address blocks:        103.69.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl
                          rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:35:18:f3:76:cc:2b:af:95:9a:59:bc:da:43:df:44:c5:c7:0a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C54A4433C48711637614DBB101ACAC627FB4444
        Validity
            Not Before: May  3 02:16:23 2026 GMT
            Not After : May  2 02:21:23 2027 GMT
        Subject: CN=DB4D074B1DF2C021817A4F233C4F24C36347C456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:39:17:44:9b:49:4a:61:88:36:8d:e2:15:
                    d2:13:03:3f:48:62:32:d3:77:56:64:5c:e3:ea:a8:
                    4f:e2:88:36:58:b9:e8:ad:48:d5:6a:e3:39:62:91:
                    7c:02:ae:26:9e:57:f0:12:5e:71:20:0e:8e:57:a7:
                    d7:85:ed:e8:86:0e:30:9c:b8:e2:24:67:fa:19:a3:
                    52:df:9c:de:b0:97:b0:c5:bf:7f:8f:42:4e:69:64:
                    2e:98:10:aa:fd:20:4c:a8:7e:17:ac:6f:3c:2b:24:
                    8a:a3:f0:d9:71:da:49:b1:6d:48:d4:a9:30:4e:2a:
                    b9:c4:5f:cf:cd:94:71:5b:aa:6c:86:38:2e:7c:8f:
                    69:78:95:f0:03:79:8d:d8:45:0b:f0:77:eb:79:c0:
                    f6:3a:9a:89:cc:b0:a8:29:1e:b3:6f:f9:c3:71:93:
                    72:20:2f:b5:f7:fb:25:48:30:d5:8b:b4:e3:47:1a:
                    e8:33:1f:94:cf:5f:4b:5c:6c:6c:13:08:53:13:e9:
                    8b:a8:8d:ba:bb:d0:a3:71:37:f2:4d:bc:47:86:8c:
                    8b:9d:f4:37:b9:db:b0:23:91:ae:7c:a0:3f:61:d1:
                    49:04:47:b3:67:aa:96:56:c4:15:44:b0:38:b7:4a:
                    a7:d3:73:f9:9d:b9:08:86:98:05:54:91:83:40:3b:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4D:07:4B:1D:F2:C0:21:81:7A:4F:23:3C:4F:24:C3:63:47:C4:56
            X509v3 Authority Key Identifier:
                keyid:2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a3:28:24:af:7a:17:7f:85:e2:9c:6b:76:16:09:00:d2:4a:
         a4:5c:59:a2:ab:03:1f:58:3f:38:33:17:0e:41:f7:86:f7:09:
         32:02:35:d3:3b:00:bd:ec:47:b8:d3:e6:48:f5:29:fa:f2:0c:
         09:ea:f0:4f:c1:8e:9f:e1:d9:c8:58:51:72:ec:c2:0c:51:9e:
         27:e6:4a:bd:3e:d5:56:ce:99:f1:d1:99:84:79:ff:09:dd:79:
         27:84:5c:63:04:d2:bc:93:0b:75:00:0b:b2:3d:3d:59:0e:bf:
         a6:55:25:29:e1:c8:9d:4e:c3:da:a9:5c:9f:dd:50:87:5e:e8:
         d9:dc:76:42:d1:91:01:ba:c7:5f:f8:23:a1:03:25:55:df:fc:
         93:c4:87:89:30:18:e2:d5:6e:e8:62:81:0d:5b:ad:05:84:82:
         cd:86:36:00:60:22:24:22:2b:a9:27:ec:91:b6:f3:49:87:69:
         95:71:2e:09:09:64:eb:92:78:f9:0b:df:ba:62:dc:06:38:bb:
         f4:fe:7e:e8:14:56:d3:50:f2:a9:ab:0d:2a:99:f7:df:fc:2c:
         03:c1:d9:76:48:e7:58:0d:6f:22:df:65:99:2c:8b:bd:51:27:
         b2:ee:58:95:d4:72:f4:df:c6:8c:a3:2f:dc:7f:81:fe:0d:e7:
         c7:8a:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:07 2026 by rpki-client