Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137392e302f32342d3234203d3e203538383136.roa
File:                     3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          Z5Se0ZyJ7MpGnb/9is2oDoz8gpk4WBt/gi9IC5o2uZ8=
Subject key identifier:   44:19:51:A1:3F:74:FF:01:60:DF:71:10:C7:D1:08:B6:5B:BC:72:CC
Certificate issuer:       /CN=2C54A4433C48711637614DBB101ACAC627FB4444
Certificate serial:       3D8F4610A434C71EBE686CB8675841A451F7EDD7
Authority key identifier: 2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137392e302f32342d3234203d3e203538383136.roa
Signing time:             Sun 03 May 2026 02:21:24 +0000
ROA not before:           Sun 03 May 2026 02:16:24 +0000
ROA not after:            Sun 02 May 2027 02:21:24 +0000
asID:                     58816
IP address blocks:        103.69.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl
                          rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8f:46:10:a4:34:c7:1e:be:68:6c:b8:67:58:41:a4:51:f7:ed:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C54A4433C48711637614DBB101ACAC627FB4444
        Validity
            Not Before: May  3 02:16:24 2026 GMT
            Not After : May  2 02:21:24 2027 GMT
        Subject: CN=441951A13F74FF0160DF7110C7D108B65BBC72CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:91:8f:ba:aa:56:a5:6c:0c:02:95:57:73:
                    f1:c6:41:85:04:0a:89:08:b1:1e:85:d6:14:ca:d7:
                    5a:29:e1:a3:b9:52:82:74:5d:4a:85:fe:d3:22:19:
                    84:0c:60:31:e8:91:32:43:7f:00:5e:15:87:31:09:
                    89:f8:32:e7:fb:e3:30:88:54:62:03:b0:22:ef:67:
                    67:57:6f:64:96:10:cd:00:43:41:14:96:b6:a3:da:
                    97:7b:e6:d6:ca:3e:02:23:e1:fa:61:ae:2e:3c:bf:
                    a8:46:28:a3:9f:f9:33:1f:24:34:7d:40:f6:2f:0e:
                    81:ef:5c:d7:ba:92:71:d8:2c:42:f3:d7:4e:09:36:
                    48:ed:58:e8:6f:5f:ff:a9:bb:c6:2f:23:79:21:62:
                    03:b6:fa:50:d7:50:ec:d6:4f:33:e2:a5:3f:ed:e8:
                    db:f3:10:42:af:62:4f:8f:2c:84:7a:c4:8e:b1:e9:
                    4a:9f:f7:95:ed:04:ed:32:0b:5a:6e:1d:c0:66:6e:
                    65:cd:2e:90:c5:d8:30:83:21:db:10:e5:3d:db:df:
                    da:93:5a:64:b2:7e:a0:2e:00:01:40:df:ed:8e:58:
                    ba:35:b3:91:81:af:08:45:08:ee:ab:cb:84:ca:90:
                    ef:48:b5:91:aa:b6:4e:9b:5f:f0:e1:8f:d0:e6:c2:
                    2b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:19:51:A1:3F:74:FF:01:60:DF:71:10:C7:D1:08:B6:5B:BC:72:CC
            X509v3 Authority Key Identifier:
                keyid:2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137392e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:f8:ec:ac:b5:1a:38:a5:64:3d:a6:c8:f4:9e:27:06:2c:74:
         79:95:ee:0f:48:6f:d0:ab:4a:82:ad:d9:e3:60:62:cc:de:dd:
         58:a8:9e:dd:de:8c:d0:2e:b4:58:f3:b7:d7:c7:db:c2:ba:a1:
         2b:f2:fc:cc:ef:5f:4f:a8:ea:b7:4a:40:8d:f1:08:4b:52:06:
         fa:6b:d7:49:12:5e:10:cc:d3:7f:17:48:23:fd:2d:ee:73:1b:
         5f:ed:f5:74:ef:a7:92:25:6e:a2:1c:24:de:dc:1d:f9:98:1b:
         ec:97:89:fa:2d:5e:e4:fb:5c:20:a4:79:f9:4d:c4:3f:0a:11:
         ee:ac:6c:bd:8d:58:9b:19:f9:4d:46:c5:6c:8c:d2:c4:0c:8a:
         12:2d:0b:28:64:bf:38:10:d9:a5:70:30:66:63:c8:8d:1e:8a:
         27:e3:05:83:68:ac:02:eb:c7:5a:45:e8:58:50:84:6b:25:31:
         e6:96:72:4f:bf:c6:1f:6a:4a:f8:12:e5:d0:fa:aa:b1:c6:d3:
         a9:e8:7f:c6:48:18:23:8c:2b:58:f6:ec:5a:0b:d1:0b:a6:25:
         1a:a0:f0:80:8e:10:e1:24:6f:df:a6:dd:24:22:60:59:57:f7:
         a5:a7:9d:ae:62:ef:4e:d1:10:3b:31:37:86:15:80:f7:82:51:
         60:1b:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:43 2026 by rpki-client